From 17a44c866d241ae7009e43e70ad5ef3f7f246b74 Mon Sep 17 00:00:00 2001
From: MatrixSeven <hacker.kill07@gmail.com>
Date: Thu, 28 Aug 2025 19:49:56 +0800
Subject: [PATCH] =?UTF-8?q?feat:=E4=BF=AE=E5=A4=8Dgithub=20action?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/docker-publish.yml |  22 +---
 Dockerfile                           | 187 ++++++++-------------------
 docker-release.sh                    | 163 -----------------------
 3 files changed, 59 insertions(+), 313 deletions(-)
 delete mode 100755 docker-release.sh

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 945f966..a6bcbc7 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -1,5 +1,5 @@
 
-name: 🐳 Build and Push Docker Image
+name: 🐳 Build and Push Docker Image (AMD64)
 
 on:
   # 手动触发
@@ -15,11 +15,6 @@ on:
         required: true
         default: true
         type: boolean
-      build_multiarch:
-        description: '构建多架构镜像 (amd64 + arm64)'
-        required: true
-        default: true
-        type: boolean
 
   # 推送标签时触发
   push:
@@ -47,10 +42,6 @@ jobs:
       - name: 📥 Checkout code
         uses: actions/checkout@v4
 
-      - name: 🚀 Set up QEMU
-        uses: docker/setup-qemu-action@v3
-        with:
-          platforms: linux/amd64,linux/arm64
 
       - name: 🏷️ Extract metadata
         id: meta
@@ -69,7 +60,6 @@ jobs:
       - name: 🔧 Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
-          platforms: linux/amd64,linux/arm64
           driver-opts: |
             network=host
           buildkitd-flags: |
@@ -83,16 +73,10 @@ jobs:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_TOKEN }}
 
-      - name: 🏗️ Determine build platforms
+      - name: 🏗️ Set build platform
         id: platforms
         run: |
-          if [[ "${{ github.event_name }}" == "workflow_dispatch" && "${{ inputs.build_multiarch }}" == "true" ]]; then
-            echo "platforms=linux/amd64,linux/arm64" >> $GITHUB_OUTPUT
-          elif [[ "${{ github.event_name }}" == "push" ]]; then
-            echo "platforms=linux/amd64,linux/arm64" >> $GITHUB_OUTPUT
-          else
-            echo "platforms=linux/amd64" >> $GITHUB_OUTPUT
-          fi
+          echo "platforms=linux/amd64" >> $GITHUB_OUTPUT
 
       - name: 🐳 Build and push Docker image
         uses: docker/build-push-action@v5
diff --git a/Dockerfile b/Dockerfile
index 91e411c..6841d68 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,144 +1,69 @@
 
-name: 🐳 Build and Push Docker Image
+# ==============================================
+# AMD64 Dockerfile - 使用官方 Go 基础镜像
+# ==============================================
 
-on:
-  # 手动触发
-  workflow_dispatch:
-    inputs:
-      version:
-        description: '版本号 (例如: v1.0.5)'
-        required: true
-        default: 'v1.0.5'
-        type: string
-      push_to_hub:
-        description: '推送到 Docker Hub'
-        required: true
-        default: true
-        type: boolean
-      build_multiarch:
-        description: '构建多架构镜像 (amd64 + arm64)'
-        required: true
-        default: true
-        type: boolean
+# 前端构建阶段
+FROM node:20-alpine AS frontend-builder
 
-  # 推送标签时触发
-  push:
-    tags:
-      - 'v*.*.*'
+# 国内镜像源优化
+RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories && \
+    npm config set registry https://registry.npmmirror.com
 
-  # PR 时构建测试（不推送）
-  pull_request:
-    branches: [ main ]
+WORKDIR /app/chuan-next
 
-env:
-  REGISTRY: docker.io
-  IMAGE_NAME: matrixseven/file-transfer-go
+# 前端依赖和构建
+COPY chuan-next/package.json ./
+RUN npm install
 
-jobs:
-  build:
-    name: 🏗️ Build & Push Docker Image
-    runs-on: ubuntu-latest
-    
-    permissions:
-      contents: read
-      packages: write
-      
-    steps:
-      - name: 📥 Checkout code
-        uses: actions/checkout@v4
+COPY chuan-next/ ./
+# 临时移除 API 目录进行 SSG 构建
+RUN if [ -d "src/app/api" ]; then mv src/app/api /tmp/api-backup; fi && \
+    NEXT_EXPORT=true npm run build && \
+    if [ -d "/tmp/api-backup" ]; then mv /tmp/api-backup src/app/api; fi
 
-      - name: 🚀 Set up QEMU
-        uses: docker/setup-qemu-action@v3
-        with:
-          platforms: linux/amd64,linux/arm64
-        
-      - name: 🏷️ Extract metadata
-        id: meta
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-          tags: |
-            type=ref,event=branch
-            type=ref,event=pr
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}}
-            type=semver,pattern={{major}}
-            type=raw,value=latest,enable={{is_default_branch}}
-            type=raw,value=${{ inputs.version }},enable=${{ github.event_name == 'workflow_dispatch' }}
+# ==============================================
 
-      - name: 🔧 Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-        with:
-          platforms: linux/amd64,linux/arm64
-          driver-opts: |
-            network=host
-          buildkitd-flags: |
-            --allow-insecure-entitlement=network.host
+# Go 构建阶段
+FROM golang:1.21-alpine AS go-builder
 
-      - name: 🔑 Login to Docker Hub
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_TOKEN }}
+# 国内镜像源和代理优化
+RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories && \
+    apk add --no-cache git ca-certificates tzdata
 
-      - name: 🐳 Build and push Docker image
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: ./Dockerfile
-          platforms: ${{ (github.event_name == 'workflow_dispatch' && inputs.build_multiarch == true) || github.event_name == 'push' && 'linux/amd64,linux/arm64' || 'linux/amd64' }}
-          push: ${{ github.event_name != 'pull_request' && (inputs.push_to_hub != false) }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-          build-args: |
-            BUILDKIT_INLINE_CACHE=1
-          provenance: false
-          sbom: false
+ENV GOPROXY=https://goproxy.cn,direct
+ENV CGO_ENABLED=0
+ENV GOOS=linux
+ENV GOARCH=amd64
 
-      - name: 📊 Image digest
-        if: github.event_name != 'pull_request'
-        run: echo ${{ steps.build.outputs.digest }}
-        
-      - name: 🎉 Build Summary
-        if: always()
-        run: |
-          echo "## 🐳 Docker Build Summary" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "### 📦 Image Details" >> $GITHUB_STEP_SUMMARY
-          echo "- **Registry**: ${{ env.REGISTRY }}" >> $GITHUB_STEP_SUMMARY
-          echo "- **Image**: ${{ env.IMAGE_NAME }}" >> $GITHUB_STEP_SUMMARY
-          echo "- **Tags**: ${{ steps.meta.outputs.tags }}" >> $GITHUB_STEP_SUMMARY
-          echo "- **Platforms**: ${{ (github.event_name == 'workflow_dispatch' && inputs.build_multiarch == true) || github.event_name == 'push' && 'linux/amd64,linux/arm64' || 'linux/amd64' }}" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "### 🚀 Usage" >> $GITHUB_STEP_SUMMARY
-          echo '```bash' >> $GITHUB_STEP_SUMMARY
-          echo "docker run -d -p 8080:8080 ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.version || 'latest' }}" >> $GITHUB_STEP_SUMMARY
-          echo '```' >> $GITHUB_STEP_SUMMARY
+WORKDIR /app
 
-  security-scan:
-    name: 🔍 Security Scan
-    runs-on: ubuntu-latest
-    needs: build
-    if: github.event_name != 'pull_request'
-    
-    steps:
-      - name: 📥 Checkout code
-        uses: actions/checkout@v4
-        
-      - name: 🔍 Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@master
-        with:
-          image-ref: '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest'
-          format: 'sarif'
-          output: 'trivy-results.sarif'
-          
-      - name: 📤 Upload Trivy scan results
-        uses: github/codeql-action/upload-sarif@v3
-        if: always()
-        with:
-          sarif_file: 'trivy-results.sarif'
+# Go 依赖
+COPY go.mod go.sum ./
+RUN go mod download
+
+# 拷贝前端构建结果
+COPY --from=frontend-builder /app/chuan-next/out ./internal/web/frontend
+
+# Go 源码
+COPY cmd/ ./cmd/
+COPY internal/ ./internal/
+
+# 构建 Go 应用 - AMD64 架构
+RUN go build -ldflags='-w -s' -o server ./cmd
+
+# ==============================================
+
+FROM alpine:3.18
+
+RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.aliyun.com/g' /etc/apk/repositories && \
+    apk add --no-cache ca-certificates tzdata && \
+    adduser -D -s /bin/sh appuser
+
+WORKDIR /app
+COPY --from=go-builder --chown=appuser:appuser /app/server ./
+USER appuser
+
+EXPOSE 8080
+CMD ["./server"]
 
diff --git a/docker-release.sh b/docker-release.sh
deleted file mode 100755
index 6ed2ade..0000000
--- a/docker-release.sh
+++ /dev/null
@@ -1,163 +0,0 @@
-#!/bin/bash
-
-# ==============================================
-# Docker 发布脚本
-# 支持单架构和多架构构建
-# ==============================================
-
-set -e
-
-# 颜色定义
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-BLUE='\033[0;34m'
-PURPLE='\033[0;35m'
-NC='\033[0m'
-
-# 配置
-DOCKER_HUB_USER=${DOCKER_HUB_USER:-"matrixseven"}  # 替换为你的 Docker Hub 用户名
-REPO_NAME="file-transfer-go"
-IMAGE_NAME="${DOCKER_HUB_USER}/${REPO_NAME}"
-VERSION="v1.0.5"
-
-print_header() {
-    echo -e "${PURPLE}========================================${NC}"
-    echo -e "${PURPLE}🐳 $1${NC}"
-    echo -e "${PURPLE}========================================${NC}"
-}
-
-print_success() {
-    echo -e "${GREEN}✅ $1${NC}"
-}
-
-print_info() {
-    echo -e "${BLUE}ℹ️  $1${NC}"
-}
-
-# 检查 Docker 是否支持多架构构建
-check_multiarch_support() {
-    if command -v docker buildx >/dev/null 2>&1; then
-        echo "true"
-    else
-        echo "false"
-    fi
-}
-
-# 登录 Docker Hub
-docker_login() {
-    print_info "登录 Docker Hub..."
-    if ! docker info | grep -q "Username: ${DOCKER_HUB_USER}"; then
-        echo -e "${YELLOW}请输入 Docker Hub 登录信息:${NC}"
-        docker login
-    else
-        print_success "已登录 Docker Hub"
-    fi
-}
-
-# 推送镜像到 Docker Hub
-push_to_dockerhub() {
-    print_info "推送镜像到 Docker Hub..."
-    docker push "${IMAGE_NAME}:${VERSION}"
-    docker push "${IMAGE_NAME}:latest"
-    print_success "镜像推送完成"
-}
-
-# 单架构构建（当前方法）
-build_single_arch() {
-    print_header "单架构 Docker 镜像构建"
-    
-    print_info "构建镜像: ${IMAGE_NAME}:${VERSION}"
-    docker build -t "${IMAGE_NAME}:${VERSION}" -t "${IMAGE_NAME}:latest" .
-    
-    print_success "单架构镜像构建完成"
-    docker images "${IMAGE_NAME}"
-}
-
-# 多架构构建（需要 buildx）
-build_multiarch() {
-    print_header "多架构 Docker 镜像构建"
-    
-    print_info "创建 buildx builder"
-    docker buildx create --name multiarch --use 2>/dev/null || true
-    docker buildx inspect --bootstrap
-    
-    print_info "构建多架构镜像: linux/amd64,linux/arm64"
-    docker buildx build \
-        --platform linux/amd64,linux/arm64 \
-        -t "${IMAGE_NAME}:${VERSION}" \
-        -t "${IMAGE_NAME}:latest" \
-        --push \
-        .
-    
-    print_success "多架构镜像构建并推送完成"
-}
-
-# 显示使用说明
-show_usage() {
-    print_header "Docker 镜像使用说明"
-    
-    echo -e "${GREEN}🚀 运行镜像:${NC}"
-    echo "   docker run -d -p 8080:8080 ${IMAGE_NAME}:${VERSION}"
-    echo ""
-    
-    echo -e "${GREEN}📦 镜像信息:${NC}"
-    echo "   - Docker Hub: https://hub.docker.com/r/${DOCKER_HUB_USER}/${REPO_NAME}"
-    echo "   - 版本: ${VERSION}"
-    echo "   - 大小: ~16MB"
-    echo "   - 架构: $(check_multiarch_support && echo "amd64, arm64" || echo "amd64")"
-    echo "   - 基础镜像: alpine:3.18"
-    echo ""
-    
-    echo -e "${GREEN}🌟 特性:${NC}"
-    echo "   ✅ 静态编译，无外部依赖"
-    echo "   ✅ 前端文件完全嵌入"
-    echo "   ✅ 多平台文件传输支持"
-    echo "   ✅ WebRTC P2P 连接"
-    echo "   ✅ 桌面共享功能"
-    echo ""
-}
-
-# 主函数
-main() {
-    # 登录 Docker Hub
-    docker_login
-    
-    case "${1:-single}" in
-        "multi")
-            if [ "$(check_multiarch_support)" = "true" ]; then
-                build_multiarch  # 多架构构建会自动推送
-            else
-                echo -e "${RED}❌ Docker buildx 不可用，回退到单架构构建${NC}"
-                build_single_arch
-                push_to_dockerhub
-            fi
-            ;;
-        "single"|*)
-            build_single_arch
-            push_to_dockerhub
-            ;;
-    esac
-    
-    show_usage
-}
-
-# 检查参数
-if [ "$1" = "--help" ] || [ "$1" = "-h" ]; then
-    echo "用法: $0 [single|multi]"
-    echo ""
-    echo "  single    构建单架构镜像并推送到 Docker Hub (默认，amd64)"
-    echo "  multi     构建多架构镜像并推送到 Docker Hub (amd64, arm64)"
-    echo ""
-    echo "环境变量:"
-    echo "  DOCKER_HUB_USER    Docker Hub 用户名 (默认: matrixseven)"
-    echo ""
-    echo "示例:"
-    echo "  $0 single          # 单架构构建"
-    echo "  $0 multi           # 多架构构建"
-    echo "  DOCKER_HUB_USER=yourname $0 single  # 指定用户名"
-    echo ""
-    exit 0
-fi
-
-main "$@"