Update Dockerfile

Dockerfile

@@ -1,10 +1,10 @@
-# HuggingMes - Hermes Agent Gateway for Hugging Face Spaces
-
+# 采用官方给定的核心底座
 ARG HERMES_AGENT_VERSION=latest
 FROM nousresearch/hermes-agent:${HERMES_AGENT_VERSION}
 
 USER root
 
+# 1. 完整保留原项目的全部系统依赖
 RUN apt-get update && apt-get install -y --no-install-recommends \
     ca-certificates \
     curl \
@@ -34,8 +34,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     && (apt-get install -y --no-install-recommends libasound2 2>/dev/null \
         || apt-get install -y --no-install-recommends libasound2t64 2>/dev/null \
         || true) \
-    && rm -rf /var/lib/apt/lists/* \
-    && uv pip install --python /opt/hermes/.venv/bin/python --no-cache-dir \
+    && rm -rf /var/lib/apt/lists/*
+
+# 2. 将 JupyterLab 注入到虚拟环境中以驱动原项目的 Terminal 终端
+RUN uv pip install --python /opt/hermes/.venv/bin/python --no-cache-dir \
         "jupyterlab>=4.0,<5" \
         "tornado>=6.4" \
         "ipywidgets>=8.1" \
@@ -43,6 +45,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     && chmod 0440 /etc/sudoers.d/hermes \
     && /usr/sbin/visudo -cf /etc/sudoers.d/hermes
 
+# 3. 复制魔改项目的全部核心组件
 COPY --chown=hermes:hermes start.sh /opt/huggingmes/start.sh
 COPY --chown=hermes:hermes health-server.js /opt/huggingmes/health-server.js
 COPY --chown=hermes:hermes cloudflare-proxy-setup.py /opt/huggingmes/cloudflare-proxy-setup.py
@@ -55,65 +58,47 @@ RUN chmod +x \
     /opt/huggingmes/cloudflare-proxy-setup.py \
     /opt/huggingmes/cloudflare-keepalive-setup.py
 
-# Patch kanban migration: wrap ALTER TABLE ADD COLUMN in try/except 
+# 4. 保留原项目看板数据库迁移幂等补丁
 RUN python3 - <<'PY'
 import sys
 try:
     from pathlib import Path
-
     p = Path("/opt/hermes/hermes_cli/kanban_db.py")
-    if not p.exists():
-        print("kanban patch: file not found, skipping")
-        sys.exit(0)
-
-    src = p.read_text(encoding="utf-8", errors="replace")
-    sentinel = "# huggingmes: idempotent-alter"
-    if sentinel in src:
-        print("kanban patch: already applied, skipping")
-        sys.exit(0)
-
-    old = (
-        '    conn.execute(\n'
-        '        "ALTER TABLE tasks ADD COLUMN consecutive_failures "\n'
-        '        "INTEGER NOT NULL DEFAULT 0"\n'
-        '    )'
-    )
-    new = (
-        f'    try:  {sentinel}\n'
-        '        conn.execute(\n'
-        '            "ALTER TABLE tasks ADD COLUMN consecutive_failures "\n'
-        '            "INTEGER NOT NULL DEFAULT 0"\n'
-        '        )\n'
-        '    except Exception:\n'
-        '        pass'
-    )
-
-    if old not in src:
-        print("kanban patch: pattern not found, may be fixed upstream, skipping")
-        sys.exit(0)
-
-    p.write_text(src.replace(old, new), encoding="utf-8")
-    print("kanban patch: applied")
+    if p.exists():
+        src = p.read_text(encoding="utf-8", errors="replace")
+        sentinel = "# huggingmes: idempotent-alter"
+        if sentinel not in src:
+            old = ('    conn.execute(\n'
+                   '        "ALTER TABLE tasks ADD COLUMN consecutive_failures "\n'
+                   '        "INTEGER NOT NULL DEFAULT 0"\n'
+                   '    )')
+            new = (f'    try:  {sentinel}\n'
+                   '        conn.execute(\n'
+                   '            "ALTER TABLE tasks ADD COLUMN consecutive_failures "\n'
+                   '            "INTEGER NOT NULL DEFAULT 0"\n'
+                   '        )\n'
+                   '    except Exception:\n'
+                   '        pass')
+            if old in src:
+                p.write_text(src.replace(old, new), encoding="utf-8")
+                print("kanban patch: applied")
 except Exception as e:
-    print(f"kanban patch: error ({e}), skipping", file=sys.stderr)
+    print(f"kanban patch error: {e}", file=sys.stderr)
 PY
 
-# 修正全局路径，让 hermes 命令在任何地方都能识别
-RUN echo 'export PATH="/opt/hermes/.venv/bin:/home/hermes/.local/bin:$PATH"' > /etc/profile.d/hermes-venv.sh
+# 5. 坚决维持原项目持久化存储桶挂载路径 /opt/data
+RUN echo 'export PATH="/opt/hermes/.venv/bin:/opt/data/.local/bin:$PATH"' \
+    > /etc/profile.d/hermes-venv.sh
 
-# ════════════════════════════════════════════════════════════════
-# 🚀 既然 /home/hermes 已经是存储桶挂载点，直接将其设为运行主目录
-# ════════════════════════════════════════════════════════════════
-ENV HERMES_HOME=/home/hermes \
+# 环境变量修正：完全对齐官方与魔改共存的工作空间路径
+ENV HERMES_HOME=/opt/data \
     HUGGINGMES_APP_DIR=/opt/huggingmes \
     HERMES_AGENT_VERSION=${HERMES_AGENT_VERSION} \
     PYTHONUNBUFFERED=1 \
     PLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH=/usr/bin/chromium
 
-ENTRYPOINT ["/bin/bash", "/opt/huggingmes/start.sh"]
-USER root
-
 EXPOSE 7861
 
-HEALTHCHECK --interval=30s --timeout=5s --start-period=60s \
-  CMD curl -fsS http://localhost:7861/health || exit 1
+# 以 root 入口进行底层隔离、挂载刷新与锁清洗，随后平滑切回降权用户空间
+USER root
+CMD ["/opt/huggingmes/start.sh"]