feat:optimize dockerfile to combine build stage and runtime stage,bump python version to 3.12

Author: 刘敏

docker/amd64/dockerfile

@@ -1,26 +1,50 @@
-FROM python:3.10-slim-bookworm
+# Build stage
+FROM golang:1.23-bookworm AS builder
 
 # if you located in China, you can use aliyun mirror to speed up
-# && echo "deb http://mirrors.aliyun.com/debian testing main" > /etc/apt/sources.list
-RUN echo "deb http://deb.debian.org/debian testing main" > /etc/apt/sources.list \
-    && apt-get update \
+# RUN sed -i 's@deb.debian.org@mirrors.aliyun.com@g' /etc/apt/sources.list.d/debian.sources
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    pkg-config \
+    gcc \
+    libseccomp-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy source code
+COPY . /workspace
+WORKDIR /workspace
+
+# using goproxy if you have network issues
+# ENV GOPROXY=https://goproxy.cn,direct
+
+# Build binaries
+RUN chmod +x build/build_amd64.sh \
+    && go mod tidy \
+    && ./build/build_amd64.sh
+
+# Runtime stage
+FROM python:3.12-slim-bookworm
+
+# if you located in China, you can use aliyun mirror to speed up
+# RUN sed -i 's@deb.debian.org@mirrors.aliyun.com@g' /etc/apt/sources.list.d/debian.sources
+
+RUN apt-get update \
     && apt-get install -y --no-install-recommends \
-       pkg-config \
-       libseccomp-dev \
        wget \
        curl \
        xz-utils \
        zlib1g \
        expat \
        perl \
        libsqlite3-0 \
+       libseccomp2 \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/*
 
-# copy main binary to /main
-COPY main /main
-# copy initial env
-COPY env /env
+# copy built binaries from builder stage
+COPY --from=builder /workspace/main /main
+COPY --from=builder /workspace/env /env
 
 # copy config file
 COPY conf/config.yaml /conf/config.yaml
@@ -29,11 +53,12 @@ COPY dependencies/python-requirements.txt /dependencies/python-requirements.txt
 # copy entrypoint
 COPY docker/entrypoint.sh /entrypoint.sh
 
+# if you located in China, you can use tsinghua mirror to speed up pip install
+# RUN pip3 config set global.index-url https://pypi.tuna.tsinghua.edu.cn/simple 
 RUN chmod +x /main /env /entrypoint.sh \
     && pip3 install --no-cache-dir httpx==0.27.2 requests==2.32.3 jinja2==3.1.6 PySocks httpx[socks] \
     && wget -O /opt/node-v20.11.1-linux-x64.tar.xz https://npmmirror.com/mirrors/node/v20.11.1/node-v20.11.1-linux-x64.tar.xz \
-    && /env \
-    && rm -f /env
+    && /env 
 
 ENV NODE_TAR_XZ=/opt/node-v20.11.1-linux-x64.tar.xz
 ENV NODE_DIR=/opt/node-v20.11.1-linux-x64

docker/arm64/dockerfile

@@ -1,26 +1,50 @@
-FROM python:3.10-slim-bookworm
+# Build stage
+FROM golang:1.23-bookworm AS builder
 
 # if you located in China, you can use aliyun mirror to speed up
-# && echo "deb http://mirrors.aliyun.com/debian testing main" > /etc/apt/sources.list
-RUN echo "deb http://deb.debian.org/debian testing main" > /etc/apt/sources.list \
-    && apt-get update \
+# RUN sed -i 's@deb.debian.org@mirrors.aliyun.com@g' /etc/apt/sources.list.d/debian.sources
+
+# Install build dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    pkg-config \
+    gcc \
+    libseccomp-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy source code
+COPY . /workspace
+WORKDIR /workspace
+
+# using goproxy if you have network issues
+# ENV GOPROXY=https://goproxy.cn,direct
+
+# Build binaries
+RUN chmod +x build/build_arm64.sh \
+    && go mod tidy \
+    && ./build/build_arm64.sh
+
+# Runtime stage
+FROM python:3.12-slim-bookworm
+
+# if you located in China, you can use aliyun mirror to speed up
+# RUN sed -i 's@deb.debian.org@mirrors.aliyun.com@g' /etc/apt/sources.list.d/debian.sources
+
+RUN apt-get update \
     && apt-get install -y --no-install-recommends \
-       pkg-config \
-       libseccomp-dev \
        wget \
        curl \
        xz-utils \
        zlib1g \
        expat \
        perl \
        libsqlite3-0 \
+       libseccomp2 \
     && apt-get clean \
     && rm -rf /var/lib/apt/lists/*
 
-# copy main binary to /main
-COPY main /main
-# copy initial env
-COPY env /env
+# copy built binaries from builder stage
+COPY --from=builder /workspace/main /main
+COPY --from=builder /workspace/env /env
 
 # copy config file
 COPY conf/config.yaml /conf/config.yaml
@@ -29,11 +53,12 @@ COPY dependencies/python-requirements.txt /dependencies/python-requirements.txt
 # copy entrypoint
 COPY docker/entrypoint.sh /entrypoint.sh
 
+# if you located in China, you can use tsinghua mirror to speed up pip install
+# RUN pip3 config set global.index-url https://pypi.tuna.tsinghua.edu.cn/simple 
 RUN chmod +x /main /env /entrypoint.sh \
     && pip3 install --no-cache-dir httpx==0.27.2 requests==2.32.3 jinja2==3.1.6 PySocks httpx[socks] \
     && wget -O /opt/node-v20.11.1-linux-arm64.tar.xz https://npmmirror.com/mirrors/node/v20.11.1/node-v20.11.1-linux-arm64.tar.xz \
-    && /env \
-    && rm -f /env
+    && /env 
 
 ENV NODE_TAR_XZ=/opt/node-v20.11.1-linux-arm64.tar.xz
 ENV NODE_DIR=/opt/node-v20.11.1-linux-arm64

internal/static/config_default_amd64.go

@@ -3,8 +3,8 @@
 package static
 
 var DEFAULT_PYTHON_LIB_REQUIREMENTS = []string{
-	"/usr/local/lib/python3.10",
-	"/usr/lib/python3.10",
+	"/usr/local/lib/python3.12",
+	"/usr/lib/python3.12",
 	"/usr/lib/python3",
 	"/usr/lib/x86_64-linux-gnu",
 	"/etc/ssl/certs/ca-certificates.crt",

internal/static/config_default_arm64.go

@@ -3,8 +3,8 @@
 package static
 
 var DEFAULT_PYTHON_LIB_REQUIREMENTS = []string{
-	"/usr/local/lib/python3.10",
-	"/usr/lib/python3.10",
+	"/usr/local/lib/python3.12",
+	"/usr/lib/python3.12",
 	"/usr/lib/python3",
 	"/usr/lib/aarch64-linux-gnu",
 	"/etc/ssl/certs/ca-certificates.crt",