mirror of
https://github.com/thegeneralist01/archivr
synced 2026-07-21 18:55:36 +02:00
TheGeneralist
72cf7ff642
- Install unzip in runtime stage (needed to extract extension zips) - Download uBlock Origin Lite (v2026.705.2152) and I Still Don't Care About Cookies (v1.1.9) during build, matching flake.nix versions - Verify each zip against its SHA-256 (converted from Nix SRI hashes) before extraction so a changed GitHub release fails fast, same as Nix - Check manifest.json at ISDCAC extension root post-extraction, mirroring the flake installPhase guard - Set ARCHIVR_UBLOCK_EXT and ARCHIVR_COOKIE_EXT env vars to the extracted extension directories
130 lines
5.9 KiB
Docker
130 lines
5.9 KiB
Docker
# syntax=docker/dockerfile:1
|
||
|
||
###############################################################################
|
||
# Stage 1 – Build the Rust server and CLI binaries
|
||
###############################################################################
|
||
FROM rust:1.88-slim-bookworm AS builder
|
||
|
||
RUN apt-get update && apt-get install -y --no-install-recommends \
|
||
pkg-config \
|
||
libssl-dev \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
WORKDIR /build
|
||
|
||
# Layer the dependency build separately for better cache reuse.
|
||
# Stub out every crate so Cargo can resolve and compile all dependencies
|
||
# before we copy the real source.
|
||
COPY Cargo.toml Cargo.lock ./
|
||
COPY crates/archivr-core/Cargo.toml crates/archivr-core/Cargo.toml
|
||
COPY crates/archivr-server/Cargo.toml crates/archivr-server/Cargo.toml
|
||
COPY crates/archivr-cli/Cargo.toml crates/archivr-cli/Cargo.toml
|
||
|
||
RUN mkdir -p \
|
||
crates/archivr-core/src \
|
||
crates/archivr-server/src \
|
||
crates/archivr-cli/src \
|
||
&& touch crates/archivr-core/src/lib.rs \
|
||
&& echo 'fn main() {}' > crates/archivr-server/src/main.rs \
|
||
&& echo 'fn main() {}' > crates/archivr-cli/src/main.rs \
|
||
&& cargo build --release -p archivr-server -p archivr-cli || true
|
||
|
||
# Build the real binaries; touch source files to force Cargo to relink.
|
||
COPY crates/ crates/
|
||
RUN touch \
|
||
crates/archivr-core/src/lib.rs \
|
||
crates/archivr-server/src/main.rs \
|
||
crates/archivr-cli/src/main.rs \
|
||
&& cargo build --release -p archivr-server -p archivr-cli
|
||
|
||
###############################################################################
|
||
# Stage 2 – Runtime image
|
||
###############################################################################
|
||
FROM debian:bookworm-slim
|
||
|
||
# Runtime dependencies:
|
||
# chromium used by single-file-cli for full-page archiving
|
||
# nodejs (20+) runtime for single-file-cli (requires Node >=20; Debian
|
||
# bookworm ships 18, so we install from the NodeSource repo)
|
||
# ffmpeg required by yt-dlp to merge separate audio/video streams
|
||
# (e.g. YouTube bestvideo+bestaudio format selection)
|
||
# python3 + pip + venv twitter scraper
|
||
# ca-certificates outbound HTTPS from the server and NodeSource HTTPS
|
||
# libssl3 OpenSSL linked by the Rust binary
|
||
RUN apt-get update && apt-get install -y --no-install-recommends \
|
||
curl \
|
||
ca-certificates \
|
||
unzip \
|
||
&& curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
|
||
&& apt-get install -y --no-install-recommends \
|
||
chromium \
|
||
nodejs \
|
||
ffmpeg \
|
||
python3 \
|
||
python3-pip \
|
||
python3-venv \
|
||
libssl3 \
|
||
&& rm -rf /var/lib/apt/lists/*
|
||
|
||
# Install single-file-cli globally so `single-file` is on PATH.
|
||
RUN npm install -g single-file-cli
|
||
|
||
# Install yt-dlp and twitter-api-client into an isolated venv to avoid
|
||
# conflicts with Debian's system Python packages.
|
||
RUN python3 -m venv /opt/archivr-venv \
|
||
&& /opt/archivr-venv/bin/pip install --no-cache-dir \
|
||
yt-dlp \
|
||
twitter-api-client
|
||
|
||
# Download Chromium extensions used during headless captures.
|
||
# uBlock Origin Lite (MV3) — ad/tracker blocking.
|
||
# I Still Don't Care About Cookies (MV3) — cookie-banner dismissal.
|
||
RUN mkdir -p \
|
||
/usr/local/lib/archivr/extensions/ublock-origin-lite \
|
||
/usr/local/lib/archivr/extensions/istilldontcareaboutcookies \
|
||
&& curl -fsSL \
|
||
"https://github.com/uBlockOrigin/uBOL-home/releases/download/2026.705.2152/uBOLite_2026.705.2152.chromium.zip" \
|
||
-o /tmp/ublock.zip \
|
||
&& echo "e136ef0d86e43a40ee54ad7b4de01b2c305c81ff4ee9ffef8766ee19b2eee174 /tmp/ublock.zip" | sha256sum -c - \
|
||
&& unzip -q /tmp/ublock.zip -d /usr/local/lib/archivr/extensions/ublock-origin-lite \
|
||
&& rm /tmp/ublock.zip \
|
||
&& curl -fsSL \
|
||
"https://github.com/OhMyGuus/I-Still-Dont-Care-About-Cookies/releases/download/v1.1.9/ISDCAC-chrome-source.zip" \
|
||
-o /tmp/isdcac.zip \
|
||
&& echo "8f70ab947cb2d274f4022a970f5dd3cecd8ec02b060e05187bef9ee3cb18bbcb /tmp/isdcac.zip" | sha256sum -c - \
|
||
&& unzip -q /tmp/isdcac.zip -d /usr/local/lib/archivr/extensions/istilldontcareaboutcookies \
|
||
&& rm /tmp/isdcac.zip \
|
||
&& test -f /usr/local/lib/archivr/extensions/istilldontcareaboutcookies/manifest.json \
|
||
|| { echo "ERROR: manifest.json not at ISDCAC extension root; zip structure may have changed"; exit 1; }
|
||
|
||
# Server and CLI binaries (CLI is needed to run `archivr init` on first setup)
|
||
COPY --from=builder /build/target/release/archivr-server /usr/local/bin/archivr-server
|
||
COPY --from=builder /build/target/release/archivr /usr/local/bin/archivr
|
||
|
||
# Pre-built frontend assets (already compiled; no Vite build step needed)
|
||
COPY crates/archivr-server/static/ /usr/share/archivr-server/static/
|
||
|
||
# Twitter scraper script
|
||
COPY vendor/twitter/scrape_user_tweet_contents.py \
|
||
/usr/local/lib/archivr/scrape_user_tweet_contents.py
|
||
|
||
# Wire up env vars that the server (and archivr-core) read at runtime.
|
||
# ARCHIVR_BIND and ARCHIVR_TWITTER_CREDENTIALS_FILE are intentionally left
|
||
# unset here — set them in docker-compose.yml or at `docker run` time.
|
||
ENV ARCHIVR_STATIC_DIR=/usr/share/archivr-server/static \
|
||
ARCHIVR_CHROME=/usr/bin/chromium \
|
||
ARCHIVR_SINGLE_FILE=/usr/local/bin/single-file \
|
||
ARCHIVR_TWEET_PYTHON=/opt/archivr-venv/bin/python3 \
|
||
ARCHIVR_TWEET_SCRAPER=/usr/local/lib/archivr/scrape_user_tweet_contents.py \
|
||
ARCHIVR_YT_DLP=/opt/archivr-venv/bin/yt-dlp \
|
||
ARCHIVR_UBLOCK_EXT=/usr/local/lib/archivr/extensions/ublock-origin-lite \
|
||
ARCHIVR_COOKIE_EXT=/usr/local/lib/archivr/extensions/istilldontcareaboutcookies \
|
||
ARCHIVR_CHROME_ARGS=--no-sandbox
|
||
|
||
EXPOSE 8080
|
||
|
||
# Expects the TOML config at /config/archivr-server.toml (mount a volume).
|
||
# Copy docker/config.example.toml as a starting point.
|
||
# Using CMD (not ENTRYPOINT) so `docker compose run archivr archivr init …`
|
||
# can override the whole command for first-time archive initialisation.
|
||
CMD ["archivr-server", "/config/archivr-server.toml"]
|