ci(deploy): 优化部署流程并添加资源限制

- 在 CI 流程中添加旧镜像清理步骤，保留最近 3个版本
- 更新 deploy.sh脚本，增加停止并删除现有容器的步骤
- 在 docker-compose.yml 中为各服务添加内存限制配置

Author: imchatkit

.github/workflows/ci.yml

@@ -167,6 +167,17 @@ jobs:
             
             # 使用GitHub SHA作为标签部署
             ./deploy.sh ${{ github.sha }}
+            
+            # 清理旧镜像，保留最近3个版本
+            echo "清理旧镜像..."
+            for service in im-gateway ruoyi-auth ruoyi-system im-core-server; do
+              # 获取服务的所有镜像ID，除了最近使用的3个
+              image_ids=$(docker images ${DOCKER_REGISTRY}/${DOCKER_NAMESPACE}/$service --format "{{.ID}}" | tail -n +4)
+              if [ ! -z "$image_ids" ]; then
+                echo "清理$service的旧镜像: $image_ids"
+                docker rmi $image_ids 2>/dev/null || true
+              fi
+            done
 
       # - name: Manual approval
       #   uses: trstringer/manual-approval@v2

deploy.sh

@@ -21,8 +21,27 @@ docker login ${DOCKER_REGISTRY} --username=$REGISTRY_USERNAME --password=$REGIST
 echo "拉取最新镜像..."
 $DOCKER_COMPOSE_CMD pull
 
-# 启动服务
+# 停止并删除现有容器
+echo "停止并删除现有容器..."
+$DOCKER_COMPOSE_CMD down
+
+# 清理任何可能残留的旧容器
+echo "清理残留容器..."
+containers=$(docker ps -a --filter "name=im-gateway|im-core-server|ruoyi-auth|ruoyi-system" --format "{{.Names}}")
+if [ ! -z "$containers" ]; then
+    echo "发现残留容器: $containers"
+    
+    # 先优雅地停止容器
+    echo "正在停止容器..."
+    docker stop $containers 2>/dev/null || true
+    
+    # 确认容器已停止后再删除
+    echo "正在删除容器..."
+    docker rm $containers 2>/dev/null || true
+fi
+
+# 强制重新创建启动服务
 echo "启动服务..."
-$DOCKER_COMPOSE_CMD up -d
+$DOCKER_COMPOSE_CMD up -d --force-recreate
 
 echo "部署完成!" 

docker-compose.yml

@@ -5,6 +5,10 @@ services:
     image: ${DOCKER_REGISTRY}/${DOCKER_NAMESPACE}/im-gateway:${TAG:-latest}
     container_name: im-gateway
     restart: always
+    deploy:
+      resources:
+        limits:
+          memory: 256M
     ports:
       - "8080:8080"
       - "9688:9688"
@@ -26,6 +30,10 @@ services:
     image: ${DOCKER_REGISTRY}/${DOCKER_NAMESPACE}/im-core-server:${TAG:-latest}
     container_name: im-core-server
     restart: always
+    deploy:
+      resources:
+        limits:
+          memory: 256M
     ports:
       - "9601:9601"
     environment:
@@ -44,6 +52,10 @@ services:
     image: ${DOCKER_REGISTRY}/${DOCKER_NAMESPACE}/ruoyi-auth:${TAG:-latest}
     container_name: ruoyi-auth
     restart: always
+    deploy:
+      resources:
+        limits:
+          memory: 256M
     ports:
       - "9210:9210"
     environment:
@@ -63,6 +75,10 @@ services:
     image: ${DOCKER_REGISTRY}/${DOCKER_NAMESPACE}/ruoyi-system:${TAG:-latest}
     container_name: ruoyi-system
     restart: always
+    deploy:
+      resources:
+        limits:
+          memory: 256M
     ports:
       - "9201:9201"
     environment:
@@ -82,6 +98,10 @@ services:
   #   image: ${DOCKER_REGISTRY}/${DOCKER_NAMESPACE}/ruoyi-gen:${TAG:-latest}
   #   container_name: ruoyi-gen
   #   restart: always
+  #   deploy:
+  #     resources:
+  #       limits:
+  #         memory: 256M
   #   ports:
   #     - "9202:9202"
   #   environment:
@@ -101,6 +121,10 @@ services:
   #   image: ${DOCKER_REGISTRY}/${DOCKER_NAMESPACE}/ruoyi-job:${TAG:-latest}
   #   container_name: ruoyi-job
   #   restart: always
+  #   deploy:
+  #     resources:
+  #       limits:
+  #         memory: 256M
   #   ports:
   #     - "9203:9203"
   #   environment:
@@ -120,6 +144,10 @@ services:
   #   image: ${DOCKER_REGISTRY}/${DOCKER_NAMESPACE}/ruoyi-resource:${TAG:-latest}
   #   container_name: ruoyi-resource
   #   restart: always
+  #   deploy:
+  #     resources:
+  #       limits:
+  #         memory: 256M
   #   ports:
   #     - "9300:9300"
   #   environment: