Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening  ghcr.io/7ooki/rhex:security-hardening

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening  ghcr.io/7ooki/rhex:security-hardening

Shell快速替换命令

sed -i 's#ghcr.io/7ooki/rhex:security-hardening#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening  ghcr.io/7ooki/rhex:security-hardening'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening  ghcr.io/7ooki/rhex:security-hardening'

镜像构建历史

# 2026-10-31 08:49:10  0.00B 设置默认要执行的命令
CMD ["pnpm" "run" "start"]
                        
# 2026-10-31 08:49:10  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/app/scripts/docker-entrypoint.sh"]
                        
# 2026-10-31 08:49:10  0.00B 声明容器运行时监听的端口
EXPOSE [3000/tcp]
                        
# 2026-10-31 08:49:10  0.00B 指定运行容器时使用的用户
USER node
                        
# 2026-10-31 08:49:10  1.28GB 执行命令并创建新的镜像层
RUN |3 APT_MIRROR= PNPM_REGISTRY= NEXT_DEPLOYMENT_ID=be5106f34e6b3bc3e19b98f2a8c9f087cd57ab23 /bin/sh -c chown -R node:node /app # buildkit
                        
# 2026-10-31 08:48:48  71.00B 执行命令并创建新的镜像层
RUN |3 APT_MIRROR= PNPM_REGISTRY= NEXT_DEPLOYMENT_ID=be5106f34e6b3bc3e19b98f2a8c9f087cd57ab23 /bin/sh -c chmod +x ./scripts/docker-entrypoint.sh # buildkit
                        
# 2026-10-31 08:48:48  11.54KB 复制新文件或目录到容器中
COPY /app/write-guard.config.ts ./write-guard.config.ts # buildkit
                        
# 2026-10-31 08:48:48  823.00B 复制新文件或目录到容器中
COPY /app/tsconfig.json ./tsconfig.json # buildkit
                        
# 2026-10-31 08:48:48  9.03MB 复制新文件或目录到容器中
COPY /app/src ./src # buildkit
                        
# 2026-10-31 08:48:48  58.74KB 复制新文件或目录到容器中
COPY /app/scripts ./scripts # buildkit
                        
# 2026-10-31 08:48:48  4.31MB 复制新文件或目录到容器中
COPY /app/public ./public # buildkit
                        
# 2026-10-31 08:48:48  166.35KB 复制新文件或目录到容器中
COPY /app/prisma ./prisma # buildkit
                        
# 2026-10-31 08:48:48  2.50KB 复制新文件或目录到容器中
COPY /app/next.config.mjs ./next.config.mjs # buildkit
                        
# 2026-10-31 08:48:48  4.28KB 复制新文件或目录到容器中
COPY /app/package.json ./package.json # buildkit
                        
# 2026-10-31 08:48:48  0.00B 复制新文件或目录到容器中
COPY /app/addons ./addons # buildkit
                        
# 2026-10-31 08:48:48  298.33MB 复制新文件或目录到容器中
COPY /app/.next ./.next # buildkit
                        
# 2026-10-31 08:48:47  35.10MB 复制新文件或目录到容器中
COPY /app/node_modules/.prisma ./node_modules/.prisma # buildkit
                        
# 2026-10-31 08:45:29  900.26MB 复制新文件或目录到容器中
COPY /app/node_modules ./node_modules # buildkit
                        
# 2026-10-31 08:45:00  0.00B 执行命令并创建新的镜像层
RUN |3 APT_MIRROR= PNPM_REGISTRY= NEXT_DEPLOYMENT_ID=be5106f34e6b3bc3e19b98f2a8c9f087cd57ab23 /bin/sh -c mkdir -p uploads addons # buildkit
                        
# 2026-10-31 08:45:00  0.00B 添加元数据标签
LABEL org.opencontainers.image.source=https://github.com/lovedevpanda/Rhex
                        
# 2026-10-31 08:45:00  0.00B 设置工作目录为/app
WORKDIR /app
                        
# 2026-10-31 08:45:00  0.00B 设置环境变量 NEXT_DEPLOYMENT_ID
ENV NEXT_DEPLOYMENT_ID=be5106f34e6b3bc3e19b98f2a8c9f087cd57ab23
                        
# 2026-10-31 08:45:00  0.00B 设置环境变量 NODE_ENV
ENV NODE_ENV=production
                        
# 2026-10-31 08:45:00  0.00B 定义构建参数
ARG NEXT_DEPLOYMENT_ID=be5106f34e6b3bc3e19b98f2a8c9f087cd57ab23
                        
# 2026-10-31 08:45:00  0.00B 设置工作目录为/app
WORKDIR /app
                        
# 2026-10-31 08:45:00  28.43MB 执行命令并创建新的镜像层
RUN |2 APT_MIRROR= PNPM_REGISTRY= /bin/sh -c corepack enable   && if [ -n "${PNPM_REGISTRY}" ]; then     npm config set registry "${PNPM_REGISTRY}"     && export COREPACK_NPM_REGISTRY="${PNPM_REGISTRY}";   fi   && corepack prepare pnpm@10.33.4 --activate   && if [ -n "${APT_MIRROR}" ]; then     sed -i "s|http://deb.debian.org/debian|${APT_MIRROR}|g; s|http://deb.debian.org/debian-security|${APT_MIRROR}-security|g" /etc/apt/sources.list.d/debian.sources;   fi   && apt-get update   && apt-get install -y --no-install-recommends ca-certificates openssl   && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-10-31 08:45:00  0.00B 设置环境变量 NEXT_TELEMETRY_DISABLED
ENV NEXT_TELEMETRY_DISABLED=1
                        
# 2026-10-31 08:45:00  0.00B 设置环境变量 PATH
ENV PATH=/pnpm:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-10-31 08:45:00  0.00B 设置环境变量 PNPM_HOME
ENV PNPM_HOME=/pnpm
                        
# 2026-10-31 08:45:00  0.00B 定义构建参数
ARG PNPM_REGISTRY
                        
# 2026-10-31 08:45:00  0.00B 定义构建参数
ARG APT_MIRROR
                        
# 2026-04-22 09:45:50  0.00B 设置默认要执行的命令
CMD ["node"]
                        
# 2026-04-22 09:45:50  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["docker-entrypoint.sh"]
                        
# 2026-04-22 09:45:50  388.00B 复制新文件或目录到容器中
COPY docker-entrypoint.sh /usr/local/bin/ # buildkit
                        
# 2026-04-22 09:45:50  7.18MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -ex   && savedAptMark="$(apt-mark showmanual)"   && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr --no-install-recommends   && rm -rf /var/lib/apt/lists/*   && export GNUPGHOME="$(mktemp -d)"   && for key in     6A010C5166006599AA17F08146C2130DFD2497F5   ; do     { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ||     { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ;   done   && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz"   && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc"   && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz   && gpgconf --kill all   && rm -rf "$GNUPGHOME"   && mkdir -p /opt   && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/   && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn   && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg   && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz   && apt-mark auto '.*' > /dev/null   && { [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark > /dev/null; }   && find /usr/local -type f -executable -exec ldd '{}' ';'     | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }'     | sort -u     | xargs -r dpkg-query --search     | cut -d: -f1     | sort -u     | xargs -r apt-mark manual   && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false   && yarn --version   && rm -rf /tmp/* # buildkit
                        
# 2026-04-22 09:45:39  0.00B 设置环境变量 YARN_VERSION
ENV YARN_VERSION=1.22.22
                        
# 2026-04-22 09:45:39  117.81MB 执行命令并创建新的镜像层
RUN /bin/sh -c ARCH= OPENSSL_ARCH= && dpkgArch="$(dpkg --print-architecture)"     && case "${dpkgArch##*-}" in       amd64) ARCH='x64' OPENSSL_ARCH='linux-x86_64';;       ppc64el) ARCH='ppc64le' OPENSSL_ARCH='linux-ppc64le';;       s390x) ARCH='s390x' OPENSSL_ARCH='linux*-s390x';;       arm64) ARCH='arm64' OPENSSL_ARCH='linux-aarch64';;       armhf) ARCH='armv7l' OPENSSL_ARCH='linux-armv4';;       i386) ARCH='x86' OPENSSL_ARCH='linux-elf';;       *) echo "unsupported architecture"; exit 1 ;;     esac     && set -ex     && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr xz-utils libatomic1 --no-install-recommends     && rm -rf /var/lib/apt/lists/*     && export GNUPGHOME="$(mktemp -d)"     && for key in       5BE8A3F6C8A5C01D106C0AD820B1A390B168D356       DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7       CC68F5A3106FF448322E48ED27F5E38D5B0A215F       8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600       890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4       C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C       108F52B48DB57BB0CC439B2997B01419BD92F80A       A363A499291CBBC940DD62E41F10027AF002F8B0     ; do       { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ||       { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ;     done     && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz"     && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc"     && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc     && gpgconf --kill all     && rm -rf "$GNUPGHOME"     && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c -     && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner     && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt     && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \;     && apt-mark auto '.*' > /dev/null     && find /usr/local -type f -executable -exec ldd '{}' ';'       | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }'       | sort -u       | xargs -r dpkg-query --search       | cut -d: -f1       | sort -u       | xargs -r apt-mark manual     && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false     && ln -s /usr/local/bin/node /usr/local/bin/nodejs     && node --version     && npm --version     && rm -rf /tmp/* # buildkit
                        
# 2026-04-22 09:45:39  0.00B 设置环境变量 NODE_VERSION
ENV NODE_VERSION=20.20.2
                        
# 2026-04-22 09:44:27  8.90KB 执行命令并创建新的镜像层
RUN /bin/sh -c groupadd --gid 1000 node   && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit
                        
# 2026-04-21 08:00:00  74.83MB 
# debian.sh --arch 'amd64' out/ 'bookworm' '@1776729600'
                        
                    

镜像信息

{
    "Id": "sha256:9becfdce1eb7c28211f356f80126d53b6a70163200bb49ba76cd42263f5eeb14",
    "RepoTags": [
        "ghcr.io/7ooki/rhex:security-hardening",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex:security-hardening"
    ],
    "RepoDigests": [
        "ghcr.io/7ooki/rhex@sha256:54f44a2f8d67032084d5bc35cf468a25f9e127d10c29cd4c9affc77983b0d7cd",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/7ooki/rhex@sha256:fbb4ff810d8ea973e0e735e8610e1667bcc802d559e1f92e0b79be79bad1191b"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-10-31T00:49:10.794931325Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "node",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "3000/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/pnpm:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "NODE_VERSION=20.20.2",
            "YARN_VERSION=1.22.22",
            "PNPM_HOME=/pnpm",
            "NEXT_TELEMETRY_DISABLED=1",
            "NODE_ENV=production",
            "NEXT_DEPLOYMENT_ID=be5106f34e6b3bc3e19b98f2a8c9f087cd57ab23"
        ],
        "Cmd": [
            "pnpm",
            "run",
            "start"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/app",
        "Entrypoint": [
            "/app/scripts/docker-entrypoint.sh"
        ],
        "OnBuild": null,
        "Labels": {
            "org.opencontainers.image.created": "2026-10-31T00:44:52.045Z",
            "org.opencontainers.image.description": "Rhex Forum System is a modern, extensible, production-ready forum platform for building and operating online communities.",
            "org.opencontainers.image.licenses": "MIT",
            "org.opencontainers.image.revision": "be5106f34e6b3bc3e19b98f2a8c9f087cd57ab23",
            "org.opencontainers.image.source": "https://github.com/7ooki/Rhex",
            "org.opencontainers.image.title": "Rhex",
            "org.opencontainers.image.url": "https://github.com/7ooki/Rhex",
            "org.opencontainers.image.version": "security-hardening"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 2756073547,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/d56463402fea52a8538528337b18a07ce3b882c28fe4f6723745c6e2df51754b/diff:/var/lib/docker/overlay2/a40e2f300314a62c21581f21924902e4ca8a958d43fa2367bac518e8de3d0723/diff:/var/lib/docker/overlay2/8707fc0fdf4f9163166e8d9e998d22edde1571a061288b26fce32f1f09ced97c/diff:/var/lib/docker/overlay2/f7a611491f3b7cfffb31477a2478aa68452e2b19691d14510c1ec6963b10db40/diff:/var/lib/docker/overlay2/31e052e35b0835023d24c41df7c88ed6d179e7091bd6e4bb883db113de2432b4/diff:/var/lib/docker/overlay2/ad0dd4be6895c82a962932471bd25f7606ebe495854a271bf00640144fe0218d/diff:/var/lib/docker/overlay2/ac247c230a4711486ce3676ce7d14889cc2792b5cc1a9440eb09c00354be7487/diff:/var/lib/docker/overlay2/0fdffd3279605ebbf348d7bfd9ddb5fa8b54eab9fb3b79316be4dbf8001905de/diff:/var/lib/docker/overlay2/32e9f74e77c70c76a10c1c97a6b4d699091bb34c43cef78569d4b1502e57412e/diff:/var/lib/docker/overlay2/ff9ac8d8788d8efe5aa6764d23d4818be13e597e8058311749f0a679a8c8792b/diff:/var/lib/docker/overlay2/29c577841b87e9091de0021dad90d10e60ff74fb9ecbf083875e1593cc9b783d/diff:/var/lib/docker/overlay2/68c8db19a92635db4484f8c064969f15646ffe5e48e36d71f3b9a1787eae1146/diff:/var/lib/docker/overlay2/1f9a330fd9722f188449d74c747a16f53b3f9cad671634d384fdf6e13d8edeee/diff:/var/lib/docker/overlay2/8db25f9ecbcb275821e0956629c78df242497c142e2c605161b581f81f774047/diff:/var/lib/docker/overlay2/3a1eea6e8e12a22812f6af6ef52720e3aa5c7b6957f67e4d5ffb146e8fd8be43/diff:/var/lib/docker/overlay2/b35609a1090821e2b86cfc09628100157e394296fd42b80712c0db5c35a8ba56/diff:/var/lib/docker/overlay2/de7f6156df8fc6aa33a7960ba6eb3f5143258211233da796fb8958176eb55af5/diff:/var/lib/docker/overlay2/d299095f4c45681811402a7b9482bfc6c9990b4516cdcaca548461285481e9d0/diff:/var/lib/docker/overlay2/93fcd8002460364b61e73b6a32be916d51edb6545b64b24d11eb8c49b3b7175a/diff:/var/lib/docker/overlay2/f100503759c8c2edf93a332bf21a1fe2daf36ad19f3d77480454418ccd57b879/diff:/var/lib/docker/overlay2/edc6048fe557ed38cdcfcd60b4202e396832e36e198d94e8c5d8334488f31796/diff:/var/lib/docker/overlay2/4508a18b39206fb13ae42bd6712833ec6026c43f0224f895b5dca99c298c0d7b/diff",
            "MergedDir": "/var/lib/docker/overlay2/e4567e1d5571ec1fa890ff11a29b73c8048bb7851d9660e568beb90323b2706d/merged",
            "UpperDir": "/var/lib/docker/overlay2/e4567e1d5571ec1fa890ff11a29b73c8048bb7851d9660e568beb90323b2706d/diff",
            "WorkDir": "/var/lib/docker/overlay2/e4567e1d5571ec1fa890ff11a29b73c8048bb7851d9660e568beb90323b2706d/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:0da811fd3ed46c38cea69079fa395a3d715dbdbdd5c8177107c450bf6332bbfa",
            "sha256:4337a9b79b842bfe58037ff8e3040c28e8e3366009befe7bc70694869e6ad9a1",
            "sha256:631e9f799a80c48d29ea547226d4c97b5c4e4698baadbae796fbcb67b1cbdcba",
            "sha256:f991bccee0f1f8f692280d0e1f83f48001576c08d33c53d6a1463d5062a6ff18",
            "sha256:d592f6b23cfaeb0a7d534376e0d4a3a32255df78a9feda01e3a6a015bada66d5",
            "sha256:60de2c8afee0458f3abbcff53e843195291a486e55d299a1a58e96b32ddae1bf",
            "sha256:82427f4db8a6f2ac89a3ca2ae6005a1455d4478ad125f99e0e75f075f24c5d85",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:a12abd1c97615256f059ba05372098d751155226954f681fa5c5d1c370584cc2",
            "sha256:254d3ec0b868cb4b55da0d23dfe65efd1273999f477d6bd37ff5352819c781c4",
            "sha256:0e61113a42ec994136de4ec2e19d0d62c5e783a982ad698115b8a3ce94f606e0",
            "sha256:38083f621cb246213f2afbad21c647803cdc5629ce805871d19302d82870b816",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:d589034b8f36cd19a0cc06483e2b4dcb0675b74a9657fa0e13be91d672dbaae7",
            "sha256:92f17ef904e1e5f4ae1d9d4c95256a7435571c77e7cd376f7c81f4d37bc719f2",
            "sha256:a1f60be37de75cbc87c76560fe24a4e7d5aa6839566bbd2321577cfc817f4bb8",
            "sha256:915047cd506686b7b85c2e28d235516e8a626f8cd8de2999413071f8a57b0a14",
            "sha256:0f24a35466fa05b3512e67264a857499cdd70d3a12562b46d50bc0218e413049",
            "sha256:f3c5a60a453b7d38e81e0622de6a881bc39bd82d860edac7166a2eeb4eff6635",
            "sha256:8f1dc7a6eeef737bd34063725e0cb8202f1b5a96c42b773b8e6fe57cca6ce5a3",
            "sha256:29ef1bdbb916cc55f212b691252e16c59b6166c8f5ba52c78fcb2a130ffb9a21",
            "sha256:100fa71699581a23729352831afd3df5d81377999b8a8d312c6d477c2ed199c0",
            "sha256:ad221c7a1b7e8f4eff9cdbbaedf967b26b60fbb1135270a99c6d633ac267fb7e"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-10-31T09:17:52.317073457+08:00"
    }
}