ftapi/secutransfer

FTAPI Docker镜像文档

关于FTAPI

FTAPI是一个安全的数据工作流自动化平台，确保安全的手动和自动数据收集、传输、存储及处理。由慕尼黑团队开发。

使用方法

• 容器开放8080端口，需配合HTTP反向代理（如nginx）使用
• 需额外提供数据库（MySQL 8.0或Percona for MySQL）
• MySQL需挂载相应驱动（详见“MySQL驱动安装”）
• 存在对应secutransfer配置文件时，可通过以下命令启动服务（详见下文）

4.48.0及4.49.0版本

sh
docker run -v ~/.ftapi/:/var/lib/secutransfer/ \
    -v ./mysql-connector-java.jar:/usr/local/mysql/mysql-connector-j.jar \
    -v ./secutransfer-config.yaml:/config/secutransfer.yaml \
    -e SPRING_CONFIG_ADDITIONAL_LOCATION:"/config/" \
    -p 8080:8080 -- ftapi/secutransfer:latest

4.47.X及以下版本

sh
docker run -v ~/.ftapi/:/home/tomcat/.ftapi/ -v ./mysql-connector-java.jar:/usr/local/tomcat/lib/mysql-connector-java.jar -p 8080:8080 --env-file ~/ftapi.env docker.xuanyuan.run/ftapi/secutransfer:4.47.2

4.48.0及4.49.0版本的运行环境变更

4.48.0版本引入运行环境变更，需将原挂载在/home/tomcat/.ftapi/的FTAPI-HOME卷调整为挂载至/var/lib/secutransfer/。

MySQL驱动安装

MySQL驱动为Oracle提供的JAR文件，可通过以下两种方式安装：

1. 下载JAR包挂载
   从https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-j-9.3.0.tar.gz%E4%B8%8B%E8%BD%BD%E5%8E%8B%E7%BC%A9%E5%8C%85%EF%BC%8C%E8%A7%A3%E5%8E%8B%E5%90%8E%E9%80%9A%E8%BF%87%60-v%60%E5%8F%82%E6%95%B0%E5%B0%86JAR%E6%96%87%E4%BB%B6%E6%8C%82%E8%BD%BD%E5%88%B0%E5%AE%B9%E5%99%A8%E4%B8%AD%E3%80%82

2. 通过Dockerfile构建新镜像
   使用以下Dockerfile构建包含驱动的新镜像：

dockerfile
ARG TAG=4.49.0

FROM docker.xuanyuan.run/ubuntu:latest as downloader

WORKDIR /tmp

ARG VERSION=9.2.0
RUN apt update && \
    apt install -y wget && \
    wget https://dev.mysql.com/get/Downloads/Connector-J/mysql-connector-java-${VERSION}.tar.gz && \
    tar -zxf mysql-connector-java-${VERSION}.tar.gz

FROM docker.xuanyuan.run/ftapi/secutransfer:${TAG} as secutransfer

ARG VERSION=9.2.0
COPY --from=downloader /tmp/mysql-connector-java-${VERSION}/mysql-connector-java-${VERSION}.jar /usr/local/mysql/mysql-connector-j.jar

构建命令：
docker build -t ftapi/secutransfer-mysql:latest -f ./Dockerfile .

配置（4.48.0及以上版本）

secutransfer.yaml配置文件示例

yaml
# 服务器启动的基础Secutransfer配置

# SSL
ftapi:
  # 数据库
  jdbc:
    url: "jdbc:mysql://<$host>:<$port>/<$DB-secutransfer-schema-name>?useUnicode=yes&characterEncoding=UTF-8&useJDBCCompliantTimezoneShift=true&useLegacyDatetimeCode=false&serverTimezone=UTC&driver=com.mysql.cj.jdbc.Driver"
    driver: "net.bull.javamelody.JdbcDriver"
    username: "<$mysqlUser>"
    password: "<$mysqlPassword>"
  hibernate:
    dialect: "com.ftapi.server.dao.hibernate.FTAPIMySQL8Dialect"

  # 初始服务器设置
  #initial:
  #  server:
  #    setup:
  #      baseUrl: "https://host:port"
  #      root:
  #        admin:
  #          email: "root_admin@example.com"
  #      customer:
  #        admin:
  #          email: "customer_admin@example.com"
  #      license: "license-text"
  #      smtp:
  #        host: "localhost"
  #        port: "1025"
  #        username: ""
  #        password: ""
  #        useSSL: "false"
  #        useTLS: "false"

发布说明

查看官网详细发布说明

Dockerfile（版本：4.48.0）

dockerfile
FROM docker.xuanyuan.run/eclipse-temurin:17-jre-alpine

RUN apk update && \
    apk add --no-cache bash dumb-init && \
    addgroup -S secutransfer -g 1000 && \
    adduser -S secutransfer -G secutransfer -u 1000 --home /var/lib/secutransfer && \
    mkdir -p /var/lib/secutransfer/config && \
    chown -R secutransfer:secutransfer /var/lib/secutransfer

COPY maven/entrypoint.sh /entrypoint.sh
RUN chmod a+x /entrypoint.sh

WORKDIR /var/lib/secutransfer

COPY maven/war/META-INF /opt/secutransfer/META-INF/
COPY maven/war/org /opt/secutransfer/org/
COPY maven/war/WEB-INF /opt/secutransfer/WEB-INF/
COPY maven/war/webui /opt/secutransfer/webui/

USER secutransfer
WORKDIR /var/lib/secutransfer

ENTRYPOINT ["dumb-init", "/entrypoint.sh"]

尚未获取许可证？立即试用FTAPI！