From ba067c53e23665477eb71a86bb27cdb649b4fb2f Mon Sep 17 00:00:00 2001
From: liqiang-fit2cloud <liqiang@fit2cloud.com>
Date: Fri, 8 Aug 2025 17:32:46 +0800
Subject: [PATCH] build: reduce image size.

---
 installer/Dockerfile      | 7 +++----
 installer/Dockerfile-base | 2 +-
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/installer/Dockerfile b/installer/Dockerfile
index 8af035c6d..e9f9f0787 100644
--- a/installer/Dockerfile
+++ b/installer/Dockerfile
@@ -16,7 +16,7 @@ RUN apt-get update && \
     apt-get clean all  && \
     rm -rf /var/lib/apt/lists/*
 
-COPY . /opt/maxkb-app
+COPY --chmod=700 . /opt/maxkb-app
 
 WORKDIR /opt/maxkb-app
 RUN rm -rf /opt/maxkb-app/ui && \
@@ -31,6 +31,7 @@ RUN rm -rf /opt/maxkb-app/ui && \
     export PIP_TARGET=/opt/maxkb-app/sandbox/python-packages && \
     pip install requests pymysql psycopg2-binary && \
     rm -rf /opt/maxkb-app/installer
+COPY --from=web-build --chmod=700 ui /opt/maxkb-app/ui
 
 FROM ghcr.io/1panel-dev/maxkb-base:python3.11-pg17.5
 ARG DOCKER_IMAGE_TAG=dev \
@@ -61,11 +62,9 @@ ENV MAXKB_VERSION="${DOCKER_IMAGE_TAG} (build at ${BUILD_AT}, commit: ${GITHUB_C
 
 WORKDIR /opt/maxkb-app
 COPY --from=stage-build /opt/maxkb-app /opt/maxkb-app
-COPY --from=web-build ui /opt/maxkb-app/ui
 COPY --from=stage-build /opt/py3 /opt/py3
 
-RUN chmod 755 /tmp && \
-    find /opt/maxkb-app -mindepth 1 -not -name 'sandbox' -exec chmod 700 {} +
+RUN chmod 755 /tmp
 
 EXPOSE 8080
 VOLUME /opt/maxkb
diff --git a/installer/Dockerfile-base b/installer/Dockerfile-base
index bf8377a65..3f3ae1438 100644
--- a/installer/Dockerfile-base
+++ b/installer/Dockerfile-base
@@ -2,7 +2,6 @@ FROM python:3.11-slim-bullseye AS python-stage
 FROM ghcr.io/1panel-dev/maxkb-vector-model:v2.0.2 AS vector-model
 FROM postgres:17.5-bullseye
 COPY --from=python-stage /usr/local /usr/local
-COPY --from=vector-model /opt/maxkb-app/model /opt/maxkb-app/model
 COPY installer/*.sh /usr/bin/
 COPY installer/init.sql /docker-entrypoint-initdb.d/
 
@@ -31,6 +30,7 @@ RUN ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
     chmod g+x /usr/local/bin/python* && \
     apt-get clean all && \
     rm -rf /var/lib/apt/lists/* /usr/share/doc/* /usr/share/man/* /usr/share/info/* /usr/share/locale/* /usr/share/lintian/* /usr/share/linda/* /var/cache/* /var/log/* /var/tmp/* /tmp/*
+COPY --from=vector-model --chmod=700 /opt/maxkb-app/model /opt/maxkb-app/model
 
 ENV PGDATA=/opt/maxkb/data/postgresql/pgdata \
     POSTGRES_USER=root \