shadowdaoandClaude Opus 4.7
10a1e0062e
onnxruntime-node ships glibc-linked native binaries; loading them on node:20-alpine (musl libc) fails with: Error loading shared library ld-linux-x86-64.so.2: No such file or directory (needed by …/onnxruntime-node/bin/napi-v3/linux/x64/ libonnxruntime.so.1.14.0) Using node:20-slim (Debian) provides glibc and the dynamic linker the native bindings expect. Image is ~50 MB larger but actually works. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
67 lines
2.4 KiB
Docker
67 lines
2.4 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
# -----------------------------------------------------------------------------
|
|
# Embedder sidecar.
|
|
#
|
|
# Builds from the repo root: docker build -f apps/embedder/Dockerfile .
|
|
# -----------------------------------------------------------------------------
|
|
|
|
# node:20-slim instead of -alpine — onnxruntime-node ships glibc-linked
|
|
# binaries and crashes at dlopen time on musl.
|
|
FROM node:20-slim AS base
|
|
RUN corepack enable
|
|
WORKDIR /app
|
|
|
|
# ---------- deps ----------
|
|
FROM base AS deps
|
|
COPY package.json pnpm-workspace.yaml pnpm-lock.yaml .npmrc ./
|
|
COPY apps/embedder/package.json ./apps/embedder/
|
|
COPY apps/web/package.json ./apps/web/
|
|
COPY packages/schemas/package.json ./packages/schemas/
|
|
RUN --mount=type=cache,id=pnpm,target=/root/.local/share/pnpm/store \
|
|
pnpm install --frozen-lockfile
|
|
|
|
# ---------- builder ----------
|
|
FROM base AS builder
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY --from=deps /app/apps/embedder/node_modules ./apps/embedder/node_modules
|
|
COPY --from=deps /app/apps/web/node_modules ./apps/web/node_modules
|
|
COPY --from=deps /app/packages/schemas/node_modules ./packages/schemas/node_modules
|
|
COPY . .
|
|
|
|
# Compile TS → JS into apps/embedder/dist.
|
|
RUN cd apps/embedder \
|
|
&& pnpm exec tsc -p tsconfig.json --noEmit false --outDir dist
|
|
|
|
# `pnpm deploy` writes a self-contained tree to /deploy: package.json,
|
|
# dist/, and a flat node_modules with only production deps. The `files`
|
|
# field in apps/embedder/package.json is what tells deploy to include dist.
|
|
RUN pnpm --filter @shared-memory/embedder deploy --prod /deploy
|
|
|
|
# ---------- runner ----------
|
|
FROM node:20-slim AS runner
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production \
|
|
PORT=8080 \
|
|
HOST=0.0.0.0 \
|
|
MODEL_CACHE_DIR=/data/models
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends wget ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& groupadd --system --gid 1001 nodejs \
|
|
&& useradd --system --uid 1001 --gid nodejs --no-create-home node-embedder \
|
|
&& mkdir -p /data/models \
|
|
&& chown -R node-embedder:nodejs /data
|
|
|
|
# /deploy is the self-contained output of `pnpm deploy --prod` — copy as-is.
|
|
COPY --from=builder --chown=node-embedder:nodejs /deploy ./
|
|
|
|
USER node-embedder
|
|
EXPOSE 8080
|
|
VOLUME ["/data/models"]
|
|
|
|
HEALTHCHECK --interval=15s --timeout=5s --start-period=180s --retries=8 \
|
|
CMD wget -q -O - http://127.0.0.1:8080/health | grep -q '"ready":true' || exit 1
|
|
|
|
CMD ["node", "--enable-source-maps", "dist/index.js"]
|