FROM registry.cn-chengdu.aliyuncs.com/go_ls/bert_base:latest WORKDIR /app COPY services/ ./services/ COPY scripts/ ./scripts/ COPY .env .env # 生成 supervisor 配置 RUN python scripts/generate_supervisor_conf.py # 创建所有需要的目录 RUN mkdir -p /var/log/supervisor /app/logs /app/model_cache /tmp/gunicorn && \ chmod 777 /var/log/supervisor /app/logs /app/model_cache /tmp /tmp/gunicorn # 创建非root用户并加入必要的组 RUN groupadd -g 1000 appuser && \ useradd -m -u 1000 -g appuser appuser && \ usermod -aG root appuser && \ chown -R appuser:appuser /app && \ chown -R appuser:appuser /var/log/supervisor # 切换到非root用户 USER appuser # 启动命令 CMD ["sh", "-c", "mkdir -p /tmp/gunicorn && python scripts/download_models.py && supervisord -c ./supervisor.conf"]