langfuse 镜像构建

/root/lfuse 目录 langfuse 官方老版本，新版本 独立构建都是成功的。

构建：

docker build -t fuse-web-dingzhi -f ./web/Dockerfile .

docker build -t fuse-web-dingzhi-dev-1016 -f ./web/Dockerfile .

 

 

运行：

docker run --name fuse-hj-1016-office -e DIRECT_URL="postgresql://postgres:postgres@192.168.200.22:15432/postgres" -e DATABASE_URL="postgresql://postgres:postgres@192.168.200.22:15432/postgres" -e CLICKHOUSE_MIGRATION_URL="clickhouse://192.168.200.22:19000" -e CLICKHOUSE_URL="http://192.168.200.22:18123" -e CLICKHOUSE_USER="clickhouse" -e CLICKHOUSE_PASSWORD="clickhouse" -e CLICKHOUSE_CLUSTER_ENABLED="false" -e NEXTAUTH_URL="http://localhost:3000" -e NEXTAUTH_SECRET="secret" -e NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="DEV" -e LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES="true" -e SALT="salt" -e EMAIL_FROM_ADDRESS="" -e SMTP_CONNECTION_URL="" -e LANGFUSE_S3_BATCH_EXPORT_ENABLED="true" -e LANGFUSE_S3_BATCH_EXPORT_BUCKET="langfuse" -e LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID="minio" -e LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY="miniosecret" -e LANGFUSE_S3_BATCH_EXPORT_REGION="us-east-1" -e LANGFUSE_S3_BATCH_EXPORT_ENDPOINT="http://192.168.200.22:19090" -e LANGFUSE_S3_BATCH_EXPORT_FOR

 

 

正常的是这个

docker start fuse-hj-1016

如下跑langfuse 3000端口

http://192.168.200.150 对接到rulee-dev平台验证速度

docker run --name fuse-hj-1016-prod -e DIRECT_URL="postgresql://postgres:postgres@192.168.200.22:15432/postgres" -e DATABASE_URL="postgresql://postgres:postgres@192.168.200.22:15432/postgres" -e CLICKHOUSE_MIGRATION_URL="clickhouse://192.168.200.22:19000" -e CLICKHOUSE_URL="http://192.168.200.22:18123" -e CLICKHOUSE_USER="clickhouse" -e CLICKHOUSE_PASSWORD="clickhouse" -e CLICKHOUSE_CLUSTER_ENABLED="false" -e NEXTAUTH_URL="http://localhost:3000" -e NEXTAUTH_SECRET="secret" -e NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="DEV" -e LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES="true" -e SALT="salt" -e EMAIL_FROM_ADDRESS="" -e SMTP_CONNECTION_URL="" -e LANGFUSE_S3_BATCH_EXPORT_ENABLED="true" -e LANGFUSE_S3_BATCH_EXPORT_BUCKET="langfuse" -e LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID="minio" -e LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY="miniosecret" -e LANGFUSE_S3_BATCH_EXPORT_REGION="us-east-1" -e LANGFUSE_S3_BATCH_EXPORT_ENDPOINT="http://192.168.200.22:19090" -e LANGFUSE_S3_BATCH_EXPORT_FORCE_

 

 

 

 

Dockerfile 微调

构建镜像成功后run 报缺失dd-trace，所有在镜像构建就安装这个依赖

npm install --no-package-lock --no-save dd-trace@5.36.0

 

报这个ERROR: Failed to set up Chromium r1108766! Set "PUPPETEER_SKIP_DOWNLOAD" env variable to skip download ，修改web/Dockerfile:

以构建镜像能成功：

ENV PUPPETEER_SKIP_DOWNLOAD=true

ENV PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1

RUN pnpm install --frozen-lockfile

 

 

公司裁剪定制的前端

fuse-web-dingzhi-old-version-10-16-x001

 

docker run --name fuse-hj-1016-prod -e DIRECT_URL="postgresql://postgres:postgres@192.168.200.22:15432/postgres" -e DATABASE_URL="postgresql://postgres:postgres@192.168.200.22:15432/postgres" -e CLICKHOUSE_MIGRATION_URL="clickhouse://192.168.200.22:19000" -e CLICKHOUSE_URL="http://192.168.200.22:18123" -e CLICKHOUSE_USER="clickhouse" -e CLICKHOUSE_PASSWORD="clickhouse" -e CLICKHOUSE_CLUSTER_ENABLED="false" -e NEXTAUTH_URL="http://localhost:3000" -e NEXTAUTH_SECRET="secret" -e NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="DEV" -e LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES="true" -e SALT="salt" -e EMAIL_FROM_ADDRESS="" -e SMTP_CONNECTION_URL="" -e LANGFUSE_S3_BATCH_EXPORT_ENABLED="true" -e LANGFUSE_S3_BATCH_EXPORT_BUCKET="langfuse" -e LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID="minio" -e LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY="miniosecret" -e LANGFUSE_S3_BATCH_EXPORT_REGION="us-east-1" -e LANGFUSE_S3_BATCH_EXPORT_ENDPOINT="http://192.168.200.22:19090" -e LANGFUSE_S3_BATCH_EXPORT_FORCE

报错信息：

Error: Can't write to /usr/local/lib/node_modules/prisma/node_modules/@prisma/engines please make sure you install "prisma" with the right permissions.

Error: Can't write to /usr/local/lib/node_modules/prisma/node_modules/@prisma/engines please make sure you install "prisma" with the right permissions.

Applying database migrations failed. This is mostly caused by the database being unavailable.

Exiting...

 

 

 

 

Refused to frame 'http://192.168.200.150:3000/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

安全考虑

frame-ancestors 'none' 是一种重要的安全措施，可以防止：

 

 

frame-ancestors *;

 

"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;"

 

 

"contentSecurityPolicy":"script-src 'self'; frame-ancestors *;frame-src *; "

点击劫持攻击

恶意网站嵌入你的内容

信息泄露

 

 

 

 

 

 

20/16 下午16：49 使用公司定制web 构建web镜像

docker build -t fuse-web-dingzhi-dev-1016 -f ./web/Dockerfile .

 

docker run --name fuse-hj-1016-dingzhi-web -e DIRECT_URL="postgresql://postgres:postgres@192.168.200.22:15432/postgres" -e DATABASE_URL="postgresql://postgres:postgres@192.168.200.22:15432/postgres" -e CLICKHOUSE_MIGRATION_URL="clickhouse://192.168.200.22:19000" -e CLICKHOUSE_URL="http://192.168.200.22:18123" -e CLICKHOUSE_USER="clickhouse" -e CLICKHOUSE_PASSWORD="clickhouse" -e CLICKHOUSE_CLUSTER_ENABLED="false" -e NEXTAUTH_URL="http://localhost:3000" -e NEXTAUTH_SECRET="secret" -e NEXT_PUBLIC_LANGFUSE_CLOUD_REGION="DEV" -e LANGFUSE_ENABLE_EXPERIMENTAL_FEATURES="true" -e SALT="salt" -e EMAIL_FROM_ADDRESS="" -e SMTP_CONNECTION_URL="" -e LANGFUSE_S3_BATCH_EXPORT_ENABLED="true" -e LANGFUSE_S3_BATCH_EXPORT_BUCKET="langfuse" -e LANGFUSE_S3_BATCH_EXPORT_ACCESS_KEY_ID="minio" -e LANGFUSE_S3_BATCH_EXPORT_SECRET_ACCESS_KEY="miniosecret" -e LANGFUSE_S3_BATCH_EXPORT_REGION="us-east-1" -e LANGFUSE_S3_BATCH_EXPORT_ENDPOINT="http://192.168.200.22:19090" -e LANGFUSE_S3_BATCH_EXPOR

 

定制的 Web 打包能成功 ，run报错 Error: Can't write to /usr/local/lib/node_modules/prisma/node_modules/@prisma/engines please make sure you install "prisma" with the right permissions.

Error: Can't write to /usr/local/lib/node_modules/prisma/node_modules/@prisma/engines please make sure you install "prisma" with the right permissions.

Applying database migrations failed. This is mostly caused by the database being unavailable.

Exiting...