feat: package SSClash server mode for Docker

2026-08-21 13:30:53 +08:00
commit 09ddf8f78d
17 changed files with 816 additions and 0 deletions
@@ -0,0 +1,72 @@
+# syntax=docker/dockerfile:1.7
+
+ARG GO_VERSION=1.24
+ARG ALPINE_VERSION=3.22
+
+FROM --platform=$BUILDPLATFORM golang:${GO_VERSION}-alpine AS bootstrap-builder
+ARG TARGETOS
+ARG TARGETARCH
+WORKDIR /src
+COPY go.mod ./
+COPY cmd ./cmd
+COPY internal ./internal
+RUN CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH} \
+    go build -trimpath -ldflags='-s -w' -o /out/bootstrap ./cmd/bootstrap
+
+FROM alpine:${ALPINE_VERSION} AS release-assets
+ARG TARGETARCH
+ARG SSCLASH_VERSION=v6.1.0
+ARG MIHOMO_VERSION=v1.19.30
+ARG MIHOMO_SHA256_AMD64=cf06ce2c7d1421bdbda14ee4a5b6046672dc35ebf8eecd8e77504ec3c0ed9a84
+ARG MIHOMO_SHA256_ARM64=58896873736d28628f66de3677c8654fa0f180662523148e136cff4f6e890069
+WORKDIR /assets
+RUN apk add --no-cache ca-certificates curl gzip
+RUN case "${TARGETARCH}" in \
+      amd64|arm64) ;; \
+      *) echo "unsupported TARGETARCH=${TARGETARCH}; supported: amd64, arm64" >&2; exit 1 ;; \
+    esac; \
+    curl --fail --show-error --silent --location --retry 3 \
+      --output sha256sums.txt \
+      "https://github.com/zerolabnet/SSClash-Go/releases/download/${SSCLASH_VERSION}/sha256sums.txt"; \
+    curl --fail --show-error --silent --location --retry 3 \
+      --output ssclash \
+      "https://github.com/zerolabnet/SSClash-Go/releases/download/${SSCLASH_VERSION}/ssclash-linux-${TARGETARCH}"; \
+    expected="$(awk -v asset="ssclash-linux-${TARGETARCH}" '$2 == asset { print $1 }' sha256sums.txt)"; \
+    test -n "${expected}"; \
+    printf '%s  %s\n' "${expected}" ssclash | sha256sum -c -; \
+    chmod 0755 ssclash
+RUN case "${TARGETARCH}" in \
+      amd64) mihomo_sha256="${MIHOMO_SHA256_AMD64}" ;; \
+      arm64) mihomo_sha256="${MIHOMO_SHA256_ARM64}" ;; \
+    esac; \
+    asset="mihomo-linux-${TARGETARCH}-${MIHOMO_VERSION}.gz"; \
+    curl --fail --show-error --silent --location --retry 3 \
+      --output mihomo.gz \
+      "https://github.com/MetaCubeX/mihomo/releases/download/${MIHOMO_VERSION}/${asset}"; \
+    printf '%s  %s\n' "${mihomo_sha256}" mihomo.gz | sha256sum -c -; \
+    gzip -d mihomo.gz; \
+    chmod 0755 mihomo
+
+FROM alpine:${ALPINE_VERSION}
+RUN apk add --no-cache ca-certificates curl gzip tzdata \
+    && addgroup -S ssclash \
+    && adduser -S -G ssclash -h /opt/clash ssclash \
+    && mkdir -p /opt/clash /tmp/ssclash /usr/local/lib/ssclash /usr/local/share/ssclash \
+    && chown -R ssclash:ssclash /opt/clash /tmp/ssclash
+COPY --from=bootstrap-builder /out/bootstrap /usr/local/bin/bootstrap
+COPY --from=release-assets /assets/ssclash /usr/local/bin/ssclash
+COPY --from=release-assets /assets/mihomo /usr/local/lib/ssclash/clash
+COPY config/config.yaml /usr/local/share/ssclash/config.yaml
+
+ENV SSCLASH_ROOT=/opt/clash \
+    SSCLASH_TMP=/tmp/ssclash \
+    SSCLASH_PLATFORM=linux \
+    SSCLASH_ADDR=:9091
+
+USER ssclash
+VOLUME ["/opt/clash"]
+EXPOSE 9091/tcp 7890/tcp 7890/udp
+HEALTHCHECK --interval=15s --timeout=5s --start-period=20s --retries=4 \
+    CMD curl --fail --silent --show-error http://127.0.0.1:9091/ >/dev/null
+ENTRYPOINT ["/usr/local/bin/bootstrap"]
+CMD ["serve"]