init

2026-09-27 15:55:38 +08:00
commit 1b6f2e6831
14 changed files with 1379 additions and 0 deletions
@@ -0,0 +1,96 @@
+FROM debian:bookworm-slim AS builder
+
+ARG NGINX_VERSION=1.30.5
+ARG KALTURA_VOD_REF=26f06877b0f2a2336e59cda93a3de18d7b23a3e2
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+        build-essential \
+        ca-certificates \
+        curl \
+        libpcre2-dev \
+        zlib1g-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN mkdir -p /src/nginx-vod-module \
+    && curl -fsSL "https://nginx.org/download/nginx-${NGINX_VERSION}.tar.gz" -o /tmp/nginx.tar.gz \
+    && curl -fsSL "https://codeload.github.com/kaltura/nginx-vod-module/tar.gz/${KALTURA_VOD_REF}" -o /tmp/nginx-vod-module.tar.gz \
+    && tar -xzf /tmp/nginx.tar.gz -C /src \
+    && tar -xzf /tmp/nginx-vod-module.tar.gz -C /src/nginx-vod-module --strip-components=1 \
+    && rm -f /tmp/nginx.tar.gz /tmp/nginx-vod-module.tar.gz
+
+WORKDIR /src/nginx-${NGINX_VERSION}
+
+RUN ./configure \
+        --prefix=/usr/share/nginx \
+        --sbin-path=/usr/sbin/nginx \
+        --conf-path=/etc/nginx/nginx.conf \
+        --pid-path=/tmp/nginx.pid \
+        --error-log-path=/dev/stderr \
+        --http-log-path=/dev/stdout \
+        --http-client-body-temp-path=/tmp/client_body \
+        --http-proxy-temp-path=/tmp/proxy \
+        --http-fastcgi-temp-path=/tmp/fastcgi \
+        --http-uwsgi-temp-path=/tmp/uwsgi \
+        --http-scgi-temp-path=/tmp/scgi \
+        --with-file-aio \
+        --with-threads \
+        --with-http_gzip_static_module \
+        --with-http_stub_status_module \
+        --with-cc-opt='-O2' \
+        --add-module=/src/nginx-vod-module \
+    && make -j"$(nproc)" \
+    && make install
+
+FROM debian:bookworm-slim AS vod
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+        ca-certificates \
+        curl \
+        gettext-base \
+        libpcre2-8-0 \
+        zlib1g \
+    && addgroup --system nginx \
+    && adduser --system --ingroup nginx --no-create-home --home /nonexistent nginx \
+    && mkdir -p /etc/nginx/templates \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /usr/sbin/nginx /usr/sbin/nginx
+COPY --from=builder /etc/nginx/mime.types /etc/nginx/mime.types
+COPY config/nginx.conf.template /etc/nginx/templates/nginx.conf.template
+COPY docker/entrypoint.sh /usr/local/bin/docker-entrypoint.sh
+
+RUN chmod 0755 /usr/local/bin/docker-entrypoint.sh
+
+USER nginx
+
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=15s --retries=3 \
+    CMD curl --fail --silent http://127.0.0.1:8080/healthz || exit 1
+
+ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
+
+FROM debian:bookworm-slim AS catalog
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+        ffmpeg \
+        python3 \
+    && addgroup --system catalog \
+    && adduser --system --ingroup catalog --no-create-home --home /nonexistent catalog \
+    && mkdir -p /app /cache \
+    && chown catalog:catalog /app /cache \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY catalog/app.py /app/app.py
+
+USER catalog
+
+EXPOSE 8081
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+    CMD python3 -c "from urllib.request import urlopen; urlopen('http://127.0.0.1:8081/healthz', timeout=3).read()" || exit 1
+
+ENTRYPOINT ["python3", "/app/app.py"]