Logan CusanoandClaude Opus 5
a61a7b2c31
Both :8001 (FastAPI control API) and :8081 (OP25's HTTP terminal) listened on 0.0.0.0 with no authentication, on a container that is privileged with /dev mounted and network_mode: host. Nodes get deployed to third-party sites, so that exposed start/stop/retune to anyone on the host's LAN. All three containers share the host network namespace, so edge-node still reaches both over 127.0.0.1 unchanged. OP25_DEBUG_EXPOSE=true restores the old 0.0.0.0 binding and logs a loud warning; it is off by default. Confirmed against boatbod/op25 gr310 that the terminal's http:<host>:<port> string is honoured as a real bind address (http_server.py splits it and hands the host to create_server), so no flag was invented. Also reorder models.py so IcecastConfig precedes ConfigGenerator, which annotates a field with it. That only worked because python:slim-trixie is currently Python 3.14, where PEP 649 defers annotation evaluation; on 3.13 or earlier the same file is a hard NameError at import. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
57 lines
1.9 KiB
Docker
57 lines
1.9 KiB
Docker
# OP25 Core Container
|
|
FROM python:slim-trixie
|
|
|
|
# Set environment variables
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
# Install system dependencies
|
|
RUN apt-get update && \
|
|
apt-get upgrade -y && \
|
|
apt-get install git pulseaudio pulseaudio-utils liquidsoap -y
|
|
|
|
# Install custom PulseAudio system config (enables anonymous access for edge-node)
|
|
COPY system.pa /etc/pulse/system.pa
|
|
|
|
# Clone the boatbod op25 repository
|
|
RUN git clone -b gr310 https://github.com/boatbod/op25 /op25
|
|
|
|
# Set the working directory
|
|
WORKDIR /op25
|
|
|
|
# Run the install script to set up op25
|
|
RUN sed -i 's/sudo //g' install.sh
|
|
RUN ./install.sh -f
|
|
|
|
# Install Python dependencies
|
|
COPY requirements.txt /tmp/requirements.txt
|
|
RUN pip3 install --no-cache-dir -r /tmp/requirements.txt
|
|
|
|
# Create the run_multi-rx_service.sh script
|
|
COPY run_multi-rx_service.sh /op25/op25/gr-op25_repeater/apps/run_multi-rx_service.sh
|
|
RUN chmod +x /op25/op25/gr-op25_repeater/apps/run_multi-rx_service.sh
|
|
|
|
# Expose ports for HTTP control as needed, for example:
|
|
EXPOSE 8001 8081
|
|
|
|
# Create and set up the configuration directory
|
|
VOLUME ["/configs"]
|
|
|
|
# Set the working directory in the container
|
|
WORKDIR /app
|
|
|
|
# Copy the rest of the directory contents into the container at /app
|
|
COPY ./app /app
|
|
|
|
# 1. Copy the wrapper script and make it executable
|
|
COPY docker-entrypoint.sh /usr/local/bin/
|
|
RUN sed -i 's/\r$//' /usr/local/bin/docker-entrypoint.sh && \
|
|
chmod +x /usr/local/bin/docker-entrypoint.sh
|
|
|
|
# 2. Update ENTRYPOINT to use the wrapper script
|
|
ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
|
|
|
|
# 3. Use CMD to pass the launch command as arguments to the ENTRYPOINT script.
|
|
# main.py starts uvicorn itself (see `if __name__ == "__main__"`) so the bind
|
|
# address can be driven by OP25_DEBUG_EXPOSE at runtime instead of being baked
|
|
# into this image at build time.
|
|
CMD ["python", "main.py"] |