mirror of
https://github.com/BaaRai/ARTEX.git
synced 2026-11-13 11:40:53 +08:00
BaaRai
e233c02314
Comments, doc comments, UI labels, log and error messages, LLM prompt strings, markdown docs, test data and assertions. Identifiers, enum keys, routes, placeholders and code structure are unchanged. Notes: - docs/漏洞流量证据.md renamed to docs/vulnerability-traffic-evidence.md - tests that exercised CJK specific handling (GBK zip names, Chinese full text search) now use ASCII equivalents; go build passes and the test suite matches the pre translation baseline (remaining failures need a PostgreSQL DSN and fail identically on the original) - frontend mention syntax now uses English kinds (finding, asset, ...) matching the backend, chat mentions tests pass
49 lines
2.7 KiB
Docker
49 lines
2.7 KiB
Docker
# syntax=docker/dockerfile:1
|
|
#
|
|
# Runtime image (no compilation inside the image): install common tools only and ship
|
|
# a **pre-built Linux single binary**. The binary is cross-compiled by the CI binaries
|
|
# job (pure Go, no QEMU) and placed at dist/<TARGETARCH>/artex in the build context.
|
|
# This way multi-arch builds only need to emulate the apt layer for arm64 instead of
|
|
# emulating the Next/Go compilation, which is much faster.
|
|
#
|
|
# To build the image manually, prepare the binary yourself first:
|
|
# cd web && npm run build:static && cd ..
|
|
# cp -r web/out server/webui/dist
|
|
# CGO_ENABLED=0 GOARCH=amd64 go build -tags embedui -o dist/amd64/artex ./cmd/artex
|
|
# docker build -t artex:local .
|
|
FROM python:3.12-slim-bookworm
|
|
ARG TARGETARCH
|
|
# Common tools: ripgrep / curl / vim, plus a set of recon staples (add/remove as needed).
|
|
# Node 20.x comes from NodeSource: bookworm's apt nodejs is 18, but Playwright requires >=20.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates ripgrep curl wget vim git jq unzip \
|
|
dnsutils iputils-ping netcat-openbsd inetutils-telnet whois nmap \
|
|
&& curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
|
|
&& apt-get install -y --no-install-recommends nodejs \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
# Preinstall Playwright MCP and CLI (globally) so no npx network download is needed at runtime.
|
|
# @playwright/mcp: browser MCP runs directly via `npx @playwright/mcp` (installed globally, no -y/@latest needed).
|
|
# @playwright/cli: provides playwright-cli, verified with --help right after install.
|
|
# Then install playwright (browser management) and preinstall chromium plus its system
|
|
# dependencies via --with-deps, so MCP/CLI work on first start inside the container
|
|
# without downloading browsers over the network.
|
|
RUN npm install -g @playwright/mcp@latest @playwright/cli@latest playwright@latest \
|
|
&& playwright-cli --help \
|
|
&& playwright install --with-deps chromium \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
WORKDIR /app
|
|
# pre-built binary for the matching architecture (dist/amd64/artex or dist/arm64/artex)
|
|
COPY dist/${TARGETARCH}/artex /app/artex
|
|
# Daemon startup script: decides whether to relaunch the process based on its exit code;
|
|
# the in-page one-click update relies on it to swap the binary. It also forwards SIGTERM
|
|
# to artex — docker stop only signals PID 1; without forwarding, artex never receives it,
|
|
# cannot shut down gracefully, and is hard-killed by SIGKILL after 10 seconds.
|
|
COPY start.sh /app/start.sh
|
|
RUN chmod +x /app/artex /app/start.sh
|
|
COPY skills/ /app/skills/
|
|
# persistence point for data/ (SQLite + jwt.key)
|
|
VOLUME ["/app/data"]
|
|
EXPOSE 8787 8788
|
|
ENTRYPOINT ["/app/start.sh"]
|
|
CMD ["-addr", ":8787", "-proxy", ":8788"]
|