Update Dockerfile

Author: QAbot-zh

Dockerfile

@@ -1,5 +1,5 @@
 # 阶段1：基础镜像准备
-FROM node:18-alpine AS base
+FROM node:20-alpine AS base
 
 # 设置工作目录
 WORKDIR /app
@@ -8,10 +8,11 @@ WORKDIR /app
 # RUN npm config set registry https://registry.npmmirror.com/
 
 # 安装必要的系统依赖（例如 CA 证书）
-RUN apk add --no-cache ca-certificates && update-ca-certificates
+RUN apk add --no-cache ca-certificates openssl && update-ca-certificates
 
 ENV NODE_OPTIONS="--dns-result-order=ipv4first --use-openssl-ca"
 ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
+ENV NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
 
 # 阶段2：构建应用程序
 FROM base AS builder
@@ -20,28 +21,26 @@ WORKDIR /app
 
 # 复制依赖文件
 COPY package.json yarn.lock ./
-RUN yarn config set cafile /etc/ssl/certs/ca-certificates.crt
 
 # 配置镜像源
 ARG REGISTRY_LIST="https://registry.npmmirror.com/ https://registry.npmjs.org/ https://registry.yarnpkg.com/"
 ARG YARN_NETWORK_TIMEOUT="300000"
 
+
+RUN yarn config set cafile /etc/ssl/certs/ca-certificates.crt
+
 # 多镜像源回退安装：开发依赖 + 构建所需
-RUN set -eux; \
-    success=0; \
+RUN --mount=type=cache,id=yarn-cache,target=/usr/local/share/.cache/yarn \
+    set -eux; success=0; \
     for registry in $REGISTRY_LIST; do \
       echo "尝试 Yarn 镜像源: $registry"; \
       yarn config set registry "$registry"; \
       if yarn install --frozen-lockfile --network-timeout "$YARN_NETWORK_TIMEOUT"; then \
-        echo "成功使用镜像源: $registry"; \
-        success=1; \
-        break; \
+        echo "成功使用镜像源: $registry"; success=1; break; \
       else \
-        echo "镜像源 $registry 失败，清缓存并尝试下一个..."; \
-        yarn cache clean || true; \
+        echo "镜像源 $registry 失败，清缓存并尝试下一个..."; yarn cache clean || true; \
       fi; \
-    done; \
-    if [ "$success" -ne 1 ]; then echo "所有镜像源尝试失败"; exit 1; fi
+    done; test "$success" -eq 1
 
 # # 安装所有依赖，包括开发依赖
 # RUN yarn install
@@ -60,27 +59,23 @@ ENV NODE_ENV=production
 
 # 安装生产依赖
 # RUN yarn install --production --ignore-scripts --prefer-offline
-RUN set -eux; \
-    success=0; \
+RUN --mount=type=cache,id=yarn-cache,target=/usr/local/share/.cache/yarn \
+    set -eux; success=0; \
     for registry in $REGISTRY_LIST; do \
       echo "尝试 Yarn 镜像源(生产依赖): $registry"; \
       yarn config set registry "$registry"; \
       if yarn install --frozen-lockfile --production --ignore-scripts --network-timeout "$YARN_NETWORK_TIMEOUT"; then \
-        echo "成功使用镜像源(生产依赖): $registry"; \
-        success=1; \
-        break; \
+        echo "成功使用镜像源(生产依赖): $registry"; success=1; break; \
       else \
-        echo "镜像源 $registry 失败，清缓存并尝试下一个..."; \
-        yarn cache clean || true; \
+        echo "镜像源 $registry 失败，清缓存并尝试下一个..."; yarn cache clean || true; \
       fi; \
-    done; \
-    if [ "$success" -ne 1 ]; then echo "所有镜像源尝试失败"; exit 1; fi
+    done; test "$success" -eq 1
 
 # 清理 yarn 缓存
 RUN yarn cache clean --all || true
 
 # 阶段3：构建最终的生产镜像
-FROM node:18-alpine
+FROM node:20-alpine
 
 # 设置工作目录
 WORKDIR /app
@@ -107,6 +102,8 @@ ENV NODE_ENV=production
 ENV HOSTNAME="0.0.0.0"
 ENV PORT=13000
 ENV NODE_OPTIONS="--dns-result-order=ipv4first --use-openssl-ca"
+ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
+ENV NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
 
 # 暴露端口
 EXPOSE 13000