openhands
539e6d3fad
- Use floating node:alpine that tracks the latest supported LTS; pnpm bootstrap follows package.json's packageManager pin. - Drop corepack (removed from node:26), install pnpm via npm global. - Add pnpm fetch + offline install for stable dependency-layer caching. - Run as non-root nextjs (UID/GID 33 = host www-data) with tini as PID 1 for correct signal handling. - Open node engines to >=20.9.0 so patches/minors float automatically. - Add docker-preflight.sh (per-VPS checks incl. --fix) and gate docker-update.sh so Node major upgrades require explicit review while patches deploy silently.
34 lines
1.3 KiB
Docker
34 lines
1.3 KiB
Docker
# node:alpine = latest Node within the supported LTS major (tracks the newest
|
|
# patch automatically; currently v26.x, which satisfies package.json's
|
|
# engines ">=26.8.1 <27").
|
|
FROM node:alpine AS builder
|
|
WORKDIR /app
|
|
ENV NEXT_TELEMETRY_DISABLED=1
|
|
# pnpm install is always pinned to the version in package.json's
|
|
# `packageManager` field (pnpm auto-selects it on install), so this global
|
|
# install only needs to exist as a bootstrap and follows the active major.
|
|
RUN apk add --no-cache git \
|
|
&& npm install -g pnpm@latest
|
|
COPY package.json pnpm-lock.yaml* ./
|
|
# pnpm fetch: download all deps into $PNPM_STORE first, so only the lockfile
|
|
# change (not source changes) invalidates the network-heavy download layer.
|
|
RUN pnpm fetch --ignore-scripts
|
|
RUN pnpm install --frozen-lockfile --ignore-scripts --offline
|
|
COPY . .
|
|
RUN pnpm run build
|
|
|
|
FROM node:alpine AS runner
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production \
|
|
NEXT_TELEMETRY_DISABLED=1 \
|
|
PORT=3002 \
|
|
HOSTNAME=0.0.0.0
|
|
RUN apk add --no-cache tini \
|
|
&& addgroup -g 33 -S nextjs && adduser -u 33 -S -G nextjs nextjs
|
|
COPY --from=builder --chown=nextjs:nextjs /app/public ./public
|
|
COPY --from=builder --chown=nextjs:nextjs /app/.next/standalone ./
|
|
COPY --from=builder --chown=nextjs:nextjs /app/.next/static ./.next/static
|
|
USER nextjs
|
|
EXPOSE 3002
|
|
ENTRYPOINT ["/sbin/tini", "--"]
|
|
CMD ["node", "server.js"] |