Update Dockerfile

Dockerfile

@@ -1,76 +1,53 @@
-# Use a lightweight Debian base for a simplified Linux environment
+# Use a lightweight Debian base
 FROM debian:bookworm-slim
 
-# Set environment variables to avoid interactive prompts during installation
+# Set environment variables
 ENV DEBIAN_FRONTEND=noninteractive
 ENV HOME=/home/user
-ENV PATH=$HOME/.local/bin:$PATH
+ENV PATH=/usr/local/bin:$HOME/.local/bin:$PATH
 
-# Install essential system packages and build tools
+# 1. 安装基础工具和依赖
 RUN apt-get update && apt-get install -y \
-    curl \
-    wget \
-    git \
-    sudo \
-    vim \
-    nano \
-    unzip \
-    procps \
-    net-tools \
-    netcat-openbsd \
-    build-essential \
-    cmake \
-    pkg-config \
-    python3 \
-    nginx \
-    xz-utils \
-    bzip2 \
-    ca-certificates \
+    curl wget git sudo vim nano unzip procps net-tools \
+    netcat-openbsd build-essential cmake pkg-config python3 \
+    nginx xz-utils bzip2 ca-certificates \
     && apt-get clean && rm -rf /var/lib/apt/lists/*
 
-# Install ttyd (Web Terminal)
+# 2. 安装 Node.js 20.x (OpenClaw 强依赖)
+RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
+    && apt-get install -y nodejs \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# 3. 全局安装 OpenClaw (加上 --unsafe-perm 防止权限报错)
+RUN npm install -g openclaw@latest --unsafe-perm
+
+# 4. 安装 ttyd
 RUN wget https://github.com/tsl0922/ttyd/releases/download/1.7.7/ttyd.x86_64 -O /usr/bin/ttyd \
     && chmod +x /usr/bin/ttyd
 
-# Install oauth2-proxy
-# Download v7.6.0 release
+# 5. 安装 oauth2-proxy (修复了您之前截断的下载逻辑)
 RUN wget https://github.com/oauth2-proxy/oauth2-proxy/releases/download/v7.6.0/oauth2-proxy-v7.6.0.linux-amd64.tar.gz \
-    && tar -xzf oauth2-proxy-v7.6.0.linux-amd64.tar.gz \
-    && mv oauth2-proxy-v7.6.0.linux-amd64/oauth2-proxy /usr/bin/oauth2-proxy \
+    && tar -xzvf oauth2-proxy-v7.6.0.linux-amd64.tar.gz \
+    && mv oauth2-proxy-v7.6.0.linux-amd64/oauth2-proxy /usr/bin/ \
     && chmod +x /usr/bin/oauth2-proxy \
     && rm -rf oauth2-proxy-v7.6.0.linux-amd64*
 
-# Install Node.js AND OpenClaw globally
-RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \
-    apt-get install -y nodejs && \
-    npm install -g openclaw@latest --unsafe-perm
+# 6. 配置非 root 用户 (提升安全性，适配 Hugging Face 等平台)
+RUN useradd -m -s /bin/bash user \
+    && echo "user ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers \
+    && mkdir -p /var/log/nginx /var/lib/nginx /run/nginx \
+    && chown -R user:user /var/log/nginx /var/lib/nginx /run/nginx /etc/nginx
 
-# Create a non-root user 'user' (UID 1000)
-RUN useradd -m -u 1000 user && \
-    echo 'user ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers
+# 7. 拷贝启动脚本和配置文件
+# COPY nginx.conf /etc/nginx/nginx.conf  <-- 确保您有这个文件
+COPY start.sh /home/user/start.sh
+RUN chmod +x /home/user/start.sh && chown user:user /home/user/start.sh
 
-# Set up Nginx directories and permissions
-RUN mkdir -p /var/www/html/game && \
-    mkdir -p /var/www/html/theme && \
-    chown -R user:user /var/www/html && \
-    chown -R user:user /var/log/nginx && \
-    chown -R user:user /var/lib/nginx && \
-    chown -R user:user /etc/nginx
-
-# Switch to non-root user
-WORKDIR $HOME
+# 切换到非 root 用户
 USER user
+WORKDIR /home/user
 
-# Copy configuration files
-COPY --chown=user:user nginx.conf /etc/nginx/nginx.conf
-COPY --chown=user:user oauth2-proxy.cfg .
-COPY --chown=user:user start.sh .
-COPY --chown=user:user sign_in.html /var/www/html/theme/sign_in.html
-
-RUN chmod +x start.sh
-
-# Expose port 7860 (Standard for Hugging Face Spaces)
+# 暴露 Nginx 端口
 EXPOSE 7860
 
-# Start services
 CMD ["./start.sh"]