Compare commits
4 Commits
fe3d852434
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
79a626923a | ||
|
|
a283673bcf | ||
|
|
5c22415ab4 | ||
|
|
a29ce99420 |
13
Dockerfile
13
Dockerfile
@@ -1,17 +1,16 @@
|
|||||||
# Multi-stage für kleinere finale Imagegröße
|
# Alpine-basiertes Image für kleinere Größe
|
||||||
FROM python:3.12-slim AS base
|
FROM python:3.12-alpine AS base
|
||||||
|
|
||||||
ENV PYTHONDONTWRITEBYTECODE=1 \
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
||||||
PYTHONUNBUFFERED=1 \
|
PYTHONUNBUFFERED=1 \
|
||||||
PIP_NO_CACHE_DIR=1
|
PIP_NO_CACHE_DIR=1
|
||||||
|
|
||||||
# System deps (tzdata optional falls benötigt)
|
# Systemabhängigkeiten installieren (su-exec für Rechtewechsel)
|
||||||
RUN apt-get update && apt-get install -y --no-install-recommends \
|
RUN apk add --no-cache ca-certificates su-exec
|
||||||
ca-certificates \
|
|
||||||
&& rm -rf /var/lib/apt/lists/*
|
|
||||||
|
|
||||||
# Non-root user
|
# Non-root user
|
||||||
RUN useradd -u 10001 -m appuser
|
RUN addgroup -S appgroup \
|
||||||
|
&& adduser -S -G appgroup -u 10001 appuser
|
||||||
|
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
|
|||||||
15
README.md
15
README.md
@@ -79,6 +79,21 @@ Alle Counter werden nach jeder Änderung in `/data/counters.json` gespeichert. D
|
|||||||
- Non-root User `appuser`
|
- Non-root User `appuser`
|
||||||
- Kein Port-Expose (Long Polling)
|
- Kein Port-Expose (Long Polling)
|
||||||
|
|
||||||
|
## Docker Image veröffentlichen
|
||||||
|
Zum Bauen und Pushen des Images mit `latest`-Tag und einem datierten Tag (z. B. `2025-09-30`) steht das Skript `publish.py` bereit. Stelle vorher sicher, dass du in der Registry `git.beging.de` angemeldet bist.
|
||||||
|
|
||||||
|
```bash
|
||||||
|
python publish.py --date 2025-09-30
|
||||||
|
```
|
||||||
|
|
||||||
|
Ohne `--date` wird automatisch das heutige UTC-Datum verwendet. Mit `--dry-run` kannst du die Docker-Kommandos nur anzeigen lassen:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
python publish.py --dry-run
|
||||||
|
```
|
||||||
|
|
||||||
|
Falls du den `latest` Tag nicht veröffentlichen möchtest, verwende `--no-latest`.
|
||||||
|
|
||||||
## Logging
|
## Logging
|
||||||
Standard: INFO. Anpassbar über `log_level` in der Config.
|
Standard: INFO. Anpassbar über `log_level` in der Config.
|
||||||
|
|
||||||
|
|||||||
18
bot.py
18
bot.py
@@ -405,24 +405,6 @@ def init_counters(existing: Dict[str, int], config: Dict[str, Any]) -> Dict[str,
|
|||||||
|
|
||||||
async def on_startup(app):
|
async def on_startup(app):
|
||||||
logger.info("Bot gestartet und bereit.")
|
logger.info("Bot gestartet und bereit.")
|
||||||
announce_ids = os.environ.get("STARTUP_ANNOUNCE_CHAT_IDS")
|
|
||||||
if announce_ids:
|
|
||||||
ids = []
|
|
||||||
for raw in announce_ids.split(','):
|
|
||||||
raw = raw.strip()
|
|
||||||
if not raw:
|
|
||||||
continue
|
|
||||||
try:
|
|
||||||
ids.append(int(raw))
|
|
||||||
except ValueError:
|
|
||||||
logger.warning("Kann Chat ID %s nicht in int umwandeln", raw)
|
|
||||||
if ids:
|
|
||||||
me = await app.bot.get_me()
|
|
||||||
for cid in ids:
|
|
||||||
try:
|
|
||||||
await app.bot.send_message(cid, f"🤖 {me.first_name} ist bereit. Nutze /help für Befehle.")
|
|
||||||
except Exception as e:
|
|
||||||
logger.warning("Konnte Startup-Nachricht an %s nicht senden: %s", cid, e)
|
|
||||||
|
|
||||||
|
|
||||||
def main():
|
def main():
|
||||||
|
|||||||
@@ -4,13 +4,13 @@ set -e
|
|||||||
# If running as root, fix ownership of /data, then drop privileges
|
# If running as root, fix ownership of /data, then drop privileges
|
||||||
if [ "$(id -u)" = "0" ]; then
|
if [ "$(id -u)" = "0" ]; then
|
||||||
mkdir -p /data
|
mkdir -p /data
|
||||||
chown -R appuser:appuser /data || echo "Warn: could not chown /data"
|
chown -R appuser:appgroup /data || echo "Warn: could not chown /data"
|
||||||
# Copy example config only if missing target
|
# Copy example config only if missing target
|
||||||
if [ ! -f /app/config.yaml ] && [ -f /app/config.example.yaml ]; then
|
if [ ! -f /app/config.yaml ] && [ -f /app/config.example.yaml ]; then
|
||||||
cp /app/config.example.yaml /app/config.yaml
|
cp /app/config.example.yaml /app/config.yaml
|
||||||
chown appuser:appuser /app/config.yaml || true
|
chown appuser:appgroup /app/config.yaml || true
|
||||||
fi
|
fi
|
||||||
exec su -s /bin/sh appuser -c "$*"
|
exec su-exec appuser "$@"
|
||||||
else
|
else
|
||||||
exec "$@"
|
exec "$@"
|
||||||
fi
|
fi
|
||||||
|
|||||||
93
publish.py
Normal file
93
publish.py
Normal file
@@ -0,0 +1,93 @@
|
|||||||
|
import argparse
|
||||||
|
import datetime as dt
|
||||||
|
import shlex
|
||||||
|
import subprocess
|
||||||
|
import sys
|
||||||
|
from pathlib import Path
|
||||||
|
|
||||||
|
REPOSITORY = "git.beging.de/troogs/gigalativbot"
|
||||||
|
DEFAULT_CONTEXT = Path(__file__).parent
|
||||||
|
|
||||||
|
|
||||||
|
def run_command(cmd: list[str], /, *, dry_run: bool) -> None:
|
||||||
|
"""Print and optionally execute a shell command."""
|
||||||
|
print("$", shlex.join(cmd))
|
||||||
|
if dry_run:
|
||||||
|
return
|
||||||
|
subprocess.run(cmd, check=True)
|
||||||
|
|
||||||
|
|
||||||
|
def build_and_push(*, include_latest: bool, date_tag: str, context: Path, dockerfile: Path | None, dry_run: bool) -> None:
|
||||||
|
tags: list[str] = []
|
||||||
|
if include_latest:
|
||||||
|
tags.append(f"{REPOSITORY}:latest")
|
||||||
|
tags.append(f"{REPOSITORY}:{date_tag}")
|
||||||
|
|
||||||
|
build_cmd = ["docker", "build"]
|
||||||
|
for tag in tags:
|
||||||
|
build_cmd.extend(["-t", tag])
|
||||||
|
if dockerfile is not None:
|
||||||
|
build_cmd.extend(["-f", str(dockerfile)])
|
||||||
|
build_cmd.append(str(context))
|
||||||
|
|
||||||
|
run_command(build_cmd, dry_run=dry_run)
|
||||||
|
|
||||||
|
for tag in tags:
|
||||||
|
run_command(["docker", "push", tag], dry_run=dry_run)
|
||||||
|
|
||||||
|
|
||||||
|
def parse_args() -> argparse.Namespace:
|
||||||
|
parser = argparse.ArgumentParser(description="Build and push docker images with latest and YYYYMMDD tags.")
|
||||||
|
parser.add_argument("--context", default=DEFAULT_CONTEXT, type=Path, help="Build context directory (default: project root)")
|
||||||
|
parser.add_argument("--dockerfile", type=Path, default=None, help="Path to Dockerfile (defaults to <context>/Dockerfile)")
|
||||||
|
parser.add_argument("--date", help="Custom date string for tag (YYYY-MM-DD). Defaults to today (UTC).")
|
||||||
|
parser.add_argument("--no-latest", action="store_true", help="Do not tag/push the 'latest' tag.")
|
||||||
|
parser.add_argument("--dry-run", action="store_true", help="Print the docker commands without executing them.")
|
||||||
|
return parser.parse_args()
|
||||||
|
|
||||||
|
|
||||||
|
def ensure_date_tag(raw: str | None) -> str:
|
||||||
|
if raw is None:
|
||||||
|
return dt.datetime.utcnow().strftime("%Y-%m-%d")
|
||||||
|
try:
|
||||||
|
parsed = dt.datetime.strptime(raw, "%Y-%m-%d")
|
||||||
|
except ValueError as exc:
|
||||||
|
raise ValueError("Date tag must be in YYYY-MM-DD format.") from exc
|
||||||
|
return parsed.strftime("%Y-%m-%d")
|
||||||
|
|
||||||
|
|
||||||
|
def main() -> int:
|
||||||
|
args = parse_args()
|
||||||
|
try:
|
||||||
|
date_tag = ensure_date_tag(args.date)
|
||||||
|
except ValueError as exc:
|
||||||
|
print(f"Error: {exc}", file=sys.stderr)
|
||||||
|
return 1
|
||||||
|
|
||||||
|
context = args.context.resolve()
|
||||||
|
dockerfile = args.dockerfile.resolve() if args.dockerfile else None
|
||||||
|
|
||||||
|
if dockerfile and not dockerfile.exists():
|
||||||
|
print(f"Error: Dockerfile {dockerfile} does not exist.", file=sys.stderr)
|
||||||
|
return 2
|
||||||
|
|
||||||
|
if not context.exists():
|
||||||
|
print(f"Error: context directory {context} does not exist.", file=sys.stderr)
|
||||||
|
return 3
|
||||||
|
|
||||||
|
try:
|
||||||
|
build_and_push(
|
||||||
|
include_latest=not args.no_latest,
|
||||||
|
date_tag=date_tag,
|
||||||
|
context=context,
|
||||||
|
dockerfile=dockerfile,
|
||||||
|
dry_run=args.dry_run,
|
||||||
|
)
|
||||||
|
except subprocess.CalledProcessError as exc:
|
||||||
|
print(f"Command failed with exit code {exc.returncode}: {exc.cmd}", file=sys.stderr)
|
||||||
|
return exc.returncode
|
||||||
|
return 0
|
||||||
|
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
sys.exit(main())
|
||||||
Reference in New Issue
Block a user