mirror of
https://github.com/open-webui/open-webui.git
synced 2025-12-14 13:25:20 +00:00
275 lines
No EOL
11 KiB
Docker
275 lines
No EOL
11 KiB
Docker
# syntax=docker/dockerfile:1
|
||
# Initialize device type args
|
||
ARG USE_CUDA=false
|
||
ARG USE_OLLAMA=false
|
||
ARG USE_SLIM=false
|
||
ARG USE_PERMISSION_HARDENING=false
|
||
ARG USE_CUDA_VER=cu128
|
||
ARG USE_EMBEDDING_MODEL=sentence-transformers/all-MiniLM-L6-v2
|
||
ARG USE_RERANKING_MODEL=""
|
||
ARG USE_TIKTOKEN_ENCODING_NAME="cl100k_base"
|
||
ARG BUILD_HASH=dev-build
|
||
ARG UID=0
|
||
ARG GID=0
|
||
|
||
######## WebUI frontend ########
|
||
FROM --platform=$BUILDPLATFORM node:20-alpine3.20 AS build
|
||
ARG BUILD_HASH
|
||
|
||
# ========== 配置 Alpine 镜像源 ==========
|
||
RUN echo "https://mirrors.aliyun.com/alpine/v3.20/main" > /etc/apk/repositories && \
|
||
echo "https://mirrors.aliyun.com/alpine/v3.20/community" >> /etc/apk/repositories && \
|
||
apk update
|
||
|
||
# ========== 增加 Node.js 堆内存限制 ==========
|
||
ENV NODE_OPTIONS="--max-old-space-size=4096"
|
||
|
||
# ========== 配置 npm 镜像源 ==========
|
||
RUN npm config set registry https://registry.npmmirror.com && \
|
||
npm config set fetch-timeout 120000 && \
|
||
npm config set fetch-retries 5 && \
|
||
npm config set fetch-retry-mintimeout 20000 && \
|
||
npm config set fetch-retry-maxtimeout 120000 && \
|
||
npm config set maxsockets 5
|
||
|
||
# ========== 配置二进制包镜像 ==========
|
||
ENV ELECTRON_MIRROR=https://npmmirror.com/mirrors/electron/ \
|
||
SASS_BINARY_SITE=https://npmmirror.com/mirrors/node-sass/ \
|
||
PHANTOMJS_CDNURL=https://nppmirror.com/mirrors/phantomjs/ \
|
||
CHROMEDRIVER_CDNURL=https://npmmirror.com/mirrors/chromedriver/ \
|
||
OPERADRIVER_CDNURL=https://npmmirror.com/mirrors/operadriver/ \
|
||
PYTHON_MIRROR=https://npmmirror.com/mirrors/python/
|
||
|
||
# ========== 配置代理（可选）==========
|
||
ARG HTTP_PROXY
|
||
ARG HTTPS_PROXY
|
||
ENV HTTP_PROXY=${HTTP_PROXY}
|
||
ENV HTTPS_PROXY=${HTTPS_PROXY}
|
||
ENV NO_PROXY=localhost,127.0.0.1,mirrors.aliyun.com,registry.nppmirror.com,nppmirror.com
|
||
|
||
# ========== 安装必要工具 ==========
|
||
RUN apk add --no-cache git python3 make g++ && \
|
||
if [ -n "$HTTP_PROXY" ]; then \
|
||
git config --global http.proxy ${HTTP_PROXY} && \
|
||
git config --global https.proxy ${HTTPS_PROXY} && \
|
||
git config --global http.sslVerify false; \
|
||
fi
|
||
|
||
WORKDIR /app
|
||
|
||
# ========== 安装依赖（不使用 --ignore-scripts）==========
|
||
COPY package.json package-lock.json ./
|
||
|
||
RUN echo "==================================" && \
|
||
echo "Starting npm install" && \
|
||
echo "Time: $(date)" && \
|
||
echo "==================================" && \
|
||
npm cache clean --force && \
|
||
npm install --legacy-peer-deps --no-audit --no-fund || \
|
||
(echo "First attempt failed, retrying..." && \
|
||
rm -rf node_modules package-lock.json && \
|
||
npm install --legacy-peer-deps --no-audit --no-fund) && \
|
||
echo "==================================" && \
|
||
echo "npm install completed" && \
|
||
echo "Time: $(date)" && \
|
||
echo "=================================="
|
||
|
||
# ========== 构建前端 ==========
|
||
COPY . .
|
||
ENV APP_BUILD_HASH=${BUILD_HASH}
|
||
|
||
RUN echo "==================================" && \
|
||
echo "Starting frontend build" && \
|
||
echo "Time: $(date)" && \
|
||
echo "==================================" && \
|
||
npm run build && \
|
||
echo "==================================" && \
|
||
echo "Build completed" && \
|
||
echo "Time: $(date)" && \
|
||
echo "=================================="
|
||
|
||
######## WebUI backend ########
|
||
FROM python:3.11-slim-bookworm AS base
|
||
|
||
# Use args
|
||
ARG USE_CUDA
|
||
ARG USE_OLLAMA
|
||
ARG USE_CUDA_VER
|
||
ARG USE_SLIM
|
||
ARG USE_PERMISSION_HARDENING
|
||
ARG USE_EMBEDDING_MODEL
|
||
ARG USE_RERANKING_MODEL
|
||
ARG UID
|
||
ARG GID
|
||
|
||
## Basis ##
|
||
ENV ENV=prod \
|
||
PORT=8080 \
|
||
USE_OLLAMA_DOCKER=${USE_OLLAMA} \
|
||
USE_CUDA_DOCKER=${USE_CUDA} \
|
||
USE_SLIM_DOCKER=${USE_SLIM} \
|
||
USE_CUDA_DOCKER_VER=${USE_CUDA_VER} \
|
||
USE_EMBEDDING_MODEL_DOCKER=${USE_EMBEDDING_MODEL} \
|
||
USE_RERANKING_MODEL_DOCKER=${USE_RERANKING_MODEL}
|
||
|
||
## Basis URL Config ##
|
||
ENV OLLAMA_BASE_URL="/ollama" \
|
||
OPENAI_API_BASE_URL=""
|
||
|
||
## API Key and Security Config ##
|
||
ENV OPENAI_API_KEY="" \
|
||
WEBUI_SECRET_KEY="" \
|
||
SCARF_NO_ANALYTICS=true \
|
||
DO_NOT_TRACK=true \
|
||
ANONYMIZED_TELEMETRY=false
|
||
|
||
#### Other models #########################################################
|
||
ENV WHISPER_MODEL="base" \
|
||
WHISPER_MODEL_DIR="/app/backend/data/cache/whisper/models" \
|
||
RAG_EMBEDDING_MODEL="$USE_EMBEDDING_MODEL_DOCKER" \
|
||
RAG_RERANKING_MODEL="$USE_RERANKING_MODEL_DOCKER" \
|
||
SENTENCE_TRANSFORMERS_HOME="/app/backend/data/cache/embedding/models" \
|
||
TIKTOKEN_ENCODING_NAME="cl100k_base" \
|
||
TIKTOKEN_CACHE_DIR="/app/backend/data/cache/tiktoken" \
|
||
HF_HOME="/app/backend/data/cache/embedding/models"
|
||
|
||
# ========== 配置 Hugging Face 镜像 ==========
|
||
ENV HF_ENDPOINT=https://hf-mirror.com
|
||
|
||
WORKDIR /app/backend
|
||
|
||
ENV HOME=/root
|
||
|
||
# ========== 创建用户和组 ==========
|
||
RUN if [ $UID -ne 0 ]; then \
|
||
if [ $GID -ne 0 ]; then \
|
||
addgroup --gid $GID app; \
|
||
fi; \
|
||
adduser --uid $UID --gid $GID --home $HOME --disabled-password --no-create-home app; \
|
||
fi
|
||
|
||
RUN mkdir -p $HOME/.cache/chroma && \
|
||
echo -n 00000000-0000-0000-0000-000000000000 > $HOME/.cache/chroma/telemetry_user_id && \
|
||
chown -R $UID:$GID /app $HOME
|
||
|
||
# ========== 配置 Debian 镜像源 ==========
|
||
RUN sed -i 's@deb.debian.org@mirrors.aliyun.com@g' /etc/apt/sources.list.d/debian.sources && \
|
||
sed -i 's@security.debian.org@mirrors.aliyun.com@g' /etc/apt/sources.list.d/debian.sources
|
||
|
||
# ========== 安装系统依赖 ==========
|
||
RUN apt-get update && \
|
||
apt-get install -y --no-install-recommends \
|
||
git build-essential pandoc gcc netcat-openbsd curl jq \
|
||
python3-dev \
|
||
ffmpeg libsm6 libxext6 \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
# ========== 配置 pip 镜像源 ==========
|
||
RUN pip3 config set global.index-url https://mirrors.aliyun.com/pypi/simple/ && \
|
||
pip3 config set install.trusted-host mirrors.aliyun.com && \
|
||
pip3 config set global.timeout 600
|
||
|
||
# ========== 配置 uv 使用镜像源 ==========
|
||
ENV UV_INDEX_URL=https://mirrors.aliyun.com/pypi/simple/ \
|
||
UV_EXTRA_INDEX_URL="" \
|
||
UV_NO_CACHE=0
|
||
|
||
# ========== 安装 Python 依赖 ==========
|
||
COPY --chown=$UID:$GID ./backend/requirements.txt ./requirements.txt
|
||
|
||
RUN echo "==================================" && \
|
||
echo "Installing Python dependencies" && \
|
||
echo "Time: $(date)" && \
|
||
echo "==================================" && \
|
||
pip3 install uv && \
|
||
if [ "$USE_CUDA" = "true" ]; then \
|
||
echo "Installing PyTorch with CUDA support..." && \
|
||
pip3 install torch torchvision torchaudio \
|
||
--index-url https://mirrors.aliyun.com/pypi/simple/ \
|
||
--trusted-host mirrors.aliyun.com || \
|
||
(echo "Aliyun failed, trying Tsinghua mirror..." && \
|
||
pip3 install torch torchvision torchaudio \
|
||
--index-url https://pypi.tuna.tsinghua.edu.cn/simple/ \
|
||
--trusted-host pypi.tuna.tsinghua.edu.cn) || \
|
||
(echo "Mirrors failed, trying official PyTorch repo..." && \
|
||
pip3 install torch torchvision torchaudio \
|
||
--index-url https://download.pytorch.org/whl/$USE_CUDA_DOCKER_VER) && \
|
||
echo "Installing other requirements with uv..." && \
|
||
uv pip install --system -r requirements.txt \
|
||
--index-url https://mirrors.aliyun.com/pypi/simple/ && \
|
||
if [ "$USE_SLIM" != "true" ]; then \
|
||
echo "Downloading models..." && \
|
||
python -c "import os; from sentence_transformers import SentenceTransformer; SentenceTransformer(os.environ['RAG_EMBEDDING_MODEL'], device='cpu')" && \
|
||
python -c "import os; from faster_whisper import WhisperModel; WhisperModel(os.environ['WHISPER_MODEL'], device='cpu', compute_type='int8', download_root=os.environ['WHISPER_MODEL_DIR'])" && \
|
||
python -c "import os; import tiktoken; tiktoken.get_encoding(os.environ['TIKTOKEN_ENCODING_NAME'])"; \
|
||
fi; \
|
||
else \
|
||
echo "Installing PyTorch CPU version..." && \
|
||
pip3 install torch torchvision torchaudio \
|
||
--index-url https://mirrors.aliyun.com/pypi/simple/ \
|
||
--trusted-host mirrors.aliyun.com || \
|
||
(echo "Aliyun failed, trying Tsinghua mirror..." && \
|
||
pip3 install torch torchvision torchaudio \
|
||
--index-url https://pypi.tuna.tsinghua.edu.cn/simple/ \
|
||
--trusted-host pypi.tuna.tsinghua.edu.cn) || \
|
||
(echo "Tsinghua failed, trying USTC mirror..." && \
|
||
pip3 install torch torchvision torchaudio \
|
||
--index-url https://mirrors.ustc.edu.cn/pypi/web/simple/ \
|
||
--trusted-host mirrors.ustc.edu.cn) || \
|
||
(echo "All mirrors failed, trying official PyTorch CPU repo..." && \
|
||
pip3 install torch torchvision torchaudio \
|
||
--index-url https://download.pytorch.org/whl/cpu) && \
|
||
echo "Installing other requirements with uv..." && \
|
||
uv pip install --system -r requirements.txt \
|
||
--index-url https://mirrors.aliyun.com/pypi/simple/ && \
|
||
if [ "$USE_SLIM" != "true" ]; then \
|
||
echo "Downloading models..." && \
|
||
python -c "import os; from sentence_transformers import SentenceTransformer; SentenceTransformer(os.environ['RAG_EMBEDDING_MODEL'], device='cpu')" && \
|
||
python -c "import os; from faster_whisper import WhisperModel; WhisperModel(os.environ['WHISPER_MODEL'], device='cpu', compute_type='int8', download_root=os.environ['WHISPER_MODEL_DIR'])" && \
|
||
python -c "import os; import tiktoken; tiktoken.get_encoding(os.environ['TIKTOKEN_ENCODING_NAME'])"; \
|
||
fi; \
|
||
fi && \
|
||
mkdir -p /app/backend/data && chown -R $UID:$GID /app/backend/data/ && \
|
||
echo "==================================" && \
|
||
echo "Python dependencies installed" && \
|
||
echo "Time: $(date)" && \
|
||
echo "=================================="
|
||
|
||
# ========== 安装 Ollama ==========
|
||
RUN if [ "$USE_OLLAMA" = "true" ]; then \
|
||
date +%s > /tmp/ollama_build_hash && \
|
||
echo "Installing Ollama..." && \
|
||
export HF_ENDPOINT=https://hf-mirror.com && \
|
||
curl -fsSL https://ollama.com/install.sh | sh || \
|
||
(echo "Ollama installation failed, trying with proxy..." && \
|
||
export http_proxy=http://host.docker.internal:7897 && \
|
||
export https_proxy=http://host.docker.internal:7897 && \
|
||
curl -fsSL https://ollama.com/install.sh | sh); \
|
||
fi
|
||
|
||
# ========== 复制构建文件 ==========
|
||
COPY --chown=$UID:$GID --from=build /app/build /app/build
|
||
COPY --chown=$UID:$GID --from=build /app/CHANGELOG.md /app/CHANGELOG.md
|
||
COPY --chown=$UID:$GID --from=build /app/package.json /app/package.json
|
||
COPY --chown=$UID:$GID ./backend .
|
||
|
||
EXPOSE 8080
|
||
|
||
HEALTHCHECK CMD curl --silent --fail http://localhost:${PORT:-8080}/health | jq -ne 'input.status == true' || exit 1
|
||
|
||
# ========== 权限加固 ==========
|
||
RUN if [ "$USE_PERMISSION_HARDENING" = "true" ]; then \
|
||
set -eux; \
|
||
chgrp -R 0 /app /root || true; \
|
||
chmod -R g+rwX /app /root || true; \
|
||
find /app -type d -exec chmod g+s {} + || true; \
|
||
find /root -type d -exec chmod g+s {} + || true; \
|
||
fi
|
||
|
||
USER $UID:$GID
|
||
|
||
ARG BUILD_HASH
|
||
ENV WEBUI_BUILD_VERSION=${BUILD_HASH}
|
||
ENV DOCKER=true
|
||
|
||
CMD [ "bash", "start.sh"] |