docker: production image + Gitea Actions for monthly refresh
Image rebuild (skip scrape) / build (push) Failing after 1h37m12s
Image rebuild (skip scrape) / build (push) Failing after 1h37m12s
Dockerfile: self-contained image with corpus + Chroma + BM25 baked in. Drawbar's compose pulls + runs without volume mounts. Built from sources.json (labels schema), PRODUCT_NAME=crop_chem by default, HYBRID_SEARCH=true (always-on for production quality). RERANK_URL + OLLAMA_URL get set at compose time. .gitea/workflows/refresh.yml: monthly cron (1st @ 06:00 UTC) does full scrape → reindex → image push. Scrapes Bayer (~30 min) + EPA PPLS row-crop filtered (~7h). Skips reindex+push if no corpus diff. Tags pushed: :latest, :<sha12>, :corpus-<YYYY.MM.DD>. .gitea/workflows/image-only.yml: on-demand or auto on code-only pushes to main (paths: docs_mcp/, rag/, scrape/, requirements.txt, Dockerfile, sources.json). Reindexes from committed corpus, builds image, pushes. ~10 min vs ~9h full refresh. .gitignore: corpus/ now COMMITTED (4,159 labels, 265 MB of .md + sidecars). Lets image-only.yml rebuild indexes without re-scraping. chroma/ + bm25/ still gitignored (regenerable binary indexes). .dockerignore: drops venv, eval results, PLAN/README/CLAUDE.md, deploy/, .git/ — keeps the image lean. corpus + chroma + bm25 explicitly NOT in dockerignore (those go INTO the image). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -1,34 +1,32 @@
|
||||
name: Image rebuild (skip scrape)
|
||||
|
||||
# Fast path for code-only changes. Skips the scrape and goes straight to:
|
||||
# rebuild indexes (from corpus already committed on main) + image build
|
||||
# + push. Runtime is ~18 min vs ~40 min for the full refresh.
|
||||
# Fast path for code-only changes. Skips the scrape and goes straight
|
||||
# to: rebuild indexes (from corpus already committed on main) + image
|
||||
# build + push. Runtime ~10 min vs ~9 h for the full monthly refresh.
|
||||
#
|
||||
# Use when a PR only changes code/config — anything where the upstream
|
||||
# corpus hasn't moved but we want the new Python in the running image.
|
||||
#
|
||||
# IMPORTANT: fetch-depth: 0 is required for the digest-history step
|
||||
# to find commits to walk. Don't change to 1.
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
paths:
|
||||
- "docs_mcp/**"
|
||||
- "rag/**"
|
||||
- "scrape/**"
|
||||
- "requirements.txt"
|
||||
- "Dockerfile"
|
||||
- "sources.json"
|
||||
|
||||
env:
|
||||
REGISTRY_PUSH: <lan-host>:<port>
|
||||
REGISTRY_PULL: <public-registry-hostname>
|
||||
# Image name derives from the actual repo at runtime, so a clone
|
||||
# doesn't need to find/replace anything. e.g. justin/my-product-docs.
|
||||
# github.* context is Gitea Actions' inherited GitHub-Actions namespace
|
||||
# — values come from the Gitea server, not github.com.
|
||||
REGISTRY_PUSH: git.jpaul.io
|
||||
REGISTRY_PULL: git.jpaul.io
|
||||
IMAGE: ${{ github.repository_owner }}/${{ github.event.repository.name }}
|
||||
OLLAMA_URL: http://<gpu-host>:11434
|
||||
OLLAMA_URL: http://192.168.0.2:11434,http://192.168.0.2:11435,http://192.168.0.125:11434
|
||||
EMBED_MODEL: nomic-embed-text
|
||||
# PRODUCT_NAME defaults to the repo name so a clone works without
|
||||
# editing. Override here if you want a different identifier (e.g.
|
||||
# repo "my-product-docs" → PRODUCT_NAME "myproduct"). Used as the
|
||||
# Chroma collection name, BM25 db filename, and MCP server name —
|
||||
# see docs_mcp/server.py.
|
||||
PRODUCT_NAME: ${{ github.event.repository.name }}
|
||||
PRODUCT_NAME: crop_chem
|
||||
|
||||
jobs:
|
||||
build:
|
||||
@@ -39,8 +37,6 @@ jobs:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
# Full history (not shallow) so the digest-history step can
|
||||
# walk git log up to --history-days back.
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Set up Python
|
||||
@@ -53,46 +49,34 @@ jobs:
|
||||
python -m pip install -q --upgrade pip
|
||||
python -m pip install -q -r requirements.txt
|
||||
|
||||
- name: Refresh digest history
|
||||
# Cheap (a few seconds); doesn't touch corpus content.
|
||||
# Without this step, a code-only deploy would ship an
|
||||
# increasingly-stale digest history relative to git.
|
||||
run: |
|
||||
mkdir -p corpus/.digest
|
||||
python -m scrape.changelog \
|
||||
--history-out corpus/.digest/history.jsonl \
|
||||
--history-days 120
|
||||
|
||||
- name: Verify committed corpus is present
|
||||
run: |
|
||||
test -d corpus || { echo "ERROR: corpus/ missing on this ref"; exit 1; }
|
||||
echo "corpus: $(du -sh corpus | cut -f1), $(find corpus -name '*.md' | wc -l) markdown files"
|
||||
n_md=$(find corpus -name '*.md' | wc -l)
|
||||
n_json=$(find corpus -name '*.json' | wc -l)
|
||||
echo "corpus: $(du -sh corpus | cut -f1) on disk, ${n_md} .md / ${n_json} .json"
|
||||
test "$n_md" -gt 100 || { echo "ERROR: corpus has fewer than 100 labels — was the rename committed?"; exit 1; }
|
||||
|
||||
- name: Rebuild indexes from existing corpus
|
||||
- name: Rebuild indexes from committed corpus
|
||||
run: python -m rag.index --rebuild
|
||||
|
||||
- name: Log in to registry (LAN endpoint)
|
||||
- name: Log in to Gitea container registry
|
||||
run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login "${REGISTRY_PUSH}" -u "${{ github.repository_owner }}" --password-stdin
|
||||
|
||||
- name: Build & push image
|
||||
run: |
|
||||
SHA_TAG=$(echo "$GITHUB_SHA" | cut -c1-12)
|
||||
DATE_TAG=$(date -u +%Y.%m.%d)
|
||||
CORPUS_TAG="corpus-$(date -u +%Y.%m.%d)"
|
||||
docker build \
|
||||
-t "${REGISTRY_PUSH}/${IMAGE}:latest" \
|
||||
-t "${REGISTRY_PUSH}/${IMAGE}:${SHA_TAG}" \
|
||||
-t "${REGISTRY_PUSH}/${IMAGE}:${DATE_TAG}" \
|
||||
-t "${REGISTRY_PUSH}/${IMAGE}:${CORPUS_TAG}" \
|
||||
.
|
||||
docker push "${REGISTRY_PUSH}/${IMAGE}:latest"
|
||||
docker push "${REGISTRY_PUSH}/${IMAGE}:${SHA_TAG}"
|
||||
docker push "${REGISTRY_PUSH}/${IMAGE}:${DATE_TAG}"
|
||||
docker push "${REGISTRY_PUSH}/${IMAGE}:${CORPUS_TAG}"
|
||||
|
||||
- name: Link container package to this repo
|
||||
# Gitea container packages are owned by a USER, not a repo —
|
||||
# they don't auto-appear under the repo's Packages tab.
|
||||
# This API call creates the association. One-time-effective:
|
||||
# re-running returns 400 once linked, which we swallow.
|
||||
# Endpoint requires Gitea 1.21+.
|
||||
env:
|
||||
GITEA_TOKEN: ${{ secrets.REGISTRY_TOKEN }}
|
||||
run: |
|
||||
@@ -105,7 +89,7 @@ jobs:
|
||||
echo "link http=$CODE body=$(cat "$BODY")"
|
||||
case "$CODE" in
|
||||
201) echo "linked package to ${OWNER}/${PKG}" ;;
|
||||
400) echo "already linked (re-link returns 400) — ok" ;;
|
||||
400) echo "already linked — ok" ;;
|
||||
*) echo "unexpected status $CODE"; exit 1 ;;
|
||||
esac
|
||||
|
||||
@@ -116,5 +100,5 @@ jobs:
|
||||
python scripts/registry_gc.py \
|
||||
--owner "${{ github.repository_owner }}" \
|
||||
--package "${{ github.event.repository.name }}" \
|
||||
--keep-days 90 \
|
||||
--keep-latest 5
|
||||
--keep-days 180 \
|
||||
--keep-latest 6
|
||||
|
||||
Reference in New Issue
Block a user