perf: 优化 ssh 服务启动脚本

在 Ubuntu 系统检查部分，修正了变量赋值的语法错误。

.cnb.yml

@@ -6,84 +6,84 @@ $:
         build: 
           dockerfile: .ide/Dockerfile
   push:
-    - runner:
+    # - runner:
-        tags: cnb:arch:amd64
+    #     tags: cnb:arch:amd64
-      services:
+    #   services:
-        - docker
+    #     - docker
-      imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
+    #   imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
-      env:
+    #   env:
-        IMAGE_TAG: btpanel/baota:latest-linux-amd64
+    #     IMAGE_TAG: btpanel/baota:alpine-linux-amd64
-      stages:
+    #   stages:
-        - name: docker login
+    #     - name: docker login
-          script: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWD"
+    #       script: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWD"
-        - name: docker build
+    #     - name: docker build
-          script: docker build -t ${IMAGE_TAG} .
+    #       script: docker build -t ${IMAGE_TAG} .
-        - name: docker push
+    #     - name: docker push
-          script: docker push ${IMAGE_TAG}
+    #       script: docker push ${IMAGE_TAG}
-        - name: resolve
+    #     - name: resolve
-          type: cnb:resolve
+    #       type: cnb:resolve
-          options:
+    #       options:
-            key: build-amd64 
+    #         key: build-amd64 
           
-    - runner:
+    # - runner:
-        tags: cnb:arch:arm64:v8
+    #     tags: cnb:arch:arm64:v8
-      services:
+    #   services:
-        - docker
+    #     - docker
-      imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
+    #   imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
-      env:
+    #   env:
-        IMAGE_TAG: btpanel/baota:latest-linux-arm64
+    #     IMAGE_TAG: btpanel/baota:alpine-linux-arm64
-      stages:
+    #   stages:
-        - name: docker login
+    #     - name: docker login
-          script: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWD"
+    #       script: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWD"
-        - name: docker build
+    #     - name: docker build
-          script: docker build -t ${IMAGE_TAG} .
+    #       script: docker build -t ${IMAGE_TAG} .
-        - name: docker push
+    #     - name: docker push
-          script: docker push ${IMAGE_TAG}
+    #       script: docker push ${IMAGE_TAG}
-        - name: resolve
+    #     - name: resolve
-          type: cnb:resolve
+    #       type: cnb:resolve
-          options:
+    #       options:
-            key: build-arm64
+    #         key: build-arm64
 
-    - services:
+    # - services:
-        - docker
+    #     - docker
-      imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
+    #   imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
-      env:
+    #   env:
-        IMAGE_TAG: btpanel/baota:latest
+    #     IMAGE_TAG: btpanel/baota:alpine
-      stages:
+    #   stages:
-        - name: await the amd64
+    #     - name: await the amd64
-          type: cnb:await
+    #       type: cnb:await
-          options:
+    #       options:
-            key: build-amd64
+    #         key: build-amd64
-        - name: await the arm64
+    #     - name: await the arm64
-          type: cnb:await
+    #       type: cnb:await
-          options:
+    #       options:
-            key: build-arm64
+    #         key: build-arm64
-        - name: manifest
+    #     - name: manifest
-          image: cnbcool/manifest
+    #       image: cnbcool/manifest
-          settings:
+    #       settings:
-            username: $DOCKER_USERNAME
+    #         username: $DOCKER_USERNAME
-            password: $DOCKER_PASSWD
+    #         password: $DOCKER_PASSWD
-            target: ${IMAGE_TAG}
+    #         target: ${IMAGE_TAG}
-            template: ${IMAGE_TAG}-OS-ARCH
+    #         template: ${IMAGE_TAG}-OS-ARCH
-            platforms:
+    #         platforms:
-              - linux/amd64
+    #           - linux/amd64
-              - linux/arm64
+    #           - linux/arm64
-        - name: clear
+    #     - name: clear
-          image: lumir/remove-dockerhub-tag
+    #       image: lumir/remove-dockerhub-tag
-          args:
+    #       args:
-            - --user
+    #         - --user
-            - $DOCKER_USERNAME
+    #         - $DOCKER_USERNAME
-            - --password
+    #         - --password
-            - $DOCKER_PASSWD
+    #         - $DOCKER_PASSWD
-            - ${IMAGE_TAG}-linux-amd64
+    #         - ${IMAGE_TAG}-linux-amd64
-            - ${IMAGE_TAG}-linux-arm64
+    #         - ${IMAGE_TAG}-linux-arm64
 
     - runner:
         tags: cnb:arch:amd64
       services:
         - docker
       env:
-        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest-linux-amd64
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:alpine-linux-amd64
       stages:
         - name: docker login
           script: docker login -u ${CNB_TOKEN_USER_NAME} -p "${CNB_TOKEN}" ${CNB_DOCKER_REGISTRY}
@@ -101,7 +101,7 @@ $:
       services:
         - docker
       env:
-        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest-linux-arm64
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:alpine-linux-arm64
       stages:
         - name: docker login
           script: docker login -u ${CNB_TOKEN_USER_NAME} -p "${CNB_TOKEN}" ${CNB_DOCKER_REGISTRY}
@@ -120,7 +120,7 @@ $:
       services:
         - docker
       env:
-        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:alpine
       stages:
         - name: await the amd64
           type: cnb:await
@@ -145,6 +145,6 @@ $:
           options:
             name: ${CNB_REPO_NAME}
             tags:
-              - latest-linux-amd64
+              - alpine-linux-amd64
-              - latest-linux-arm64
+              - alpine-linux-arm64
             type: docker

Dockerfile

@@ -1,48 +1,40 @@
-FROM debian:bookworm
+FROM python:3.7.16-alpine
 
-# 切换 Debian 镜像源为腾讯云源，更新包列表并安装依赖
+# 切换 alpine 镜像源为腾讯云源，更新包列表并安装依赖
-RUN sed -i 's/deb.debian.org/mirrors.tencent.com/g' /etc/apt/sources.list.d/debian.sources \
+RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.tencent.com/g' /etc/apk/repositories \
-    && apt update && apt upgrade -y \
+    && apk update && apk upgrade \
-    && apt install -y \
+    && apk add openrc openssh curl curl-dev libffi-dev openssl-dev shadow bash zlib-dev g++ make sqlite-dev libpcap-dev jpeg-dev dos2unix libev-dev build-base linux-headers gd-dev \
-    locales \
+    && apk cache clean \
-    wget iproute2 openssh-server libgd-dev cmake make gcc g++ autoconf \
+    && rm -rf /var/cache/apk/*
-    libsodium-dev libonig-dev libssh2-1-dev libc-ares-dev libaio-dev sudo curl dos2unix \
-    build-essential re2c cron bzip2 libzip-dev libc6-dev bison file rcconf flex vim m4 gawk less cpp binutils \
-    diffutils unzip tar libbz2-dev libncurses5 libncurses5-dev libtool libevent-dev libssl-dev libsasl2-dev \
-    libltdl-dev zlib1g-dev libglib2.0-0 libglib2.0-dev libkrb5-dev libpq-dev libpq5 gettext libcap-dev \
-    libc-client2007e-dev psmisc patch git e2fsprogs libxslt1-dev xz-utils libgd3 libwebp-dev libvpx-dev \
-    libfreetype6-dev libjpeg62-turbo libjpeg62-turbo-dev iptables libudev-dev libldap2-dev \
-    && apt clean \
-    && rm -rf /var/lib/apt/lists/* 
 
 # 复制脚本
-COPY ["bt.sh", "init_mysql.sh", "/"]
+COPY ["bt.sh", "init_mysql.sh", "install_panel.sh", "/"]
 
 # 转换启动脚本
-RUN dos2unix /bt.sh && dos2unix /init_mysql.sh
+RUN dos2unix /bt.sh && dos2unix /init_mysql.sh && dos2unix /install_panel.sh
 
 # 下载并安装宝塔面板及 lnmp 环境
-RUN curl -sSO https://download.bt.cn/install/install_panel.sh \
+RUN echo y | bash /install_panel.sh -P 8888 --ssl-disable \
-    && echo y | bash install_panel.sh -P 8888 --ssl-disable \
     && rm -rf /www/server/data/* \
-    && echo "docker_bt_d12" > /www/server/panel/data/o.pl \
+    && echo "docker_bt_alpine" > /www/server/panel/data/o.pl \
     && echo '["memuA", "memuAsite", "memuAdatabase", "memuAcontrol", "memuAfiles", "memuAlogs", "memuAxterm", "memuAcrontab", "memuAsoft", "memuAconfig", "dologin", "memu_btwaf", "memuAssl"]' > /www/server/panel/config/show_menu.json \
-    && apt clean \
-    && rm -rf /var/lib/apt/lists/* \
     && chmod +x /bt.sh \
-    && chmod +x /init_mysql.sh
+    && chmod +x /init_mysql.sh \
-    
+    && apk cache clean \
+    && rm -rf /var/cache/apk/*
 
 # 配置宝塔面板安全入口和用户名及密码，以及 SSH 密码
 RUN echo btpanel | bt 6 \
     && echo btpaneldocker | bt 5 \
     && echo "/btpanel" > /www/server/panel/data/admin_path.pl \
-    && echo "root:btpaneldocker" | chpasswd
+    && echo "root:btpaneldocker" | chpasswd \
+    && echo "PermitRootLogin yes" | tee -a /etc/ssh/sshd_config
+
 
 ENTRYPOINT ["/bin/sh","-c","/bt.sh"]
 
-# 暴漏所有端口
+# 暴漏指定端口
-EXPOSE 0-65535
+EXPOSE 22 80 443 888 3306 8888
 
 # 健康检查
 HEALTHCHECK --interval=5s --timeout=3s CMD prot="http"; if [ -f "/www/server/panel/data/ssl.pl" ]; then prot="https"; fi; curl -k -i $prot://127.0.0.1:$(cat /www/server/panel/data/port.pl)$(cat /www/server/panel/data/admin_path.pl) | grep -E '(200|404)' || exit 1

bt.sh

@@ -32,7 +32,8 @@ soft_start(){
 
     pkill crond
     /sbin/crond
-
+    
+    ssh-keygen -A
     chmod 600 /etc/ssh/ssh_host_*
     /usr/sbin/sshd -D &
 }