Tizian 「ティツィアーン」
af1dbee509
- Melos 8.9 as the root's dev dependency, with scripts across the workspace (analyze, test:dart, test:flutter, generate, check) and its filters (--diff, --include-dependents); cli_util overridden to 0.5.2 for it, since Learn's flutter_launcher_icons asks for 0.4 and uses only its logger, unchanged in 0.5. - tool/check.dart in place of tool/check.sh: packages, formatting of our own files, analysis, the tools' tests, then every package's tests through Melos (--changed-since=<commit> for only what changed and what depends on it). tool/pre-push is the hook: the signature check, then the checks. CI generates every server's code and runs the same check. - The images build from the root with a workspace narrowed to what they need (tool/workspace_only.sh); compose, the deploy's migration test, the snap, the release script, the editor's launch files and Learn's asset tools (run from apps/learn) follow the new layout. - The project's source is named as project-halkyon/halkyon (source link, snap, F-Droid listing, release uploads); the AGPL packages carry the licence's own text. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
52 lines
2.6 KiB
Docker
52 lines
2.6 KiB
Docker
# The dictionaries' image: the curator, keeping a server's dictionary files current
|
|
# from EDRDG's files of the day (`curate update`, the README). Built from the
|
|
# repository root (the build context), where the workspace's root pubspec and lockfile
|
|
# live:
|
|
#
|
|
# docker build -f apps/learn/halkyon_learn_curator/Dockerfile .
|
|
#
|
|
# A container of its own beside the server (deploy/compose.yaml, decided 2026-10-09):
|
|
# the curator (AGPL) never enters the server's image or process, and a conversion
|
|
# that fails can't touch the server. They share only the folder of files.
|
|
|
|
# ── Build stage: compile the curator to a native executable ───────────────────────
|
|
FROM dart:3.13.4 AS build
|
|
WORKDIR /app
|
|
COPY pubspec.yaml pubspec.lock ./
|
|
COPY tool/workspace_only.sh tool/
|
|
COPY apps/learn/halkyon_learn_curator apps/learn/halkyon_learn_curator
|
|
|
|
# The workspace root with only the curator package, as the server's Dockerfile does it
|
|
# with the server's.
|
|
RUN sh tool/workspace_only.sh apps/learn/halkyon_learn_curator
|
|
RUN dart pub get
|
|
WORKDIR /app/apps/learn/halkyon_learn_curator
|
|
RUN dart build cli --target bin/curate.dart --output build
|
|
|
|
# ── Runtime stage ─────────────────────────────────────────────────────────────────
|
|
# Ubuntu 24.04 as the server's, with CA certificates for EDRDG's HTTPS, and MeCab's
|
|
# IPADIC, which the package compiles as it is installed: the curator packs it for the
|
|
# app's devices (ADR 0012). Its sources go once it is compiled.
|
|
FROM ubuntu:24.04
|
|
RUN apt-get update \
|
|
&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
|
|
ca-certificates mecab-ipadic-utf8 \
|
|
&& test -s /var/lib/mecab/dic/ipadic-utf8/sys.dic \
|
|
&& rm -rf /usr/share/mecab/dic/ipadic /var/lib/apt/lists/*
|
|
WORKDIR /app
|
|
|
|
COPY --from=build /app/apps/learn/halkyon_learn_curator/build/bundle/ ./
|
|
COPY --from=build /app/apps/learn/halkyon_learn_curator/data/ data/
|
|
|
|
# An unprivileged user of its own: user ID 10001, shared with neither the containers
|
|
# of PostgreSQL and the server (999) nor the CI runner on the host (61000). The folder
|
|
# it writes into belongs to it, which a new volume mounted there takes over.
|
|
RUN useradd --system --uid 10001 --no-create-home --shell /usr/sbin/nologin curator \
|
|
&& mkdir /dictionaries \
|
|
&& chown curator /dictionaries
|
|
USER curator
|
|
|
|
# Updates the files whenever they are a week old (EDRDG's licence asks at least
|
|
# monthly), and sleeps in between.
|
|
ENTRYPOINT ["./bin/curate", "update", "--into", "/dictionaries", "--data", "data"]
|
|
CMD ["--every", "7"]
|