Docker lean WIP

Dockerfile.build.lean

@@ -0,0 +1,122 @@
+# Multi-stage build for better reliability
+FROM linuxserver/ffmpeg as base
+
+# -----------------------------------------------------------------------------
+# node-setup: install Node.js, fonts and configure npm for non-root use
+# -----------------------------------------------------------------------------
+FROM base AS node-setup
+
+USER root
+RUN apt-get update && apt-get install -y curl fonts-deva fonts-noto fonts-noto-cjk && \
+    curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \
+    apt-get install -y nodejs && \
+    apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# create application directory owned by the unprivileged user
+RUN mkdir -p /app && chown -R 1000:1000 /app
+
+# prepare npm cache and global config as root, then hand ownership to UID 1000
+RUN mkdir -p /root/.npm && chown -R 1000:0 /root/.npm && \
+    npm config set fetch-retry-mintimeout 20000 && \
+    npm config set fetch-retry-maxtimeout 120000 && \
+    npm config set fetch-retries 5 && \
+    npm config set fetch-timeout 600000 && \
+    npm config set registry https://registry.npmjs.org/ && \
+    npm config set audit false && \
+    npm config set fund false && \
+    npm config set update-notifier false && \
+    npm install -g typescript && \
+    # chown the entire global node_modules tree so the installer path doesn't matter
+    chown -R 1000:0 "$(npm root -g)"
+
+ENV NPM_CONFIG_CACHE=/app/.npm
+
+USER 1000
+WORKDIR /app
+
+# -----------------------------------------------------------------------------
+# common-utils-builder: compile shared utilities as non-root
+# -----------------------------------------------------------------------------
+FROM node-setup AS common-utils-builder
+USER 1000
+WORKDIR /app
+COPY --chown=1000 common-utils/ ./common-utils
+WORKDIR /app/common-utils
+RUN npm ci && npm run build && echo "Common-utils build completed successfully"
+
+# -----------------------------------------------------------------------------
+# dependencies: install project dependencies with retry logic
+# -----------------------------------------------------------------------------
+FROM node-setup AS dependencies
+USER 1000
+WORKDIR /app
+COPY --chown=1000 package*.json ./
+COPY --chown=1000 .npmrc ./
+COPY --from=common-utils-builder --chown=1000 /app/common-utils ./common-utils
+
+ENV NODE_ENV=production
+ENV CI=true
+
+RUN npm cache clean --force
+
+RUN set -e && \
+    echo "Starting dependency installation..." && \
+    (timeout 900 npm ci --verbose --ignore-scripts --production=false 2>&1 | tee /tmp/npm-install.log) || \
+    (echo "First attempt failed, cleaning cache and retrying..." && \
+     npm cache clean --force && \
+     rm -rf node_modules package-lock.json && \
+     timeout 900 npm install --verbose --ignore-scripts --production=false 2>&1 | tee -a /tmp/npm-install.log) || \
+    (echo "Second attempt failed, trying with reduced concurrency..." && \
+     npm cache clean --force && \
+     rm -rf node_modules && \
+     timeout 1200 npm install --verbose --maxsockets 1 --production=false 2>&1 | tee -a /tmp/npm-install.log)
+
+RUN echo "Running postinstall scripts..." && \
+    echo "Skipping common-utils build in postinstall as it's already built" && \
+    node ffmpeg-fix.js 2>&1 | tee -a /tmp/postinstall.log || echo "ffmpeg-fix completed" && \
+    npm rebuild --verbose 2>&1 | tee -a /tmp/npm-rebuild.log || \
+    echo "Some rebuilds failed, but continuing..."
+
+RUN node -e "console.log('Node version:', process.version)" && \
+    node -e "require('react'); console.log('React OK')" && \
+    node -e "require('remotion'); console.log('Remotion OK')" && \
+    ls -la node_modules/.bin/ | head -20
+
+# -----------------------------------------------------------------------------
+# final production image (uses base again to keep layers small)
+# -----------------------------------------------------------------------------
+FROM base AS final
+
+# create writable application dirs and make them owned by UID 1000
+RUN mkdir -p /app/public /app/out /app/frames /app/uploads && chown -R 1000:1000 /app
+
+# install bash so developers can exec into container if needed
+RUN apt-get update && apt-get install -y bash && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+COPY --from=dependencies --chown=1000 /app/node_modules ./app/node_modules
+COPY --from=dependencies --chown=1000 /app/package*.json ./app/
+COPY --from=dependencies --chown=1000 /app/common-utils ./app/common-utils
+
+USER 1000
+WORKDIR /app
+COPY --chown=1000 . ./
+COPY --chown=1000 start.sh /app/start.sh
+RUN chmod +x /app/start.sh
+
+RUN echo "Verifying installation..." && \
+    node -e "console.log('Final verification - Node:', process.version)" && \
+    npm list --depth=0 | head -10 || true
+
+EXPOSE 7860 3000 8083
+COPY --chown=1000 start.sh /app/start.sh
+RUN chmod +x /app/start.sh
+# default command for production run
+CMD ["sh", "/app/start.sh"]
+
+# if you need a shell, override entrypoint via --entrypoint
+# e.g.: docker run --rm -it --entrypoint /bin/bash semibit/render-farm:lean
+
+# Build and run commands:
+# docker build -f Dockerfile.build.multistage -t render-farm:latest .
+# docker run -p 8083:8083 -it --rm render-farm:latest
+# docker run -p 8083:8083 -it --rm --entrypoint /bin/sh render-farm:latest

start.sh

@@ -3,12 +3,13 @@ set -e
 # Xvfb :99 -screen 0 1920x1080x24 & 
 
 echo "Starting app (npm start) in background..."
-npm start &
+npm start 
+# npm start &
 
-APP_PID=$!
-echo "App PID: $APP_PID"
+# APP_PID=$!
+# echo "App PID: $APP_PID"
 
-sleep 1
+# sleep 1
 
-echo "Starting nginx (foreground)..."
-nginx -g 'daemon off;'
+# echo "Starting nginx (foreground)..."
+# nginx -g 'daemon off;'