|
|
|
|
@ -3,6 +3,8 @@ FROM node:22.14.0-slim AS builder
|
|
|
|
|
|
|
|
|
|
WORKDIR /app
|
|
|
|
|
|
|
|
|
|
RUN npm install -g pnpm
|
|
|
|
|
|
|
|
|
|
# 2. 复制依赖文件(优先层)
|
|
|
|
|
COPY package.json pnpm-lock.yaml ./
|
|
|
|
|
# RUN npm ci --legacy-peer-deps
|
|
|
|
|
@ -34,9 +36,9 @@ COPY --from=builder /app/next.config.js ./ # 如果有
|
|
|
|
|
# COPY --from=builder /app/server ./server
|
|
|
|
|
|
|
|
|
|
# 4. 非root用户
|
|
|
|
|
RUN groupadd -g 1001 nodejs && \
|
|
|
|
|
useradd -u 1001 -g nodejs -d /app nodejs && \
|
|
|
|
|
chown -R nodejs:nodejs /app
|
|
|
|
|
# RUN groupadd -g 1001 nodejs && \
|
|
|
|
|
# useradd -u 1001 -g nodejs -d /app nodejs && \
|
|
|
|
|
# chown -R nodejs:nodejs /app
|
|
|
|
|
|
|
|
|
|
USER nodejs
|
|
|
|
|
|
|
|
|
|
|