feat(settings-server): upgrade docker node version to 24.0.2 & upgrade nestjs version to 11.1.1

otel: bump the go auto-instrumentation image version (#1328 )
otel: change the go auto-instrumentation image version
2025-05-19 21:29:50 +08:00 · 2025-05-19 19:30:36 +08:00 · 2025-05-17 01:20:19 +08:00 · 2025-05-16 23:57:26 +08:00 · 2025-05-16 21:00:41 +08:00 · 2025-05-16 00:19:35 +08:00
17 changed files with 64 additions and 41 deletions
--- a/apps/desktop/config/user/helm-charts/desktop/templates/desktop_deploy.yaml
+++ b/apps/desktop/config/user/helm-charts/desktop/templates/desktop_deploy.yaml
@@ -66,7 +66,7 @@ spec:

      containers:
      - name: edge-desktop
-        image: beclab/desktop:v0.2.58
+        image: beclab/desktop:v0.2.59
        imagePullPolicy: IfNotPresent
        securityContext:
          runAsNonRoot: false
@@ -78,7 +78,7 @@ spec:
            value: http://bfl.{{ .Release.Namespace }}:8080

      - name: desktop-server
-        image: beclab/desktop-server:v0.2.58
+        image: beclab/desktop-server:v0.2.59
        imagePullPolicy: IfNotPresent
        securityContext:
          allowPrivilegeEscalation: false
--- a/apps/files/config/cluster/deploy/files_deploy.yaml
+++ b/apps/files/config/cluster/deploy/files_deploy.yaml
@@ -303,7 +303,7 @@ spec:
            runAsUser: 0
            privileged: true
        - name: nginx
-          image: 'eball/nginx-header-more:test-3'
+          image: 'beclab/docker-nginx-headers-more:ubuntu-v0.1.0'
          securityContext:
            runAsNonRoot: false
            runAsUser: 0
--- a/apps/files/config/user/helm-charts/files/templates/files_fe_deploy.yaml
+++ b/apps/files/config/user/helm-charts/files/templates/files_fe_deploy.yaml
@@ -318,7 +318,7 @@ spec:
 #        - /filebrowser
 #        - --noauth
      - name: files-frontend
-        image: eball/nginx-header-more:test-3
+        image: beclab/docker-nginx-headers-more:ubuntu-v0.1.0
        imagePullPolicy: IfNotPresent
        securityContext:
          runAsNonRoot: false
--- a/apps/market/config/user/helm-charts/market/templates/market_deploy.yaml
+++ b/apps/market/config/user/helm-charts/market/templates/market_deploy.yaml
@@ -105,7 +105,7 @@ spec:
            cp -rf /app/* /cp_app/. && cp -rf /etc/nginx/conf.d/* /confd/.            
      containers:
      - name: appstore
-        image: eball/nginx-header-more:test-3
+        image: beclab/docker-nginx-headers-more:ubuntu-v0.1.0
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 80
--- a/apps/notifications/config/cluster/deploy/notification_deploy.yaml
+++ b/apps/notifications/config/cluster/deploy/notification_deploy.yaml
@@ -1,6 +1,6 @@


-{{- $namespace := printf "%s%s" "os-system" -}}
+{{- $namespace := printf "%s" "os-system" -}}
 {{- $notifications_secret := (lookup "v1" "Secret" $namespace "notifications-secrets") -}}

 {{- $pg_password := "" -}}
@@ -148,7 +148,7 @@ spec:
            value: os_system_notifications
      containers:
      - name: notifications-api
-        image: beclab/notifications-api:v1.12.2
+        image: beclab/notifications-api:v1.12.3
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 3010
--- a/apps/system-apps/config/user/helm-charts/monitoring/templates/system-frontend.yaml
+++ b/apps/system-apps/config/user/helm-charts/monitoring/templates/system-frontend.yaml
@@ -256,7 +256,7 @@ spec:
            - mountPath: /www
              name: www-dir
        - name: settings-init
-          image: beclab/settings:v1.3.61
+          image: beclab/settings:v1.3.62
          imagePullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -268,7 +268,7 @@ spec:
            - mountPath: /www
              name: www-dir
        - name: studio-init
-          image: beclab/studio:v0.2.11
+          image: beclab/studio:v0.2.16
          imagePullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -305,7 +305,7 @@ spec:
            - -c
            - /etc/envoy/envoy.yaml
        - name: system-frontend
-          image: eball/nginx-header-more:test-3
+          image: beclab/docker-nginx-headers-more:ubuntu-v0.1.0
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 81
@@ -385,7 +385,7 @@ spec:
          terminationMessagePath: /dev/termination-log
          terminationMessagePolicy: File
        - name: settings-server
-          image: beclab/settings-server:v0.2.22
+          image: beclab/settings-server:v0.2.23
          imagePullPolicy: IfNotPresent
          ports:
            - containerPort: 3000
--- a/build/installer/install.ps1
+++ b/build/installer/install.ps1
@@ -48,7 +48,7 @@ if (-Not (Test-Path $CLI_PROGRAM_PATH)) {
  New-Item -Path $CLI_PROGRAM_PATH -ItemType Directory
 }

-$CLI_VERSION = "0.2.34"
+$CLI_VERSION = "0.2.35"
 $CLI_FILE = "olares-cli-v{0}_windows_{1}.tar.gz" -f $CLI_VERSION, $arch
 $CLI_URL = "{0}/{1}" -f $downloadUrl, $CLI_FILE
 $CLI_PATH = "{0}{1}" -f $CLI_PROGRAM_PATH, $CLI_FILE
@@ -82,6 +82,6 @@ if ($download -eq 1) {
 Start-Sleep -Seconds 3
 Write-Host ("Preparing to start the installation of Olares {0}. Depending on your network conditions, this process may take several minutes." -f $version)

-$command = "{0}\olares-cli.exe olares install --version {1}" -f $CLI_PROGRAM_PATH, $version
+$command = "{0}\olares-cli.exe install --version {1}" -f $CLI_PROGRAM_PATH, $version
 Start-Process cmd -ArgumentList '/k',$command -Wait -Verb RunAs

--- a/build/installer/install.sh
+++ b/build/installer/install.sh
@@ -74,7 +74,7 @@ if [ -z ${cdn_url} ]; then
    cdn_url="https://dc3p1870nn3cj.cloudfront.net"
 fi

-CLI_VERSION="0.2.34"
+CLI_VERSION="0.2.35"
 CLI_FILE="olares-cli-v${CLI_VERSION}_linux_${ARCH}.tar.gz"
 if [[ x"$os_type" == x"Darwin" ]]; then
    CLI_FILE="olares-cli-v${CLI_VERSION}_darwin_${ARCH}.tar.gz"
@@ -137,7 +137,7 @@ else
            echo ""
        else
            echo "building local release ..."
-            $sh_c "$INSTALL_OLARES_CLI olares release $PARAMS $CDN"
+            $sh_c "$INSTALL_OLARES_CLI release $PARAMS $CDN"
            if [[ $? -ne 0 ]]; then
                echo "error: failed to build local release"
                exit 1
@@ -146,13 +146,13 @@ else
    else
        echo "running system prechecks ..."
        echo ""
-        $sh_c "$INSTALL_OLARES_CLI olares precheck $PARAMS"
+        $sh_c "$INSTALL_OLARES_CLI precheck $PARAMS"
        if [[ $? -ne 0 ]]; then
            exit 1
        fi
        echo "downloading installation wizard..."
        echo ""
-        $sh_c "$INSTALL_OLARES_CLI olares download wizard $PARAMS $KUBE_PARAM $CDN"
+        $sh_c "$INSTALL_OLARES_CLI download wizard $PARAMS $KUBE_PARAM $CDN"
        if [[ $? -ne 0 ]]; then
            echo "error: failed to download installation wizard"
            exit 1
@@ -161,7 +161,7 @@ else

    echo "downloading installation packages..."
    echo ""
-    $sh_c "$INSTALL_OLARES_CLI olares download component $PARAMS $KUBE_PARAM $CDN"
+    $sh_c "$INSTALL_OLARES_CLI download component $PARAMS $KUBE_PARAM $CDN"
    if [[ $? -ne 0 ]]; then
        echo "error: failed to download installation packages"
        exit 1
@@ -173,7 +173,7 @@ else
    if [ x"$REGISTRY_MIRRORS" != x"" ]; then
        extra="--registry-mirrors $REGISTRY_MIRRORS"
    fi
-    $sh_c "$INSTALL_OLARES_CLI olares prepare $PARAMS $KUBE_PARAM $extra"
+    $sh_c "$INSTALL_OLARES_CLI prepare $PARAMS $KUBE_PARAM $extra"
    if [[ $? -ne 0 ]]; then
        echo "error: failed to prepare installation environment"
        exit 1
@@ -198,7 +198,7 @@ if [[ "$JUICEFS" == "1" ]]; then
    else
        echo "checking storage config ..."
    fi
-    $sh_c "$INSTALL_OLARES_CLI olares install storage $PARAMS"
+    $sh_c "$INSTALL_OLARES_CLI install storage $PARAMS"
    if [[ $? -ne 0 ]]; then
      exit 1
    fi
@@ -221,7 +221,7 @@ if [[ -n "$ZRAM_SWAP_PRIORITY" ]]; then
 fi
 echo "installing Olares..."
 echo ""
-$sh_c "$INSTALL_OLARES_CLI olares install $PARAMS $KUBE_PARAM $fsflag $swapflag"
+$sh_c "$INSTALL_OLARES_CLI install $PARAMS $KUBE_PARAM $fsflag $swapflag"

 if [[ $? -ne 0 ]]; then
    echo "error: failed to install Olares"
--- a/build/installer/joincluster.sh
+++ b/build/installer/joincluster.sh
@@ -157,7 +157,7 @@ fi

 set_master_host_ssh_options

-CLI_VERSION="0.2.34"
+CLI_VERSION="0.2.35"
 CLI_FILE="olares-cli-v${CLI_VERSION}_linux_${ARCH}.tar.gz"

 if command_exists olares-cli && [[ "$(olares-cli -v | awk '{print $3}')" == "$CLI_VERSION" ]]; then
@@ -211,14 +211,14 @@ if [[ -f $BASE_DIR/.prepared ]]; then
 else
    echo "running system prechecks ..."
    echo ""
-    $sh_c "$INSTALL_OLARES_CLI olares precheck $PARAMS"
+    $sh_c "$INSTALL_OLARES_CLI precheck $PARAMS"
    if [[ $? -ne 0 ]]; then
        exit 1
    fi

    echo "downloading installation wizard..."
    echo ""
-    $sh_c "$INSTALL_OLARES_CLI olares download wizard $PARAMS $CDN"
+    $sh_c "$INSTALL_OLARES_CLI download wizard $PARAMS $CDN"
    if [[ $? -ne 0 ]]; then
        echo "error: failed to download installation wizard"
        exit 1
@@ -226,7 +226,7 @@ else

    echo "downloading installation packages..."
    echo ""
-    $sh_c "$INSTALL_OLARES_CLI olares download component $PARAMS $CDN"
+    $sh_c "$INSTALL_OLARES_CLI download component $PARAMS $CDN"
    if [[ $? -ne 0 ]]; then
        echo "error: failed to download installation packages"
        exit 1
@@ -238,7 +238,7 @@ else
    if [ x"$REGISTRY_MIRRORS" != x"" ]; then
        extra="--registry-mirrors $REGISTRY_MIRRORS"
    fi
-    $sh_c "$INSTALL_OLARES_CLI olares prepare $PARAMS $extra"
+    $sh_c "$INSTALL_OLARES_CLI prepare $PARAMS $extra"
    if [[ $? -ne 0 ]]; then
        echo "error: failed to prepare installation environment"
        exit 1
--- a/build/manifest/components
+++ b/build/manifest/components
@@ -1,4 +1,4 @@
-olaresd-v1.12.0-rc.9.tar.gz,pkg/components,https://dc3p1870nn3cj.cloudfront.net/olaresd-v1.12.0-rc.9-linux-amd64.tar.gz,https://dc3p1870nn3cj.cloudfront.net/olaresd-v1.12.0-rc.9-linux-arm64.tar.gz,olaresd
+olaresd-v1.12.0-rc.10.tar.gz,pkg/components,https://dc3p1870nn3cj.cloudfront.net/olaresd-v1.12.0-rc.10-linux-amd64.tar.gz,https://dc3p1870nn3cj.cloudfront.net/olaresd-v1.12.0-rc.10-linux-arm64.tar.gz,olaresd
 socat-1.7.3.2.tar.gz,pkg/components,https://src.fedoraproject.org/lookaside/pkgs/socat/socat-1.7.3.2.tar.gz/sha512/540658b2a3d1b87673196282e5c62b97681bd0f1d1e4759ff9d72909d11060235ee9e9521a973603c1b00376436a9444248e5fbc0ffac65f8edb9c9bc28e7972/socat-1.7.3.2.tar.gz,https://src.fedoraproject.org/lookaside/pkgs/socat/socat-1.7.3.2.tar.gz/sha512/540658b2a3d1b87673196282e5c62b97681bd0f1d1e4759ff9d72909d11060235ee9e9521a973603c1b00376436a9444248e5fbc0ffac65f8edb9c9bc28e7972/socat-1.7.3.2.tar.gz,socat
 conntrack-tools-1.4.1.tar.gz,pkg/components,https://github.com/fqrouter/conntrack-tools/archive/refs/tags/conntrack-tools-1.4.1.tar.gz,https://github.com/fqrouter/conntrack-tools/archive/refs/tags/conntrack-tools-1.4.1.tar.gz,conntrack-tools
 minio.RELEASE.2023-05-04T21-44-30Z,pkg/components,https://dl.min.io/server/minio/release/linux-amd64/archive/minio.RELEASE.2023-05-04T21-44-30Z,https://dl.min.io/server/minio/release/linux-arm64/archive/minio.RELEASE.2023-05-04T21-44-30Z,minio
--- a/build/manifest/images
+++ b/build/manifest/images
@@ -42,6 +42,6 @@ mirrorgooglecontainers/defaultbackend-amd64:1.4
 projecthami/hami-webui-fe-oss:v1.0.5
 projecthami/hami-webui-be-oss:v1.0.5
 nvidia/dcgm-exporter:4.1.1-4.0.4-ubuntu22.04
-ghcr.io/open-telemetry/opentelemetry-go-instrumentation/autoinstrumentation-go:v0.19.0-alpha
-bytetrade/autoinstrumentation-apache-httpd:1.0.4
+ghcr.io/open-telemetry/opentelemetry-go-instrumentation/autoinstrumentation-go:v0.20.0
+bytetrade/autoinstrumentation-apache-httpd:1.0.4-fix1
 ghcr.io/open-telemetry/opentelemetry-operator/autoinstrumentation-nodejs:0.40.0
--- a/frameworks/app-service/config/cluster/deploy/appservice_deploy.yaml
+++ b/frameworks/app-service/config/cluster/deploy/appservice_deploy.yaml
@@ -143,7 +143,7 @@ spec:
      priorityClassName: "system-cluster-critical"
      containers:
      - name: app-service
-        image: beclab/app-service:0.3.28
+        image: beclab/app-service:0.3.29
        imagePullPolicy: IfNotPresent
        securityContext:
          runAsUser: 0
--- a/frameworks/backup-server/config/cluster/deploy/backup_server.yaml
+++ b/frameworks/backup-server/config/cluster/deploy/backup_server.yaml
@@ -1,6 +1,6 @@


-{{ $backupVersion := "0.3.27" }}
+{{ $backupVersion := "0.3.29" }}
 {{ $backup_server_rootpath := printf "%s%s" .Values.rootPath "/rootfs/backup-server" }}

 ---
@@ -43,6 +43,10 @@ spec:
      - name: api
        image: beclab/backup-server:v{{ $backupVersion }}
        imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: true
+          privileged: true
+          runAsUser: 0
        command:
        - /backup-server
        - apiserver
@@ -69,6 +73,7 @@ spec:
        - mountPath: /rootfs
          name: rootfs
        - mountPath: /shares
+          mountPropagation: Bidirectional
          name: shares
      - name: controller
        image: beclab/backup-server:v{{ $backupVersion }}
--- a/frameworks/bfl/config/launcher/templates/otel_define.yaml
+++ b/frameworks/bfl/config/launcher/templates/otel_define.yaml
@@ -44,7 +44,7 @@ spec:
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
  nginx:
-    image: bytetrade/autoinstrumentation-apache-httpd:1.0.4
+    image: bytetrade/autoinstrumentation-apache-httpd:1.0.4-fix1
    env:
      - name: OTEL_EXPORTER_OTLP_ENDPOINT
        value: http://jaeger-storage-instance-collector.os-system:4318
@@ -53,11 +53,12 @@ spec:
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
  go:
+    image: ghcr.io/open-telemetry/opentelemetry-go-instrumentation/autoinstrumentation-go:v0.20.0
    env:
      - name: OTEL_EXPORTER_OTLP_ENDPOINT
        value: http://jaeger-storage-instance-collector.os-system:4318
      - name: OTEL_EXPORTER_OTLP_PROTOCOL
-        value: http/json
+        value: http/protobuf
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
    resourceRequirements:
@@ -110,7 +111,7 @@ spec:
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
  nginx:
-    image: bytetrade/autoinstrumentation-apache-httpd:1.0.4
+    image: bytetrade/autoinstrumentation-apache-httpd:1.0.4-fix1
    env:
      - name: OTEL_EXPORTER_OTLP_ENDPOINT
        value: http://jaeger-storage-instance-collector.os-system:4318
@@ -119,11 +120,12 @@ spec:
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
  go:
+    image: ghcr.io/open-telemetry/opentelemetry-go-instrumentation/autoinstrumentation-go:v0.20.0
    env:
      - name: OTEL_EXPORTER_OTLP_ENDPOINT
        value: http://jaeger-storage-instance-collector.os-system:4318
      - name: OTEL_EXPORTER_OTLP_PROTOCOL
-        value: http/json
+        value: http/protobuf
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
    resourceRequirements:
--- a/frameworks/system-server/config/user/helm-charts/systemserver/templates/systemserver_deploy.yaml
+++ b/frameworks/system-server/config/user/helm-charts/systemserver/templates/systemserver_deploy.yaml
@@ -41,13 +41,17 @@ spec:
    metadata:
      labels:
        app: systemserver
+      annotations:
+        instrumentation.opentelemetry.io/go-container-names: system-server
+        instrumentation.opentelemetry.io/inject-go: olares-instrumentation
+        instrumentation.opentelemetry.io/otel-go-auto-target-exe: /system-server
    spec:
      serviceAccountName: bytetrade-sys-ops
      serviceAccount: bytetrade-sys-ops
      priorityClassName: "system-cluster-critical"
      containers:
      - name: system-server
-        image: beclab/system-server:0.1.21
+        image: beclab/system-server:0.1.22
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 80
@@ -319,4 +323,4 @@ metadata:
  name: systemserver-proxy-configs
  namespace: user-system-{{ .Values.bfl.username }}

-    
+    
--- a/third-party/authelia/config/cluster/deploy/auth_backend_deploy.yaml
+++ b/third-party/authelia/config/cluster/deploy/auth_backend_deploy.yaml
@@ -389,10 +389,21 @@ spec:
        image: owncloudci/wait-for:latest
        imagePullPolicy: IfNotPresent
        name: check-redis
-
+      - name: setsysctl
+        image: 'busybox:1.28'
+        command:
+          - sh
+          - '-c'
+          - |
+            sysctl -w net.core.somaxconn=65535
+            sysctl -w net.ipv4.ip_local_port_range="1024 65535"
+            sysctl -w net.ipv4.tcp_tw_reuse=1
+            sysctl -w fs.file-max=1048576
+        securityContext:
+          privileged: true
      containers:      
      - name: authelia
-        image: beclab/auth:0.2.4
+        image: beclab/auth:0.2.6
        imagePullPolicy: IfNotPresent
        ports:
        - containerPort: 9091
--- a/third-party/opentelemetry/config/cluster/deploy/opentelemetry_operator.yaml
+++ b/third-party/opentelemetry/config/cluster/deploy/opentelemetry_operator.yaml
@@ -977,7 +977,7 @@ spec:
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
  nginx:
-    image: bytetrade/autoinstrumentation-apache-httpd:1.0.4
+    image: bytetrade/autoinstrumentation-apache-httpd:1.0.4-fix1
    env:
      - name: OTEL_EXPORTER_OTLP_ENDPOINT
        value: http://jaeger-storage-instance-collector.os-system:4318
@@ -986,11 +986,12 @@ spec:
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
  go:
+    image: ghcr.io/open-telemetry/opentelemetry-go-instrumentation/autoinstrumentation-go:v0.20.0
    env:
      - name: OTEL_EXPORTER_OTLP_ENDPOINT
        value: http://jaeger-storage-instance-collector.os-system:4318
      - name: OTEL_EXPORTER_OTLP_PROTOCOL
-        value: http/json
+        value: http/protobuf
      - name: OTEL_TRACES_SAMPLER_ARG
        value: "1.0"
    resourceRequirements:
Author	SHA1	Message	Date
qq815776412	754425670e	feat(settings-server): upgrade docker node version to 24.0.2 & upgrade nestjs version to 11.1.1	2025-05-19 21:29:50 +08:00
eball	d8a69a146c	otel: bump the go auto-instrumentation image version (#1328 ) otel: change the go auto-instrumentation image version	2025-05-19 19:30:36 +08:00
eball	7c134bbb1d	authelia: replace redis client pool of session provider (#1323 ) * authelia: replace redis client pool of session provider * Update auth_backend_deploy.yaml * Update auth_backend_deploy.yaml * feat: add instrumentation to system-server * Update systemserver_deploy.yaml	2025-05-17 01:20:19 +08:00
aby913	39dbad4ec9	backup-server: queue optimization, backup and restore process adjust (#1326 ) backup-server: queue optimization, backup and restore process adjustments	2025-05-16 23:57:26 +08:00
eball	6c1539d65b	otel: add arm64 version ubuntu nginx (#1324 ) * otel: nginx auto instrumentation config reload bug fix * otel: add arm64 version ubuntu nginx * fix: change image tag	2025-05-16 21:00:41 +08:00
hysyeah	a3038f1edb	app-service: improve api performance by use k8s informer (#1322 )	2025-05-16 00:19:35 +08:00
huaiyuan	a2c7b16382	desktop: improve data refresh logic by socket after network reconnection (#1321 ) fix(desktop): improve data refresh logic by socket after network reconnection	2025-05-16 00:19:09 +08:00
huaiyuan	ac598f66fc	studio: show installation status in header bar (#1319 ) fix(studio): show installation status in header bar	2025-05-16 00:18:18 +08:00
dkeven	6a8cb38940	fix(chart): remove redundant format symbol in template (#1317 )	2025-05-15 21:23:29 +08:00
eball	1c1e7dfdf4	otel: nginx instrumentation arm64 version build bug (#1315 ) * otel: nginx auto instrumentation config reload bug fix * otel: nginx instrumentation arm64 version build bug	2025-05-15 21:22:56 +08:00
aby913	21199571ca	backup-server: improve url check for snapshots retrieval and restore … (#1316 ) backup-server: improve url check for snapshots retrieval and restore interface	2025-05-15 01:47:57 +08:00
dkeven	f5da7693a9	feat(installer): get rid of redundant subcommand and scripts; collect dmesg logs (#1314 )	2025-05-14 17:48:26 +08:00
Peng Peng	668fb373bc	feat: Let notification server can get users information (#1313 )	2025-05-14 17:47:10 +08:00
eball	99a20ca23f	otel: nginx auto instrumentation config reload bug fix (#1312 )	2025-05-13 00:31:22 +08:00
wiy	07478c96d6	fix(settings): the problem of failure to create sub-account (#1311 )	2025-05-13 00:30:52 +08:00