Upload Dockerfile
Browse files- Dockerfile +57 -57
Dockerfile
CHANGED
|
@@ -4,9 +4,9 @@ FROM node:22-slim
|
|
| 4 |
# 1. 安装系统依赖
|
| 5 |
# 包含:git (拉取依赖), openssh-client (解决构建报错), build-essential/g++/make (编译原生模块), python3 (运行同步脚本)
|
| 6 |
RUN apt-get update && apt-get install -y --no-install-recommends \
|
| 7 |
-
|
| 8 |
-
|
| 9 |
-
|
| 10 |
|
| 11 |
# 2. 安装 Hugging Face 命令行工具
|
| 12 |
RUN pip3 install --no-cache-dir huggingface_hub --break-system-packages
|
|
@@ -14,16 +14,16 @@ RUN pip3 install --no-cache-dir huggingface_hub --break-system-packages
|
|
| 14 |
# 3. 构建环境优化
|
| 15 |
# 修复 Git 证书问题并将所有 SSH 协议重定向为 HTTPS
|
| 16 |
RUN update-ca-certificates && \
|
| 17 |
-
|
| 18 |
-
|
| 19 |
|
| 20 |
# 4. 全局安装 OpenClaw
|
| 21 |
RUN npm install -g openclaw@latest --unsafe-perm
|
| 22 |
|
| 23 |
# 5. 设置环境变量
|
| 24 |
ENV PORT=7860 \
|
| 25 |
-
|
| 26 |
-
|
| 27 |
|
| 28 |
# 6. 核心同步引擎 (sync.py)
|
| 29 |
# 针对 OpenClaw 新版 MEMORY.md 机制进行了全路径覆盖
|
|
@@ -35,43 +35,43 @@ repo_id = os.getenv("HF_DATASET")\n\
|
|
| 35 |
token = os.getenv("HF_TOKEN")\n\
|
| 36 |
\n\
|
| 37 |
def restore():\n\
|
| 38 |
-
|
| 39 |
-
|
| 40 |
-
|
| 41 |
-
|
| 42 |
-
|
| 43 |
-
|
| 44 |
-
|
| 45 |
-
|
| 46 |
-
|
| 47 |
-
|
| 48 |
-
|
| 49 |
-
|
| 50 |
-
|
| 51 |
-
|
| 52 |
-
|
| 53 |
-
|
| 54 |
-
|
| 55 |
-
|
| 56 |
\n\
|
| 57 |
def backup():\n\
|
| 58 |
-
|
| 59 |
-
|
| 60 |
-
|
| 61 |
-
|
| 62 |
-
|
| 63 |
-
|
| 64 |
-
|
| 65 |
-
|
| 66 |
-
|
| 67 |
-
|
| 68 |
-
|
| 69 |
-
|
| 70 |
-
|
| 71 |
\n\
|
| 72 |
if __name__ == "__main__":\n\
|
| 73 |
-
|
| 74 |
-
|
| 75 |
|
| 76 |
# 7. 容器入口脚本 (start-openclaw)
|
| 77 |
# 负责恢复数据 -> 生成配置 -> 启动网关 -> 定时备份
|
|
@@ -89,23 +89,23 @@ CLEAN_BASE=\$(echo \"\$OPENAI_API_BASE\" | sed \"s|/chat/completions||g\" | sed
|
|
| 89 |
# 生成 openclaw.json 配置文件\n\
|
| 90 |
cat > /root/.openclaw/openclaw.json <<EOF\n\
|
| 91 |
{\n\
|
| 92 |
-
|
| 93 |
-
|
| 94 |
-
|
| 95 |
-
|
| 96 |
-
|
| 97 |
-
|
| 98 |
-
|
| 99 |
-
|
| 100 |
-
|
| 101 |
-
|
| 102 |
-
|
| 103 |
-
|
| 104 |
-
|
| 105 |
-
|
| 106 |
-
|
| 107 |
-
|
| 108 |
-
|
| 109 |
}\n\
|
| 110 |
EOF\n\
|
| 111 |
\n\
|
|
|
|
| 4 |
# 1. 安装系统依赖
|
| 5 |
# 包含:git (拉取依赖), openssh-client (解决构建报错), build-essential/g++/make (编译原生模块), python3 (运行同步脚本)
|
| 6 |
RUN apt-get update && apt-get install -y --no-install-recommends \
|
| 7 |
+
git openssh-client build-essential python3 python3-pip \
|
| 8 |
+
g++ make ca-certificates \
|
| 9 |
+
&& rm -rf /var/lib/apt/lists/*
|
| 10 |
|
| 11 |
# 2. 安装 Hugging Face 命令行工具
|
| 12 |
RUN pip3 install --no-cache-dir huggingface_hub --break-system-packages
|
|
|
|
| 14 |
# 3. 构建环境优化
|
| 15 |
# 修复 Git 证书问题并将所有 SSH 协议重定向为 HTTPS
|
| 16 |
RUN update-ca-certificates && \
|
| 17 |
+
git config --global http.sslVerify false && \
|
| 18 |
+
git config --global url."https://github.com/".insteadOf ssh://git@github.com/
|
| 19 |
|
| 20 |
# 4. 全局安装 OpenClaw
|
| 21 |
RUN npm install -g openclaw@latest --unsafe-perm
|
| 22 |
|
| 23 |
# 5. 设置环境变量
|
| 24 |
ENV PORT=7860 \
|
| 25 |
+
OPENCLAW_GATEWAY_MODE=local \
|
| 26 |
+
HOME=/root
|
| 27 |
|
| 28 |
# 6. 核心同步引擎 (sync.py)
|
| 29 |
# 针对 OpenClaw 新版 MEMORY.md 机制进行了全路径覆盖
|
|
|
|
| 35 |
token = os.getenv("HF_TOKEN")\n\
|
| 36 |
\n\
|
| 37 |
def restore():\n\
|
| 38 |
+
try:\n\
|
| 39 |
+
print(f"--- [SYNC] 启动恢复流程, 目标仓库: {repo_id} ---")\n\
|
| 40 |
+
if not repo_id or not token: \n\
|
| 41 |
+
print("--- [SYNC] 跳过恢复: 未配置 HF_DATASET 或 HF_TOKEN ---")\n\
|
| 42 |
+
return False\n\
|
| 43 |
+
files = api.list_repo_files(repo_id=repo_id, repo_type="dataset", token=token)\n\
|
| 44 |
+
now = datetime.now()\n\
|
| 45 |
+
for i in range(5):\n\
|
| 46 |
+
day = (now - timedelta(days=i)).strftime("%Y-%m-%d")\n\
|
| 47 |
+
name = f"backup_{day}.tar.gz"\n\
|
| 48 |
+
if name in files:\n\
|
| 49 |
+
print(f"--- [SYNC] 发现备份文件: {name}, 正在下载... ---")\n\
|
| 50 |
+
path = hf_hub_download(repo_id=repo_id, filename=name, repo_type="dataset", token=token)\n\
|
| 51 |
+
with tarfile.open(path, "r:gz") as tar: tar.extractall(path="/root/.openclaw/")\n\
|
| 52 |
+
print(f"--- [SYNC] 恢复成功! 数据已覆盖至 /root/.openclaw/ ---")\n\
|
| 53 |
+
return True\n\
|
| 54 |
+
print("--- [SYNC] 未找到最近 5 天的备份包 ---")\n\
|
| 55 |
+
except Exception as e: print(f"--- [SYNC] 恢复异常: {e} ---")\n\
|
| 56 |
\n\
|
| 57 |
def backup():\n\
|
| 58 |
+
try:\n\
|
| 59 |
+
day = datetime.now().strftime("%Y-%m-%d")\n\
|
| 60 |
+
name = f"backup_{day}.tar.gz"\n\
|
| 61 |
+
print(f"--- [SYNC] 正在执行全量备份: {name} ---")\n\
|
| 62 |
+
with tarfile.open(name, "w:gz") as tar:\n\
|
| 63 |
+
# 路径说明:sessions(网关历史), workspace(记忆文件), agents(配置), memory(旧版目录)\n\
|
| 64 |
+
for target in ["sessions", "workspace", "agents", "memory", "openclaw.json"]:\n\
|
| 65 |
+
full_path = f"/root/.openclaw/{target}"\n\
|
| 66 |
+
if os.path.exists(full_path):\n\
|
| 67 |
+
tar.add(full_path, arcname=target)\n\
|
| 68 |
+
api.upload_file(path_or_fileobj=name, path_in_repo=name, repo_id=repo_id, repo_type="dataset", token=token)\n\
|
| 69 |
+
print(f"--- [SYNC] 备份上传成功! ---")\n\
|
| 70 |
+
except Exception as e: print(f"--- [SYNC] 备份失败: {e} ---")\n\
|
| 71 |
\n\
|
| 72 |
if __name__ == "__main__":\n\
|
| 73 |
+
if len(sys.argv) > 1 and sys.argv[1] == "backup": backup()\n\
|
| 74 |
+
else: restore()' > /usr/local/bin/sync.py
|
| 75 |
|
| 76 |
# 7. 容器入口脚本 (start-openclaw)
|
| 77 |
# 负责恢复数据 -> 生成配置 -> 启动网关 -> 定时备份
|
|
|
|
| 89 |
# 生成 openclaw.json 配置文件\n\
|
| 90 |
cat > /root/.openclaw/openclaw.json <<EOF\n\
|
| 91 |
{\n\
|
| 92 |
+
\"models\": {\n\
|
| 93 |
+
\"providers\": {\n\
|
| 94 |
+
\"siliconflow\": {\n\
|
| 95 |
+
\"baseUrl\": \"\$CLEAN_BASE\",\n\
|
| 96 |
+
\"apiKey\": \"\$OPENAI_API_KEY\",\n\
|
| 97 |
+
\"api\": \"openai-completions\",\n\
|
| 98 |
+
\"models\": [{ \"id\": \"\$MODEL\", \"name\": \"DeepSeek\", \"contextWindow\": 128000 }]\n\
|
| 99 |
+
}\n\
|
| 100 |
+
}\n\
|
| 101 |
+
},\n\
|
| 102 |
+
\"agents\": { \"defaults\": { \"model\": { \"primary\": \"siliconflow/\$MODEL\" } } },\n\
|
| 103 |
+
\"gateway\": {\n\
|
| 104 |
+
\"mode\": \"local\", \"bind\": \"lan\", \"port\": \$PORT,\n\
|
| 105 |
+
\"trustedProxies\": [\"0.0.0.0/0\", \"10.0.0.0/8\", \"172.16.0.0/12\", \"192.168.0.0/16\"],\n\
|
| 106 |
+
\"auth\": { \"mode\": \"token\", \"token\": \"\$OPENCLAW_GATEWAY_PASSWORD\" },\n\
|
| 107 |
+
\"controlUi\": { \"allowInsecureAuth\": true }\n\
|
| 108 |
+
}\n\
|
| 109 |
}\n\
|
| 110 |
EOF\n\
|
| 111 |
\n\
|