mirror of
https://github.com/alexta69/metube.git
synced 2026-09-21 13:35:01 +00:00
Alex Shnitman
300bf79b52
Docker Hub rebuilt node:22-alpine on 2026-09-17 with the same Node (22.23.2) but refreshed Alpine layers. That rebuild dies under QEMU while cross-building the arm64 leg: `qemu: uncaught target signal 4 (Illegal instruction)`, exit 132, during `pnpm install`. Three consecutive release builds failed identically on it. Every other input was unchanged and verified by digest — runner image 20260907.300.1, tonistiigi/binfmt sha256:400a4873, pnpm pinned at 11.5.2, lockfile untouched — and quality-checks, which runs natively, passed every time. The tag was the only floating input: last green build 09-15 node:22-alpine@sha256:c610fcdf built 2026-07-29 failing 09-20 node:22-alpine@sha256:b6f26b36 built 2026-09-17 Pinned to the older of the two. It ships nothing: the builder stage is discarded and only ui/dist is copied out, so no Alpine bytes reach the runtime image and holding an older base costs no exposure. This is a stopgap for the emulated build, not a fix for it. The durable answer is building the arm64 leg on a native runner, which removes the whole failure class. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
93 lines
3.8 KiB
Docker
93 lines
3.8 KiB
Docker
# Pinned to a major version rather than the lts-alpine floating tag: that tag
|
|
# has lagged behind and resolved to a Node patch older than the Angular CLI's
|
|
# minimum supported version, breaking the build. node:22-alpine currently
|
|
# satisfies @angular/cli's >=22.22.3 requirement.
|
|
#
|
|
# Pinned further, to a digest: Docker Hub rebuilt node:22-alpine on 2026-09-17
|
|
# with the same Node (22.23.2) but refreshed Alpine layers, and that rebuild
|
|
# dies under QEMU while cross-building the arm64 leg — `qemu: uncaught target
|
|
# signal 4 (Illegal instruction)`, exit 132, during `pnpm install`. Three
|
|
# consecutive release builds failed identically on it while every other input
|
|
# (runner image, binfmt digest, pnpm version, lockfile) was unchanged.
|
|
#
|
|
# This digest is the last image known to cross-build cleanly (built 2026-07-29).
|
|
# It ships nothing: this stage is thrown away and only ui/dist is copied out.
|
|
# Unpin once the arm64 leg builds natively instead of under emulation, or once
|
|
# a later node:22-alpine is confirmed to survive QEMU.
|
|
FROM node:22-alpine@sha256:c610fcdfb1d5b4740dd70c284ed3cb16bb857e0f7166196e36a5501df7a3aa32 AS builder
|
|
|
|
WORKDIR /metube
|
|
COPY ui ./
|
|
RUN corepack enable && corepack prepare pnpm --activate
|
|
RUN CI=true pnpm install && pnpm run build
|
|
|
|
|
|
FROM python:3.13-slim
|
|
|
|
WORKDIR /app
|
|
|
|
COPY pyproject.toml uv.lock docker-entrypoint.sh ./
|
|
|
|
# Use sed to strip carriage-return characters from the entrypoint script (in case building on Windows)
|
|
# Install dependencies
|
|
RUN sed -i 's/\r$//g' docker-entrypoint.sh && \
|
|
chmod +x docker-entrypoint.sh && \
|
|
apt-get update && \
|
|
apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
ffmpeg \
|
|
unzip \
|
|
aria2 \
|
|
coreutils \
|
|
gosu \
|
|
curl \
|
|
tini \
|
|
build-essential && \
|
|
curl -LsSf https://astral.sh/uv/install.sh | UV_INSTALL_DIR=/usr/local/bin sh && \
|
|
UV_PROJECT_ENVIRONMENT=/usr/local uv sync --frozen --no-dev --compile-bytecode && \
|
|
uv cache clean && \
|
|
rm -f /usr/local/bin/uv /usr/local/bin/uvx /usr/local/bin/uvw && \
|
|
curl -fsSL https://deno.land/install.sh | DENO_INSTALL=/usr/local sh -s -- -y && \
|
|
apt-get purge -y --auto-remove build-essential && \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
mkdir /.cache && chmod 777 /.cache
|
|
|
|
ARG TARGETARCH
|
|
|
|
RUN BGUTIL_TAG="$(curl -Ls -o /dev/null -w '%{url_effective}' https://github.com/jim60105/bgutil-ytdlp-pot-provider-rs/releases/latest | sed 's#.*/tag/##')" && \
|
|
case "$TARGETARCH" in \
|
|
amd64) BGUTIL_ARCH="x86_64" ;; \
|
|
arm64) BGUTIL_ARCH="aarch64" ;; \
|
|
*) echo "Unsupported TARGETARCH: $TARGETARCH" >&2; exit 1 ;; \
|
|
esac && \
|
|
curl -L -o /usr/local/bin/bgutil-pot \
|
|
"https://github.com/jim60105/bgutil-ytdlp-pot-provider-rs/releases/download/${BGUTIL_TAG}/bgutil-pot-linux-${BGUTIL_ARCH}" && \
|
|
chmod +x /usr/local/bin/bgutil-pot && \
|
|
PLUGIN_DIR="$(python3 -c 'import site; print(site.getsitepackages()[0])')" && \
|
|
curl -L -o /tmp/bgutil-ytdlp-pot-provider-rs.zip \
|
|
"https://github.com/jim60105/bgutil-ytdlp-pot-provider-rs/releases/download/${BGUTIL_TAG}/bgutil-ytdlp-pot-provider-rs.zip" && \
|
|
unzip -q /tmp/bgutil-ytdlp-pot-provider-rs.zip -d "${PLUGIN_DIR}" && \
|
|
rm /tmp/bgutil-ytdlp-pot-provider-rs.zip
|
|
|
|
COPY app ./app
|
|
COPY --from=builder /metube/dist/metube ./ui/dist/metube
|
|
|
|
ENV PUID=1000
|
|
ENV PGID=1000
|
|
ENV UMASK=022
|
|
|
|
ENV DOWNLOAD_DIR=/downloads
|
|
ENV STATE_DIR=/downloads/.metube
|
|
ENV TEMP_DIR=/downloads
|
|
ENV PORT=8081
|
|
VOLUME /downloads
|
|
EXPOSE 8081
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
|
|
CMD case "$HTTPS" in true|True|on|1) curl -fsSk "https://localhost:${PORT}/";; *) curl -fsS "http://localhost:${PORT}/";; esac || exit 1
|
|
|
|
# Add build-time argument for version
|
|
ARG VERSION=dev
|
|
ENV METUBE_VERSION=$VERSION
|
|
|
|
ENTRYPOINT ["/usr/bin/tini", "-g", "--", "./docker-entrypoint.sh"]
|