Update Dockerfile

Dockerfile

@@ -3,25 +3,44 @@ RUN apk add --no-cache git
 RUN mkdir /app
 WORKDIR /app
 RUN git clone https://github.com/qwertyuiopasdfghjklzxcvbnm0987654321/weibo-rss .
+
+# 修复路径相关配置
+RUN sed -i 's|./data|/app/data|g' src/config.ts && \
+    sed -i '/"compilerOptions"/a \ \ "skipLibCheck": true,' tsconfig.json
+
 RUN npm i -g npm && npm install --package-lock-only
-RUN npm ci --ignore-scripts && npm run build
+RUN npm ci --ignore-scripts
+
+# 创建数据目录并设置权限
+RUN mkdir -p /app/data/rss-data && \
+    chmod -R 777 /app/data
+
+RUN npm run build
 
 FROM node:18-alpine
 LABEL maintainer="https://github.com/zgq354/weibo-rss"
+RUN mkdir -p /app/data && \
+    chown -R node:node /app && \
+    chmod -R 755 /app
 
-# 添加依赖安装步骤
-RUN apk add --no-cache wget
+WORKDIR /app
 
-# 修正dumb-init安装路径
-RUN wget -O /usr/bin/dumb-init https://github.com/Yelp/dumb-init/releases/download/v1.2.1/dumb-init_1.2.1_amd64 \
-    && echo "057ecd4ac1d3c3be31f82fc0848bf77b1326a975b4f8423fe31607205a0fe945  /usr/bin/dumb-init" | sha256sum -c - \
-    && chmod +x /usr/bin/dumb-init
+# 使用非root用户运行
+USER node
 
-WORKDIR /app
-COPY --from=builder /app/package.json /app/package-lock.json ./
+# 确保数据目录存在
+RUN mkdir -p /app/data/rss-data
+
+# container init
+RUN wget -O /usr/local/bin/dumb-init https://github.com/Yelp/dumb-init/releases/download/v1.2.1/dumb-init_1.2.1_amd64 && \
+    echo "057ecd4ac1d3c3be31f82fc0848bf77b1326a975b4f8423fe31607205a0fe945  /usr/local/bin/dumb-init" | sha256sum -c - && \
+    chmod 755 /usr/local/bin/dumb-init
+
+COPY --from=builder --chown=node:node /app/package.json /app/package-lock.json ./
 RUN npm install --production
-COPY --from=builder /app ./
+
+COPY --from=builder --chown=node:node /app ./
 
 EXPOSE 3000
-ENTRYPOINT ["/usr/bin/dumb-init", "--"]
+ENTRYPOINT ["/usr/local/bin/dumb-init", "--"]
 CMD ["node", "/app/dist/app.js"]