好用的Dockerfile模板-马春杰杰

下面是一个我目前用起来比较好的Dockerfile模板，后续其他项目可以在这个基础上比较快速的创建。

在此备份一下。

# syntax=docker/dockerfile:1

############################################
# 1) Base
############################################
ARG PYTHON_IMAGE=docker.1ms.run/library/python:3.10-slim-bookworm
FROM ${PYTHON_IMAGE}

WORKDIR /app

############################################
# 2) Common ENV
############################################
ENV TZ=Asia/Shanghai \
    PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_DISABLE_PIP_VERSION_CHECK=1 \
    PIP_NO_CACHE_DIR=1

############################################
# 3) Debian mirror (Aliyun)
############################################
RUN sed -i 's|http://deb.debian.org|http://mirrors.aliyun.com|g' /etc/apt/sources.list 2>/dev/null || true; \
    sed -i 's|http://security.debian.org|http://mirrors.aliyun.com/debian-security|g' /etc/apt/sources.list 2>/dev/null || true; \
    if [ -f /etc/apt/sources.list.d/debian.sources ]; then \
        sed -i 's|http://deb.debian.org/debian|http://mirrors.aliyun.com/debian|g' /etc/apt/sources.list.d/debian.sources; \
        sed -i 's|http://security.debian.org/debian-security|http://mirrors.aliyun.com/debian-security|g' /etc/apt/sources.list.d/debian.sources; \
    fi

############################################
# 4) System deps
# - BASE_DEP: 通用依赖
# - (optional) CHROME_DEP: 仅在 INSTALL_CHROME=true 时安装
############################################
ARG INSTALL_CHROME=false

RUN apt-get update && apt-get install -y --no-install-recommends \
    # ---- common build/runtime deps ----
    gcc \
    libffi-dev \
    libssl-dev \
    libxml2-dev \
    libxslt1-dev \
    zlib1g-dev \
    openssh-client \
    iputils-ping \
    wget \
    gnupg \
    curl \
    ca-certificates \
    unzip \
    tini \
    && if [ "${INSTALL_CHROME}" = "true" ]; then \
      apt-get install -y --no-install-recommends \
        # ---- chrome runtime deps ----
        fonts-liberation \
        libasound2 \
        libatk-bridge2.0-0 \
        libatk1.0-0 \
        libc6 \
        libcairo2 \
        libcups2 \
        libdbus-1-3 \
        libexpat1 \
        libfontconfig1 \
        libgbm1 \
        libgcc1 \
        libglib2.0-0 \
        libgtk-3-0 \
        libnspr4 \
        libnss3 \
        libpango-1.0-0 \
        libpangocairo-1.0-0 \
        libstdc++6 \
        libx11-6 \
        libx11-xcb1 \
        libxcb1 \
        libxcomposite1 \
        libxcursor1 \
        libxdamage1 \
        libxext6 \
        libxfixes3 \
        libxi6 \
        libxrandr2 \
        libxrender1 \
        libxss1 \
        libxtst6 \
        xdg-utils \
        libu2f-udev \
        libvulkan1 \
        fonts-noto-cjk; \
    fi \
    && rm -rf /var/lib/apt/lists/*

############################################
# 5) pip mirror (Aliyun)
############################################
ARG PIP_INDEX_URL=https://mirrors.aliyun.com/pypi/simple/
ARG PIP_TRUSTED_HOST=mirrors.aliyun.com
RUN pip config set global.index-url ${PIP_INDEX_URL} && \
    pip config set global.trusted-host ${PIP_TRUSTED_HOST}

############################################
# 6) Create non-root user
############################################
ARG APP_USER=vpms
ARG APP_UID=1000
ARG APP_GID=1001

RUN groupadd -g ${APP_GID} ${APP_USER} && \
    useradd -m -s /bin/bash -u ${APP_UID} -g ${APP_GID} ${APP_USER}

############################################
# 7) Optional: Install Chrome for Testing + chromedriver
# 保持你项目现有默认路径结构（如需改可以覆写 ENV）
############################################
ENV CHROME_HOME=/home/${APP_USER}/chromefortest \
    CHROME_BINARY_PATH=/home/${APP_USER}/chromefortest/chrome-headless-shell-linux64/chrome-headless-shell \
    CHROME_DRIVER_PATH=/home/${APP_USER}/chromefortest/chromedriver-linux64/chromedriver

ARG CHROME_HEADLESS_SHELL_URL=""
ARG CHROMEDRIVER_URL=""

RUN if [ "${INSTALL_CHROME}" = "true" ]; then \
      set -eux; \
      install -d -m 0755 ${CHROME_HOME}; \
      if [ -z "${CHROME_HEADLESS_SHELL_URL}" ] || [ -z "${CHROMEDRIVER_URL}" ]; then \
        echo "ERROR: INSTALL_CHROME=true but CHROME_HEADLESS_SHELL_URL/CHROMEDRIVER_URL is empty" >&2; \
        exit 1; \
      fi; \
      curl -fL --retry 8 --retry-all-errors --retry-delay 2 --connect-timeout 10 --max-time 300 \
        "${CHROME_HEADLESS_SHELL_URL}" -o /tmp/chrome-headless-shell.zip; \
      curl -fL --retry 8 --retry-all-errors --retry-delay 2 --connect-timeout 10 --max-time 300 \
        "${CHROMEDRIVER_URL}" -o /tmp/chromedriver.zip; \
      unzip -q /tmp/chrome-headless-shell.zip -d ${CHROME_HOME}; \
      unzip -q /tmp/chromedriver.zip -d ${CHROME_HOME}; \
      chown -R ${APP_USER}:${APP_USER} ${CHROME_HOME}; \
      chmod +x ${CHROME_BINARY_PATH}; \
      chmod +x ${CHROME_DRIVER_PATH}; \
      rm -f /tmp/chrome-headless-shell.zip /tmp/chromedriver.zip; \
    fi

# 可选验证（安装浏览器时）
RUN if [ "${INSTALL_CHROME}" = "true" ]; then \
      su -s /bin/sh -c "${CHROME_BINARY_PATH} --no-sandbox --version" ${APP_USER}; \
      su -s /bin/sh -c "${CHROME_DRIVER_PATH} --version" ${APP_USER}; \
    fi

############################################
# 8) Python deps (cache-friendly)
############################################
COPY requirements.txt /app/requirements.txt
RUN pip install -r /app/requirements.txt

############################################
# 9) Copy project code
############################################
COPY . /app

############################################
# 10) Runtime dirs & permissions
############################################
ENV DATA_DIR=/home/${APP_USER}/data \
    LOG_DIR=/home/${APP_USER}/logs \
    SSH_DIR=/home/${APP_USER}/.ssh

RUN mkdir -p ${DATA_DIR} ${LOG_DIR} ${SSH_DIR} && \
    chown -R ${APP_USER}:${APP_USER} /home/${APP_USER} && \
    chown -R ${APP_USER}:${APP_USER} /app

############################################
# 11) Runtime config
############################################
USER ${APP_USER}

# 端口可改
ARG APP_PORT=8088
ENV PORT=${APP_PORT}
EXPOSE ${APP_PORT}

# 健康检查：默认探测 /，可用 HEALTHCHECK_PATH 覆写
ENV HEALTHCHECK_PATH=/
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
  CMD curl -fsS "http://localhost:${PORT}${HEALTHCHECK_PATH}" || exit 1

# 用 tini 做 PID1（更稳，信号/僵尸进程处理更好）
ENTRYPOINT ["/usr/bin/tini", "--"]

# 默认启动命令：可在 docker run 时覆盖
# 比如 Flask：CMD ["python","app.py","--host=0.0.0.0"]
CMD ["python", "app.py"]

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

165

166

167

168

169

170

171

172

173

174

175

176

177

178

179

180

181

182

183

184

185

186

187

188

189

190

191

# syntax=docker/dockerfile:1

############################################

# 1) Base

############################################

ARG PYTHON_IMAGE=docker.1ms.run/library/python:3.10-slim-bookworm

FROM ${PYTHON_IMAGE}

WORKDIR /app

############################################

# 2) Common ENV

############################################

ENV TZ=Asia/Shanghai \

PYTHONDONTWRITEBYTECODE=1 \

PYTHONUNBUFFERED=1 \

PIP_DISABLE_PIP_VERSION_CHECK=1 \

PIP_NO_CACHE_DIR=1

############################################

# 3) Debian mirror (Aliyun)

############################################

RUN sed -i 's|http://deb.debian.org|http://mirrors.aliyun.com|g' /etc/apt/sources.list 2>/dev/null || true; \

sed -i 's|http://security.debian.org|http://mirrors.aliyun.com/debian-security|g' /etc/apt/sources.list 2>/dev/null || true; \

if [ -f /etc/apt/sources.list.d/debian.sources ]; then \

sed -i 's|http://deb.debian.org/debian|http://mirrors.aliyun.com/debian|g' /etc/apt/sources.list.d/debian.sources; \

sed -i 's|http://security.debian.org/debian-security|http://mirrors.aliyun.com/debian-security|g' /etc/apt/sources.list.d/debian.sources; \

############################################

# 4) System deps

# - BASE_DEP: 通用依赖

# - (optional) CHROME_DEP: 仅在 INSTALL_CHROME=true 时安装

############################################

ARG INSTALL_CHROME=false

RUN apt-get update && apt-get install -y --no-install-recommends \

# ---- common build/runtime deps ----

gcc \

libffi-dev \

libssl-dev \

libxml2-dev \

libxslt1-dev \

zlib1g-dev \

openssh-client \

iputils-ping \

wget \

gnupg \

curl \

ca-certificates \

unzip \

tini \

&& if [ "${INSTALL_CHROME}" = "true" ]; then \

apt-get install -y --no-install-recommends \

# ---- chrome runtime deps ----

fonts-liberation \

libasound2 \

libatk-bridge2.0-0 \

libatk1.0-0 \

libc6 \

libcairo2 \

libcups2 \

libdbus-1-3 \

libexpat1 \

libfontconfig1 \

libgbm1 \

libgcc1 \

libglib2.0-0 \

libgtk-3-0 \

libnspr4 \

libnss3 \

libpango-1.0-0 \

libpangocairo-1.0-0 \

libstdc++6 \

libx11-6 \

libx11-xcb1 \

libxcb1 \

libxcomposite1 \

libxcursor1 \

libxdamage1 \

libxext6 \

libxfixes3 \

libxi6 \

libxrandr2 \

libxrender1 \

libxss1 \

libxtst6 \

xdg-utils \

libu2f-udev \

libvulkan1 \

fonts-noto-cjk; \

fi \

&& rm -rf /var/lib/apt/lists/*

############################################

# 5) pip mirror (Aliyun)

############################################

ARG PIP_INDEX_URL=https://mirrors.aliyun.com/pypi/simple/

ARG PIP_TRUSTED_HOST=mirrors.aliyun.com

RUN pip config set global.index-url ${PIP_INDEX_URL} && \

pip config set global.trusted-host ${PIP_TRUSTED_HOST}

############################################

# 6) Create non-root user

############################################

ARG APP_USER=vpms

ARG APP_UID=1000

ARG APP_GID=1001

RUN groupadd -g ${APP_GID} ${APP_USER} && \

useradd -m -s /bin/bash -u ${APP_UID} -g ${APP_GID} ${APP_USER}

############################################

# 7) Optional: Install Chrome for Testing + chromedriver

# 保持你项目现有默认路径结构（如需改可以覆写 ENV）

############################################

ENV CHROME_HOME=/home/${APP_USER}/chromefortest \

CHROME_BINARY_PATH=/home/${APP_USER}/chromefortest/chrome-headless-shell-linux64/chrome-headless-shell \

CHROME_DRIVER_PATH=/home/${APP_USER}/chromefortest/chromedriver-linux64/chromedriver

ARG CHROME_HEADLESS_SHELL_URL=""

ARG CHROMEDRIVER_URL=""

RUN if [ "${INSTALL_CHROME}" = "true" ]; then \

set -eux; \

install -d -m 0755 ${CHROME_HOME}; \

if [ -z "${CHROME_HEADLESS_SHELL_URL}" ] || [ -z "${CHROMEDRIVER_URL}" ]; then \

echo "ERROR: INSTALL_CHROME=true but CHROME_HEADLESS_SHELL_URL/CHROMEDRIVER_URL is empty" >&2; \

exit 1; \

fi; \

curl -fL --retry 8 --retry-all-errors --retry-delay 2 --connect-timeout 10 --max-time 300 \

"${CHROME_HEADLESS_SHELL_URL}" -o /tmp/chrome-headless-shell.zip; \

curl -fL --retry 8 --retry-all-errors --retry-delay 2 --connect-timeout 10 --max-time 300 \

"${CHROMEDRIVER_URL}" -o /tmp/chromedriver.zip; \

unzip -q /tmp/chrome-headless-shell.zip -d ${CHROME_HOME}; \

unzip -q /tmp/chromedriver.zip -d ${CHROME_HOME}; \

chown -R ${APP_USER}:${APP_USER} ${CHROME_HOME}; \

chmod +x ${CHROME_BINARY_PATH}; \

chmod +x ${CHROME_DRIVER_PATH}; \

rm -f /tmp/chrome-headless-shell.zip /tmp/chromedriver.zip; \

# 可选验证（安装浏览器时）

RUN if [ "${INSTALL_CHROME}" = "true" ]; then \

su -s /bin/sh -c "${CHROME_BINARY_PATH} --no-sandbox --version" ${APP_USER}; \

su -s /bin/sh -c "${CHROME_DRIVER_PATH} --version" ${APP_USER}; \

############################################

# 8) Python deps (cache-friendly)

############################################

COPY requirements.txt /app/requirements.txt

RUN pip install -r /app/requirements.txt

############################################

# 9) Copy project code

############################################

COPY . /app

############################################

# 10) Runtime dirs & permissions

############################################

ENV DATA_DIR=/home/${APP_USER}/data \

LOG_DIR=/home/${APP_USER}/logs \

SSH_DIR=/home/${APP_USER}/.ssh

RUN mkdir -p ${DATA_DIR} ${LOG_DIR} ${SSH_DIR} && \

chown -R ${APP_USER}:${APP_USER} /home/${APP_USER} && \

chown -R ${APP_USER}:${APP_USER} /app

############################################

# 11) Runtime config

############################################

USER ${APP_USER}

# 端口可改

ARG APP_PORT=8088

ENV PORT=${APP_PORT}

EXPOSE ${APP_PORT}

# 健康检查：默认探测 /，可用 HEALTHCHECK_PATH 覆写

ENV HEALTHCHECK_PATH=/

HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \

CMD curl -fsS "http://localhost:${PORT}${HEALTHCHECK_PATH}" || exit 1

# 用 tini 做 PID1（更稳，信号/僵尸进程处理更好）

ENTRYPOINT ["/usr/bin/tini", "--"]

# 默认启动命令：可在 docker run 时覆盖

# 比如 Flask：CMD ["python","app.py","--host=0.0.0.0"]

CMD ["python", "app.py"]

使用的时候也非常简单，比如最简单的一个flask项目：

docker build -t myapp:v1 .
docker run -d --name myapp --net=host myapp:v1

1 2	docker build -t myapp:v1 . docker run -d --name myapp --net=host myapp:v1

如果需要用到Chrome，那就：

docker build -t myapp:v1 \
  --build-arg INSTALL_CHROME=true \
  --build-arg CHROME_HEADLESS_SHELL_URL="https://one.machunjie.com/.../chrome-headless-shell-linux64-122.0.6261.94.zip" \
  --build-arg CHROMEDRIVER_URL="https://one.machunjie.com/.../chromedriver-linux64-122.0.6261.94.zip" \
  .