refactor: 优化 Dockerfile 中的端口暴露和健康检查设置

优化了 docker 构建和推送流程，使用环境变量替代硬编码的镜像标签和凭证，增加了构建超时设置，并为 arm64

.cnb.yml

@@ -5,17 +5,17 @@ $:
       docker:
         build: 
           dockerfile: .ide/Dockerfile
+cent7.9:
   push:
     - runner:
         tags: cnb:arch:amd64
       services:
         - docker
-      imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
       env:
-        IMAGE_TAG: btpanel/baota:latest_debian12-linux-amd64
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:${CNB_BRANCH}-linux-amd64
       stages:
         - name: docker login
-          script: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWD"
+          script: docker login -u ${CNB_TOKEN_USER_NAME} -p "${CNB_TOKEN}" ${CNB_DOCKER_REGISTRY}
         - name: docker build
           script: docker build -t ${IMAGE_TAG} .
         - name: docker push
@@ -27,15 +27,16 @@ $:
           
     - runner:
         tags: cnb:arch:arm64:v8
+        cpus: 16
       services:
         - docker
-      imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
       env:
-        IMAGE_TAG: btpanel/baota:latest_debian12-linux-arm64
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:${CNB_BRANCH}-linux-arm64
       stages:
         - name: docker login
-          script: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWD"
+          script: docker login -u ${CNB_TOKEN_USER_NAME} -p "${CNB_TOKEN}" ${CNB_DOCKER_REGISTRY}
         - name: docker build
+          timeout: 3600s
           script: docker build -t ${IMAGE_TAG} .
         - name: docker push
           script: docker push ${IMAGE_TAG}
@@ -43,12 +44,13 @@ $:
           type: cnb:resolve
           options:
             key: build-arm64
-
+    - runner:
-    - services:
+        tags: cnb:arch:amd64
+        cpus: 2
+      services:
         - docker
-      imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
       env:
-        IMAGE_TAG: btpanel/baota:latest_debian12
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:${CNB_BRANCH}
       stages:
         - name: await the amd64
           type: cnb:await
@@ -61,8 +63,8 @@ $:
         - name: manifest
           image: cnbcool/manifest
           settings:
-            username: $DOCKER_USERNAME
+            username: $CNB_TOKEN_USER_NAME
-            password: $DOCKER_PASSWD
+            password: $CNB_TOKEN
             target: ${IMAGE_TAG}
             template: ${IMAGE_TAG}-OS-ARCH
             platforms:

Dockerfile

@@ -1,19 +1,30 @@
-FROM debian:bookworm
+FROM centos:centos7.9.2009
 
-# 切换 Debian 镜像源为腾讯云源，更新包列表并安装依赖
+# 设置构建参数
-RUN sed -i 's/deb.debian.org/mirrors.tencent.com/g' /etc/apt/sources.list.d/debian.sources \
+ARG RANDOM_NAME
-    && apt update && apt upgrade -y \
+
-    && apt install -y \
+# 设置一个btc7-前缀的随机主机名
-    locales \
+RUN echo "btc7-${RANDOM_NAME}" > /etc/hostname
-    wget iproute2 openssh-server libgd-dev cmake make gcc g++ autoconf \
+
-    libsodium-dev libonig-dev libssh2-1-dev libc-ares-dev libaio-dev sudo curl dos2unix \
+# 切换 CentOS 镜像源为腾讯云源，更新包列表并安装依赖
-    build-essential re2c cron bzip2 libzip-dev libc6-dev bison file rcconf flex vim m4 gawk less cpp binutils \
+RUN sed -i.bak \
-    diffutils unzip tar libbz2-dev libncurses5 libncurses5-dev libtool libevent-dev libssl-dev libsasl2-dev \
+    -e 's|^mirrorlist=|#mirrorlist=|g' \
-    libltdl-dev zlib1g-dev libglib2.0-0 libglib2.0-dev libkrb5-dev libpq-dev libpq5 gettext libcap-dev \
+    -e 's|^#baseurl=http://mirror.centos.org|baseurl=https://mirrors.tencent.com/centos-vault|g' \
-    libc-client2007e-dev psmisc patch git e2fsprogs libxslt1-dev xz-utils libgd3 libwebp-dev libvpx-dev \
+    -i.bak \
-    libfreetype6-dev libjpeg62-turbo libjpeg62-turbo-dev iptables libudev-dev libldap2-dev \
+    /etc/yum.repos.d/*.repo \
-    && apt clean \
+    && yum clean all \
-    && rm -rf /var/lib/apt/lists/* 
+    && yum makecache \
+    && yum update -y \
+    && yum install -y \
+    glibc-locale-source \
+    wget iproute openssh-server gd-devel cmake make gcc gcc-c++ autoconf \
+    libsodium-devel oniguruma-devel libssh2-devel c-ares-devel libaio-devel sudo curl dos2unix \
+    bzip2 zip unzip tar ncurses-devel libtool libevent-devel openssl-devel cyrus-sasl-devel \
+    libtool-ltdl-devel zlib-devel glib2 glib2-devel krb5-devel postgresql-devel gettext libcap-devel \
+    uw-imap-devel psmisc patch git e2fsprogs libxslt-devel xz libwebp-devel libvpx-devel \
+    freetype-devel libjpeg-turbo libjpeg-turbo-devel iptables systemd-devel openldap-devel \
+    && yum clean all \
+    && rm -rf /var/cache/yum
 
 # 复制脚本
 COPY ["bt.sh", "init_mysql.sh", "/"]
@@ -25,10 +36,10 @@ RUN dos2unix /bt.sh && dos2unix /init_mysql.sh
 RUN curl -sSO https://download.bt.cn/install/install_panel.sh \
     && echo y | bash install_panel.sh -P 8888 --ssl-disable \
     && rm -rf /www/server/data/* \
-    && echo "docker_bt_d12" > /www/server/panel/data/o.pl \
+    && echo "docker_bt_d11" > /www/server/panel/data/o.pl \
     && echo '["memuA", "memuAsite", "memuAdatabase", "memuAcontrol", "memuAfiles", "memuAlogs", "memuAxterm", "memuAcrontab", "memuAsoft", "memuAconfig", "dologin", "memu_btwaf", "memuAssl"]' > /www/server/panel/config/show_menu.json \
-    && apt clean \
+    && yum clean all \
-    && rm -rf /var/lib/apt/lists/* \
+    && rm -rf /var/cache/yum \
     && chmod +x /bt.sh \
     && chmod +x /init_mysql.sh
     
@@ -41,8 +52,8 @@ RUN echo btpanel | bt 6 \
 
 ENTRYPOINT ["/bin/sh","-c","/bt.sh"]
 
-# 暴漏所有端口
+# 暴漏特定端口
-EXPOSE 0-65535
+EXPOSE 22 80 443 888 3306 8888
 
 # 健康检查
-HEALTHCHECK --interval=5s --timeout=3s CMD curl -i http://127.0.0.1:$(cat /www/server/panel/data/port.pl)$(cat /www/server/panel/data/admin_path.pl) | grep -E '(200|404)' || exit 1
+HEALTHCHECK --interval=5s --timeout=3s CMD prot="http"; if [ -f "/www/server/panel/data/ssl.pl" ]; then prot="https"; fi; curl -k -i $prot://127.0.0.1:$(cat /www/server/panel/data/port.pl)$(cat /www/server/panel/data/admin_path.pl) | grep -E '(200|404)' || exit 1

bt.sh

@@ -38,7 +38,7 @@ soft_start(){
 }
 
 init_mysql(){
-    if [ "${O_pl}" != "docker_btlamp_d12" ] && [ "${O_pl}" != "docker_btlnmp_d12" ];then
+    if [ "${O_pl}" != "docker_btlamp_c79" ] && [ "${O_pl}" != "docker_btlnmp_c79" ];then
         return
     fi
     if [ -d "${Data_Path}" ]; then