feat: 新增根据环境变量修改用户名和密码的函数

Update Dockerfiles to use Tencent Cloud PyPI mirror for faster pip installations
PR-URL: #1

.cnb.yml

@@ -12,7 +12,7 @@ $:
         - docker
       imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
       env:
-        IMAGE_TAG: btpanel/baota:latest-linux-amd64
+        IMAGE_TAG: btpanel/baota:fnnas-linux-amd64
       stages:
         - name: docker login
           script: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWD"
@@ -31,12 +31,12 @@ $:
         - docker
       imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
       env:
-        IMAGE_TAG: btpanel/baota:latest-linux-arm64
+        IMAGE_TAG: btpanel/baota:f n na s-linux-arm64
       stages:
         - name: docker login
           script: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWD"
         - name: docker build
-          script: docker build -t ${IMAGE_TAG} .
+          script: docker build -t ${IMAGE_TAG} -f ./arm64/Dockerfile ./arm64
         - name: docker push
           script: docker push ${IMAGE_TAG}
         - name: resolve
@@ -48,7 +48,7 @@ $:
         - docker
       imports: https://cnb.cool/btpanel/secret/-/blob/main/docker.yml
       env:
-        IMAGE_TAG: btpanel/baota:latest
+        IMAGE_TAG: btpanel/baota:fnnas
       stages:
         - name: await the amd64
           type: cnb:await
@@ -83,7 +83,7 @@ $:
       services:
         - docker
       env:
-        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest-linux-amd64
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:fnnas-linux-amd64
       stages:
         - name: docker login
           script: docker login -u ${CNB_TOKEN_USER_NAME} -p "${CNB_TOKEN}" ${CNB_DOCKER_REGISTRY}
@@ -101,12 +101,12 @@ $:
       services:
         - docker
       env:
-        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest-linux-arm64
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:fnnas-linux-arm64
       stages:
         - name: docker login
           script: docker login -u ${CNB_TOKEN_USER_NAME} -p "${CNB_TOKEN}" ${CNB_DOCKER_REGISTRY}
         - name: docker build
-          script: docker build -t ${IMAGE_TAG} .
+          script: docker build -t ${IMAGE_TAG} -f ./arm64/Dockerfile ./arm64
         - name: docker push
           script: docker push ${IMAGE_TAG}
         - name: resolve
@@ -120,7 +120,7 @@ $:
       services:
         - docker
       env:
-        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:latest
+        IMAGE_TAG: ${CNB_DOCKER_REGISTRY}/${CNB_REPO_SLUG_LOWERCASE}:fnnas
       stages:
         - name: await the amd64
           type: cnb:await
@@ -145,6 +145,6 @@ $:
           options:
             name: ${CNB_REPO_NAME}
             tags:
-              - latest-linux-amd64
+              - fnnas-linux-amd64
-              - latest-linux-arm64
+              - fnnas-linux-arm64
             type: docker

Dockerfile

@@ -1,17 +1,12 @@
-FROM debian:bookworm
+FROM debian:bookworm-slim
 
 # 切换 Debian 镜像源为腾讯云源，更新包列表并安装依赖
 RUN sed -i 's/deb.debian.org/mirrors.tencent.com/g' /etc/apt/sources.list.d/debian.sources \
     && apt update && apt upgrade -y \
     && apt install -y \
     locales \
-    wget iproute2 openssh-server libgd-dev cmake make gcc g++ autoconf \
+    wget iproute2 openssh-server cmake make gcc g++ autoconf sudo curl dos2unix build-essential \
-    libsodium-dev libonig-dev libssh2-1-dev libc-ares-dev libaio-dev sudo curl dos2unix \
+    && apt autoremove -y \
-    build-essential re2c cron bzip2 libzip-dev libc6-dev bison file rcconf flex vim m4 gawk less cpp binutils \
-    diffutils unzip tar libbz2-dev libncurses5 libncurses5-dev libtool libevent-dev libssl-dev libsasl2-dev \
-    libltdl-dev zlib1g-dev libglib2.0-0 libglib2.0-dev libkrb5-dev libpq-dev libpq5 gettext libcap-dev \
-    libc-client2007e-dev psmisc patch git e2fsprogs libxslt1-dev xz-utils libgd3 libwebp-dev libvpx-dev \
-    libfreetype6-dev libjpeg62-turbo libjpeg62-turbo-dev iptables libudev-dev libldap2-dev \
     && apt clean \
     && rm -rf /var/lib/apt/lists/* 
 
@@ -21,14 +16,20 @@ COPY ["bt.sh", "init_mysql.sh", "/"]
 # 转换启动脚本
 RUN dos2unix /bt.sh && dos2unix /init_mysql.sh
 
-# 下载并安装宝塔面板及 lnmp 环境
+# 下载并安装宝塔面板及 nginx
 RUN curl -sSO https://download.bt.cn/install/install_panel.sh \
     && echo y | bash install_panel.sh -P 8888 --ssl-disable \
-    && rm -rf /www/server/data/* \
+    && btpip config set global.index-url https://mirrors.tencent.com/pypi/simple \
-    && echo "docker_bt_d12" > /www/server/panel/data/o.pl \
+    && mkdir /lnmp \
-    && echo '["memuA", "memuAsite", "memuAdatabase", "memuAcontrol", "memuAfiles", "memuAlogs", "memuAxterm", "memuAcrontab", "memuAsoft", "memuAconfig", "dologin", "memu_btwaf", "memuAssl"]' > /www/server/panel/config/show_menu.json \
+    && curl -o /lnmp/nginx.sh https://download.bt.cn/install/3/nginx.sh \
+    && bash /lnmp/nginx.sh install 1.27 \ 
+    && rm -rf /lnmp \
+    && rm -rf /www/server/nginx/src \
+    && echo "docker_bt_fnnas" > /www/server/panel/data/o.pl \
+    && echo '["memuA", "memuAsite", "memuAwp", "memuAdatabase", "memuAcontrol", "memuAfiles", "memuAlogs", "memuAxterm", "memuAcrontab", "memuAsoft", "memuAconfig", "dologin", "memu_btwaf", "memuAssl"]' > /www/server/panel/config/show_menu.json \
     && apt clean \
     && rm -rf /var/lib/apt/lists/* \
+    && rm -rf /www/reserve_space.pl \
     && chmod +x /bt.sh \
     && chmod +x /init_mysql.sh
     
@@ -39,10 +40,15 @@ RUN echo btpanel | bt 6 \
     && echo "/btpanel" > /www/server/panel/data/admin_path.pl \
     && echo "root:btpaneldocker" | chpasswd
 
+# 打包宝塔面板，并清除www
+RUN bt 2 \
+    && tar -zcf /www.tar.gz /www \
+    && rm -rf /www
+
 ENTRYPOINT ["/bin/sh","-c","/bt.sh"]
 
-# 暴漏所有端口
+# 暴漏特定端口
-EXPOSE 0-65535
+EXPOSE 22 80 443 888 3306 8888
 
 # 健康检查
 HEALTHCHECK --interval=5s --timeout=3s CMD prot="http"; if [ -f "/www/server/panel/data/ssl.pl" ]; then prot="https"; fi; curl -k -i $prot://127.0.0.1:$(cat /www/server/panel/data/port.pl)$(cat /www/server/panel/data/admin_path.pl) | grep -E '(200|404)' || exit 1

arm64/Dockerfile

@@ -0,0 +1,53 @@
+FROM debian:bookworm
+
+# 切换 Debian 镜像源为腾讯云源，更新包列表并安装依赖
+RUN sed -i 's/deb.debian.org/mirrors.tencent.com/g' /etc/apt/sources.list.d/debian.sources \
+    && apt update && apt upgrade -y \
+    && apt install -y \
+    locales \
+    wget openssh-server cmake make gcc g++ autoconf sudo curl dos2unix build-essential \
+    && apt autoremove -y \
+    && apt clean \
+    && rm -rf /var/lib/apt/lists/* 
+
+# 复制脚本
+COPY ["bt.sh", "init_mysql.sh", "/"]
+
+# 转换启动脚本
+RUN dos2unix /bt.sh && dos2unix /init_mysql.sh
+
+# 下载并安装宝塔面板及 lnmp 环境
+RUN curl -sSO https://download.bt.cn/install/install_panel.sh \
+    && echo y | bash install_panel.sh -P 8888 --ssl-disable \
+    && btpip config set global.index-url https://mirrors.tencent.com/pypi/simple \
+    && mkdir /lnmp \
+    && curl -o /lnmp/nginx.sh https://download.bt.cn/install/3/nginx.sh \
+    && bash /lnmp/nginx.sh install openresty \ 
+    && rm -rf /lnmp \
+    && rm -rf /www/server/nginx/src \
+    && echo "docker_bt_nas" > /www/server/panel/data/o.pl \
+    && echo '["memuA", "memuAsite", "memuAwp", "memuAdatabase", "memuAcontrol", "memuAfiles", "memuAlogs", "memuAxterm", "memuAcrontab", "memuAsoft", "memuAconfig", "dologin", "memu_btwaf", "memuAssl"]' > /www/server/panel/config/show_menu.json \
+    && apt clean \
+    && rm -rf /var/lib/apt/lists/* \
+    && rm -rf /www/reserve_space.pl \
+    && chmod +x /bt.sh \
+    && chmod +x /init_mysql.sh
+    
+
+# 配置宝塔面板安全入口和用户名及密码，以及 SSH 密码
+RUN echo btpanel | bt 6 \
+    && echo btpaneldocker | bt 5 \
+    && echo "/btpanel" > /www/server/panel/data/admin_path.pl \
+    && echo "root:btpaneldocker" | chpasswd
+
+# 打包宝塔面板，并清除www
+RUN tar -zcf /www.tar.gz /www \
+    && rm -rf /www
+
+ENTRYPOINT ["/bin/sh","-c","/bt.sh"]
+
+# 暴漏所有端口
+EXPOSE 0-65535
+
+# 健康检查
+HEALTHCHECK --interval=5s --timeout=3s CMD prot="http"; if [ -f "/www/server/panel/data/ssl.pl" ]; then prot="https"; fi; curl -k -i $prot://127.0.0.1:$(cat /www/server/panel/data/port.pl)$(cat /www/server/panel/data/admin_path.pl) | grep -E '(200|404)' || exit 1

arm64/bt.sh

@@ -0,0 +1,97 @@
+#!/bin/bash
+PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
+export PATH
+
+init_path=/etc/init.d
+Root_Path=`cat /var/bt_setupPath.conf`
+Setup_Path=$Root_Path/server/mysql
+Data_Path=$Root_Path/server/data
+O_pl=$(cat /www/server/panel/data/o.pl)
+
+backup_database() {
+  if [ -d "${Data_Path}" ] && [ ! -z "$(ls -A ${Data_Path})" ]; then
+    if [ ! -d "${Setup_Path}" ] || [ -z "$(ls -A ${Setup_Path})" ]; then
+      timestamp=$(date +"%s")
+      tar czf /www/server/data_backup_$timestamp.tar.gz -C ${Data_Path} .
+    fi
+  fi
+}
+
+restore_panel_data() {
+  if [ -f /www.tar.gz ]; then
+    if [ ! -d /www ] || [ -z "$(ls -A /www)" ] || [ ! -d /www/server/panel ] || [ -z "$(ls -A /www/server/panel)" ] || [ ! -d /www/server/panel/pyenv ] || [ -z "$(ls -A /www/server/panel/pyenv)" ]; then
+      tar xzf /www.tar.gz -C / --skip-old-files
+      rm -rf /www.tar.gz
+    fi
+  fi
+}
+
+soft_start(){
+    # 扫描并启动所有服务
+    init_scripts=$(ls ${init_path})
+    for script in ${init_scripts}; do
+        case "${script}" in
+        "bt"|"mysqld"|"nginx"|"httpd")
+            continue
+            ;;
+        esac
+
+        ${init_path}/${script} start
+    done
+
+    if [ -f ${init_path}/nginx ]; then
+        ${init_path}/nginx start
+    elif [ -f ${init_path}/httpd ]; then
+        ${init_path}/httpd start
+    fi
+
+    ${init_path}/bt stop
+    ${init_path}/bt start
+
+    pkill crond
+    /sbin/crond
+
+    chmod 600 /etc/ssh/ssh_host_*
+    /usr/sbin/sshd -D &
+}
+
+init_mysql(){
+    if [ "${O_pl}" != "docker_btlamp_nas" ] && [ "${O_pl}" != "docker_btlnmp_nas" ];then
+        return
+    fi
+    if [ -d "${Data_Path}" ]; then
+        check_z=$(ls "${Data_Path}")
+        echo "check_z:"
+        echo ${check_z}
+        if [[ ! -z "${check_z}" ]]; then
+            echo "check_z is not empty"
+            return
+        fi
+    fi
+    if [ -f /init_mysql.sh ] && [ -d "${Setup_Path}" ];then
+        bash /init_mysql.sh
+        rm -f /init_mysql.sh
+    fi
+}
+
+is_empty_Data(){
+    return "$(ls -A ${Data_Path}/|wc -w)"
+}
+
+start_mysql(){
+    if [ -d "${Setup_Path}" ] && [ -f "${init_path}/mysqld" ];then
+        chown -R mysql:mysql ${Data_Path}
+        chgrp -R mysql ${Setup_Path}/.
+        ${init_path}/mysqld start
+    fi
+}
+
+
+restore_panel_data > /dev/null
+backup_database > /dev/null
+is_empty_Data > /dev/null
+init_mysql > /dev/null
+start_mysql > /dev/null
+soft_start > /dev/null
+#tail -f /dev/null
+${init_path}/bt log

arm64/init_mysql.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
+export PATH
+
+Root_Path=`cat /var/bt_setupPath.conf`
+Setup_Path=$Root_Path/server/mysql
+Data_Path=$Root_Path/server/data
+
+Mysql_Initialize(){
+    if [ -d "${Data_Path}" ]; then
+        check_z=$(ls "${Data_Path}")
+        if [[ ! -z "${check_z}" ]]; then
+            return
+        fi
+    fi
+
+    mkdir -p ${Data_Path}
+    chown -R mysql:mysql ${Data_Path}
+    chgrp -R mysql ${Setup_Path}/.
+
+    ${Setup_Path}/bin/mysqld --initialize-insecure --basedir=${Setup_Path} --datadir=${Data_Path} --user=mysql
+
+    cat > /etc/ld.so.conf.d/mysql.conf<<EOF
+${Setup_Path}/lib
+EOF
+    ldconfig
+    ln -sf ${Setup_Path}/lib/mysql /usr/lib/mysql
+    ln -sf ${Setup_Path}/include/mysql /usr/include/mysql
+    /etc/init.d/mysqld start
+
+    mysqlpwd=`cat /dev/urandom | head -n 16 | md5sum | head -c 16`
+    ${Setup_Path}/bin/mysqladmin -u root password "${mysqlpwd}"
+
+    cd "${Setup_Path}"
+    rm -f src.tar.gz
+    rm -rf src
+    /etc/init.d/mysqld start
+    rm -rf /init_mysql.sh
+}
+
+Mysql_Initialize

bt.sh

@@ -8,8 +8,25 @@ Setup_Path=$Root_Path/server/mysql
 Data_Path=$Root_Path/server/data
 O_pl=$(cat /www/server/panel/data/o.pl)
 
+backup_database() {
+  if [ -d "${Data_Path}" ] && [ ! -z "$(ls -A ${Data_Path})" ]; then
+    if [ ! -d "${Setup_Path}" ] || [ -z "$(ls -A ${Setup_Path})" ]; then
+      timestamp=$(date +"%s")
+      tar czf /www/server/data_backup_$timestamp.tar.gz -C ${Data_Path} .
+    fi
+  fi
+}
+
+restore_panel_data() {
+  if [ -f /www.tar.gz ]; then
+    if [ ! -d /www ] || [ -z "$(ls -A /www)" ] || [ ! -d /www/server/panel ] || [ -z "$(ls -A /www/server/panel)" ] || [ ! -d /www/server/panel/pyenv ] || [ -z "$(ls -A /www/server/panel/pyenv)" ]; then
+      tar xzf /www.tar.gz -C / --skip-old-files
+      rm -rf /www.tar.gz
+    fi
+  fi
+}
+
 soft_start(){
-    # 扫描并启动所有服务
     init_scripts=$(ls ${init_path})
     for script in ${init_scripts}; do
         case "${script}" in
@@ -17,7 +34,6 @@ soft_start(){
             continue
             ;;
         esac
-
         ${init_path}/${script} start
     done
 
@@ -38,15 +54,12 @@ soft_start(){
 }
 
 init_mysql(){
-    if [ "${O_pl}" != "docker_btlamp_d12" ] && [ "${O_pl}" != "docker_btlnmp_d12" ];then
+    if [ "${O_pl}" != "docker_btlamp_fnnas" ] && [ "${O_pl}" != "docker_btlnmp_fnnas" ];then
         return
     fi
     if [ -d "${Data_Path}" ]; then
         check_z=$(ls "${Data_Path}")
-        echo "check_z:"
-        echo ${check_z}
         if [[ ! -z "${check_z}" ]]; then
-            echo "check_z is not empty"
             return
         fi
     fi
@@ -68,9 +81,45 @@ start_mysql(){
     fi
 }
 
+check_bt_credentials() {
+    if [ -f "/www/server/panel/data/credentials_set" ]; then
+        echo "Credentials already set. Skipping."
+        return 0
+    fi
+
+    if [ -z "$btuser" ] && [ -z "$btpwd" ]; then
+        echo "No credentials provided. Skipping."
+        return 0
+    fi
+
+    echo "Waiting for BT panel to be ready..."
+    while true; do
+        ${init_path}/bt status >/dev/null 2>&1
+        if [ $? -eq 0 ]; then
+            break
+        fi
+        sleep 1
+        echo "Retrying..."
+    done
+
+    if [ -n "$btuser" ]; then
+        echo "Updating username to $btuser..."
+        echo "$btuser" | ${init_path}/bt 6 || echo "Failed to update username."
+    fi
+
+    if [ -n "$btpwd" ]; then
+        echo "Updating password..."
+        echo "$btpwd" | ${init_path}/bt 5 || echo "Failed to update password."
+    fi
+
+    touch "/www/server/panel/data/credentials_set"
+}
+
+restore_panel_data > /dev/null
+backup_database > /dev/null
 is_empty_Data > /dev/null
 init_mysql > /dev/null
 start_mysql > /dev/null
 soft_start > /dev/null
-#tail -f /dev/null
+check_bt_credentials > /dev/null
-${init_path}/bt log
+${init_path}/bt log