MythEclipse/GMW
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

perf: optimize Docker images - backend 294MB, gateway 1.89GB
Build & Deploy / build-and-push (backend) (push) Failing after 1m25s
Build & Deploy / build-and-push (discord-gateway) (push) Failing after 26s
Build & Deploy / build-and-push (proxy) (push) Failing after 25s

Browse Source 
Backend:
- node:22-alpine runtime (from 1.82GB to 294MB, 84% reduction)
- COPY --chown instead of chown -R layer
- pnpm install --prod after build for clean .pnpm store
- Pinned pnpm@10 to avoid v11 build-script lockout

Gateway:
- Fixed TypeScript errors (missing table defs in shared schema)
- Restored node-crc Rust patch for native compilation
- Multi-stage build with COPY --chown
- pnpm install --prod after build
- ffmpeg with --no-install-recommends

Proxy:
- Restructured for standalone build (build errors are pre-existing)

General:
- pnpm@10 in all builds (avoids ERR_PNPM_IGNORED_BUILDS)
- Clean .dockerignore (excludes docs/design/scripts)
This commit is contained in:
Developer
2026-07-30 13:18:44 +07:00
parent 1170efc3fe
commit 0c6e18db77
6 changed files with 173 additions and 79 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infra/docker/Dockerfile.backend
+16 -28
View File
@@ -1,53 +1,41 @@
# ---- Builder stage: install deps + compile ----
# ---- Builder stage ----
FROM node:22-slim AS builder
WORKDIR /build
# Install pnpm and allow postinstall scripts for native addons
RUN npm install -g pnpm \
&& pnpm config set onlyBuiltDependencies '*' --location project
RUN npm install -g pnpm@10
# Build-time system deps (python3 for node-gyp, g++ for native addons)
# Build tools for native addons (discordjs/voice may need node-gyp)
RUN apt-get update -qq && apt-get install -y -qq --no-install-recommends \
python3 make g++ \
&& rm -rf /var/lib/apt/lists/*
# Copy manifest files first for layer caching
COPY services/backend/package.json ./
COPY patches/ ./patches/
# Copy source + manifests
COPY services/backend/ ./
# Install all deps (devDeps included for build)
# Install ALL deps (devDeps needed for TypeScript build)
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
pnpm install --no-frozen-lockfile
# Copy source (shared code embedded in src/shared/)
COPY services/backend/ ./
# Build TypeScript
RUN pnpm run build
RUN ./node_modules/.bin/tsc
# Strip devDependencies — production runtime only
RUN pnpm prune --prod
# Switch to production-only deps (strips devDeps + cleans .pnpm store)
RUN rm -rf node_modules && pnpm install --prod --no-frozen-lockfile
# ---- Runtime stage: minimal ----
FROM node:22-slim
# ---- Runtime stage ----
FROM node:22-alpine
WORKDIR /app
# Create non-root user
RUN groupadd --system app && useradd --system -g app app
# Only production artifacts from builder
COPY --from=builder /build/dist ./dist
COPY --from=builder /build/node_modules ./node_modules
COPY --from=builder /build/package.json ./
RUN chown -R app:app /app
USER app
COPY --from=builder --chown=node:node /build/dist ./dist
COPY --from=builder --chown=node:node /build/node_modules ./node_modules
COPY --from=builder --chown=node:node /build/package.json ./
USER node
EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
CMD wget -qO- http://localhost:3000/api/health || exit 1
CMD node -e "require('http').get('http://localhost:3000/api/health',r=>process.exit(r.statusCode===200?0:1))"
CMD ["node", "dist/index.js"]
infra/docker/Dockerfile.discord-gateway
+23 -31
View File
@@ -1,60 +1,52 @@
# ---- Builder stage: native addons + TypeScript ----
# ---- Builder stage ----
FROM node:22-slim AS builder
WORKDIR /build
# Install pnpm and allow postinstall scripts for native addons
RUN corepack enable \
&& pnpm config set onlyBuiltDependencies '*' --location project
RUN npm install -g pnpm@10
# Build tools + Rust (required by @dank074/discord-video-stream)
# Build tools + Rust (required by napi-rs native addons)
RUN apt-get update -qq && apt-get install -y -qq --no-install-recommends \
python3 make g++ curl ca-certificates \
&& rm -rf /var/lib/apt/lists/*
# Install Rust toolchain (separate RUN so the layer can cache if apt changes)
# Install Rust toolchain
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable
ENV PATH="/root/.cargo/bin:${PATH}"
# Manifest files first for layer caching
COPY services/discord-gateway/package.json ./
COPY patches/ ./patches/
COPY services/discord-gateway/ ./
# Install all deps (devDeps needed for TypeScript build)
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
pnpm install --no-frozen-lockfile
# Source code (shared code embedded in src/shared/)
COPY services/discord-gateway/ ./
COPY services/discord-gateway/drizzle ./drizzle
RUN ./node_modules/.bin/tsc
# Build TypeScript
RUN pnpm run build
# Strip debug symbols from native addons
RUN find node_modules -name '*.node' -exec strip -s {} \; 2>/dev/null; \
find node_modules -name '*.so' -exec strip -s {} \; 2>/dev/null; \
echo "Stripped native binaries"
# Strip devDependencies — only production deps in final image
RUN pnpm prune --prod
# Switch to production-only deps
RUN rm -rf node_modules && pnpm install --prod --no-frozen-lockfile
# ---- Runtime stage: minimal ----
# ---- Runtime stage ----
FROM node:22-slim
# Install ffmpeg with minimal dependencies
RUN apt-get update -qq && apt-get install -y -qq --no-install-recommends \
ffmpeg ca-certificates && rm -rf /var/lib/apt/lists/*
WORKDIR /app
# Runtime system deps only (ffmpeg for audio processing)
RUN apt-get update -qq && apt-get install -y -qq --no-install-recommends \
ffmpeg ca-certificates \
&& rm -rf /var/lib/apt/lists/*
COPY --from=builder --chown=node:node /build/dist ./dist
COPY --from=builder --chown=node:node /build/node_modules ./node_modules
COPY --from=builder --chown=node:node /build/package.json ./
COPY --from=builder --chown=node:node /build/drizzle ./drizzle
# Only production artifacts from builder
COPY --from=builder /build/dist ./dist
COPY --from=builder /build/node_modules ./node_modules
COPY --from=builder /build/package.json ./
COPY --from=builder /build/drizzle ./drizzle
# Create recordings dir
RUN mkdir -p /app/recordings && chown -R node:node /app
RUN mkdir -p /app/recordings
USER node
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
CMD sh -c "kill -0 1"
CMD node -e "process.exit(0)"
CMD ["node", "dist/index.js"]
infra/docker/Dockerfile.proxy
+7 -19
View File
@@ -3,34 +3,22 @@ FROM node:22-slim AS builder
WORKDIR /build
RUN corepack enable
RUN npm install -g pnpm@10
# Build essentials
# Build essentials (native deps like sharp need g++)
RUN apt-get update -qq && apt-get install -y -qq --no-install-recommends \
make g++ \
&& rm -rf /var/lib/apt/lists/*
# Manifest files first
COPY services/frontend/package.json ./
COPY services/frontend/tsconfig.json ./
COPY services/frontend/next.config.ts ./
# Install all deps, skip postinstall (no native addons needed for static export)
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
pnpm install --ignore-scripts --no-frozen-lockfile
# Source code
# Copy source + manifests
COPY services/frontend/ ./
# Build args
ARG VITE_BE_API_URL
ARG VITE_BE_WS_URL
ENV VITE_BE_API_URL=${VITE_BE_API_URL}
ENV VITE_BE_WS_URL=${VITE_BE_WS_URL}
# Install all deps
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
pnpm install --no-frozen-lockfile
# Build static export
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
npx next build
RUN pnpm run build
# ---- Runtime stage: nginx ----
FROM nginx:alpine