modify: nuitka 支持

deploy.sh

@@ -17,11 +17,12 @@ ARCH=$(uname -m)
 case "$ARCH" in
     x86_64|amd64)
         DEFAULT_IMAGE="chongming:latest"
-        ARCH_FLAG="x86_64"
+        EXTRA_OPTS=""
         ;;
     aarch64|arm64)
         DEFAULT_IMAGE="chongming:arm64"
-        ARCH_FLAG="aarch64"
+        # ARM64 嵌入式设备（如 BM1684）Docker 线程限制较严格，需要放开 seccomp
+        EXTRA_OPTS="--security-opt seccomp=unconfined"
         ;;
     *)
         log_error "不支持的架构: $ARCH"
@@ -56,8 +57,8 @@ fi
 
 # 2. 创建目录
 log_info "创建数据目录..."
-mkdir -p "$DATA_DIR"/{data,uploads,logs}
-chmod 755 "$DATA_DIR"/{data,uploads,logs}
+mkdir -p "$DATA_DIR"/{data,uploads,logs,config}
+chmod 755 "$DATA_DIR"/{data,uploads,logs,config}
 
 # 3. 复制初始数据（仅在目录为空时）
 if [ -z "$(ls -A $DATA_DIR/data 2>/dev/null)" ]; then
@@ -71,33 +72,36 @@ else
     log_info "数据库已存在，跳过初始化"
 fi
 
+# 如果外部 config.toml 不存在，从镜像中复制一份模板
+CONFIG_FILE="$DATA_DIR/config/config.toml"
+if [ ! -f "$CONFIG_FILE" ]; then
+    log_info "首次部署，从镜像中提取 config.toml 配置模板..."
+    TMP_CONTAINER="chongming-config-tmp-$$"
+    docker create --name "$TMP_CONTAINER" "$IMAGE" &> /dev/null
+    docker cp "$TMP_CONTAINER:/app/config.toml" "$CONFIG_FILE" &> /dev/null
+    docker rm "$TMP_CONTAINER" &> /dev/null
+    log_info "配置模板已就绪: $CONFIG_FILE"
+    log_info "可按需修改配置后重启容器生效"
+else
+    log_info "配置文件已存在，跳过初始化: $CONFIG_FILE"
+fi
+
 # 检查端口是否被占用
 if ss -tlnp | grep -q ":${PORT}"; then
     log_error "端口 ${PORT} 已被占用，请修改 PORT 变量或释放端口"
     exit 1
 fi
 
-# 根据架构设置默认 worker 数
-case "$ARCH" in
-    aarch64|arm64)
-        DEFAULT_WORKERS=2
-        ;;
-    *)
-        DEFAULT_WORKERS=4
-        ;;
-esac
-
 # 4. 启动容器
 log_info "启动容器..."
-log_info "架构: $ARCH, workers: ${APP_WORKERS:-$DEFAULT_WORKERS}, 端口: $PORT"
+log_info "架构: $ARCH, 镜像: $IMAGE, 端口: $PORT"
 docker run -d \
     -p "$PORT:8000" \
     -v "$DATA_DIR/data:/app/data" \
     -v "$DATA_DIR/uploads:/app/uploads" \
     -v "$DATA_DIR/logs:/app/logs" \
-    -e "APP_WORKERS=${APP_WORKERS:-$DEFAULT_WORKERS}" \
-    --ulimit nproc=65535 \
-    --ulimit nofile=65535 \
+    -v "$DATA_DIR/config/config.toml:/app/config.toml:ro" \
+    $EXTRA_OPTS \
     --restart unless-stopped \
     --name "$CONTAINER" \
     "$IMAGE"