146 lines
5.9 KiB
Docker
146 lines
5.9 KiB
Docker
FROM arm64v8/ubuntu:22.04
|
||
|
||
# 避免交互式提示卡住构建
|
||
ENV DEBIAN_FRONTEND=noninteractive
|
||
|
||
RUN sed -i 's@//.*ports.ubuntu.com@//mirrors.aliyun.com@g' /etc/apt/sources.list
|
||
# -----------------------------------------------------------------------------
|
||
# 第一阶段：安装基础构建工具和 PPA 管理工具
|
||
# -----------------------------------------------------------------------------
|
||
RUN apt-get update && \
|
||
apt-get install -y --no-install-recommends \
|
||
sudo \
|
||
build-essential \
|
||
cmake \
|
||
git \
|
||
gdb \
|
||
vim \
|
||
unzip \
|
||
pkg-config \
|
||
wget \
|
||
software-properties-common \
|
||
gpg-agent && \
|
||
rm -rf /var/lib/apt/lists/*
|
||
|
||
# -----------------------------------------------------------------------------
|
||
# 第二阶段：添加 PPA 源
|
||
# -----------------------------------------------------------------------------
|
||
# 分开执行，确保网络问题或源失效能被单独定位
|
||
RUN apt-get update && apt-get install -y gnupg2 curl && \
|
||
# 获取密钥 (如果 keyserver 连不上，多试几次或检查网络)
|
||
gpg --keyserver keyserver.ubuntu.com --recv-keys 3CC0D9D1F3F0354B50D24F51F02122ECF25FB4D7 && \
|
||
gpg --export 3CC0D9D1F3F0354B50D24F51F02122ECF25FB4D7 > /etc/apt/trusted.gpg.d/jjriek.gpg && \
|
||
# 手动添加源地址 (直接指向 content 服务器，绕过 API)
|
||
echo "deb [arch=arm64] https://ppa.launchpadcontent.net/jjriek/panfork-mesa/ubuntu jammy main" > /etc/apt/sources.list.d/panfork.list && \
|
||
echo "deb [arch=arm64] https://ppa.launchpadcontent.net/jjriek/rockchip/ubuntu jammy main" > /etc/apt/sources.list.d/rockchip.list && \
|
||
echo "deb [arch=arm64] https://ppa.launchpadcontent.net/jjriek/rockchip-multimedia/ubuntu jammy main" > /etc/apt/sources.list.d/multimedia.list && \
|
||
apt-get update
|
||
|
||
# -----------------------------------------------------------------------------
|
||
# 第三阶段：安装核心依赖库 (Rockchip 专有库 & 基础开发库)
|
||
# -----------------------------------------------------------------------------
|
||
# 注意：每次 RUN 如果涉及 install，最好都先 update，因为层之间的 apt 缓存通常不保留
|
||
RUN apt-get update && \
|
||
apt-get install -y --no-install-recommends \
|
||
python3 \
|
||
python3-pip \
|
||
libssl-dev \
|
||
libspdlog-dev \
|
||
libsqlite3-dev \
|
||
libboost-all-dev \
|
||
librockchip-mpp-dev \
|
||
librga-dev \
|
||
libeigen3-dev \
|
||
espeak-ng-data \
|
||
libespeak1 \
|
||
libasound2-plugins \
|
||
alsa-utils && \
|
||
rm -rf /var/lib/apt/lists/*
|
||
|
||
# -----------------------------------------------------------------------------
|
||
# 第四阶段：安装多媒体和视觉库 (GStreamer & OpenCV)
|
||
# -----------------------------------------------------------------------------
|
||
RUN apt-get update && \
|
||
apt-get install -y --no-install-recommends \
|
||
gstreamer1.0-rockchip \
|
||
libgstreamer1.0-dev \
|
||
libgstreamer-plugins-base1.0-dev \
|
||
gstreamer1.0-alsa \
|
||
gstreamer1.0-plugins-base \
|
||
gstreamer1.0-plugins-good \
|
||
gstreamer1.0-plugins-bad \
|
||
gstreamer1.0-plugins-ugly \
|
||
gstreamer1.0-libav \
|
||
gstreamer1.0-tools \
|
||
gstreamer1.0-x \
|
||
gstreamer1.0-pulseaudio \
|
||
gstreamer1.0-rtsp \
|
||
libopencv-dev \
|
||
nmap && \
|
||
rm -rf /var/lib/apt/lists/*
|
||
|
||
# -----------------------------------------------------------------------------
|
||
# 第五阶段：用户与权限配置
|
||
# -----------------------------------------------------------------------------
|
||
RUN groupadd -r developers && \
|
||
useradd -ms /bin/bash -g developers -G sudo dev && \
|
||
# 允许组创建失败（如果组已存在），使用 || true
|
||
(groupadd -g 20 dialout || true) && \
|
||
(groupadd -g 44 video || true) && \
|
||
(groupadd -g 110 render || true) && \
|
||
(groupadd -g 29 render_alt || true) && \
|
||
usermod -a -G dialout dev && \
|
||
usermod -a -G video dev && \
|
||
usermod -a -G render dev && \
|
||
usermod -a -G audio dev && \
|
||
echo "dev ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/dev-nopasswd
|
||
|
||
# 配置 umask
|
||
RUN echo "umask 0002" > /etc/profile.d/99-shared-umask.sh && \
|
||
chmod +x /etc/profile.d/99-shared-umask.sh
|
||
|
||
# -----------------------------------------------------------------------------
|
||
# 第六阶段：编译第三方源码 (Paho MQTT)
|
||
# -----------------------------------------------------------------------------
|
||
# 建议：确保你有 .dockerignore 文件排除 .git 目录，否则 COPY . 会很慢
|
||
COPY . /tmp/build-context
|
||
|
||
RUN cd /tmp/build-context/external/paho.mqtt.c && \
|
||
cmake -Bbuild -H. -DPAHO_WITH_SSL=ON -DPAHO_BUILD_SAMPLES=OFF -DPAHO_BUILD_DOCUMENTATION=OFF && \
|
||
cmake --build build --target install && \
|
||
cd /tmp/build-context/external/paho.mqtt.cpp && \
|
||
cmake -Bbuild -H. -DPAHO_WITH_SSL=ON -DPAHO_BUILD_SAMPLES=OFF -DPAHO_BUILD_DOCUMENTATION=OFF && \
|
||
cmake --build build --target install && \
|
||
rm -rf /tmp/build-context
|
||
|
||
# -----------------------------------------------------------------------------
|
||
# 第七阶段：安装 RKNN SDK
|
||
# -----------------------------------------------------------------------------
|
||
COPY rknn_sdk/librknn_api/include/rknn_api.h /usr/local/include/
|
||
COPY rknn_sdk/rknn_server/aarch64/usr/bin/rknn_server /usr/bin/rknn_server
|
||
COPY rknn_sdk/librknn_api/aarch64/librknnrt.so /usr/lib/librknnrt.so
|
||
COPY rknn_sdk/librknn_api/aarch64/librknn_api.so /usr/lib/librknn_api.so
|
||
COPY rknn_sdk/whl/*.whl /tmp/rknn_wheels/
|
||
|
||
RUN pip3 install /tmp/rknn_wheels/*.whl && \
|
||
rm -rf /tmp/rknn_wheels && \
|
||
chmod +x /usr/bin/rknn_server && \
|
||
ldconfig
|
||
|
||
# -----------------------------------------------------------------------------
|
||
# 第八阶段：Python 环境与运行准备
|
||
# -----------------------------------------------------------------------------
|
||
COPY piper_models/ /app/piper_models/
|
||
|
||
USER dev
|
||
# 这里的 --no-cache-dir 对于减小镜像体积很重要
|
||
RUN pip install --no-cache-dir --user -i https://mirrors.aliyun.com/pypi/simple/ \
|
||
piper-tts \
|
||
onvif-zeep \
|
||
python-nmap \
|
||
psutil \
|
||
paramiko
|
||
|
||
RUN echo 'export PATH="$HOME/.local/bin:$PATH"' >> ~/.bash_profile
|
||
|
||
CMD ["/bin/bash"] |