purnell569
0941987234
Based on JMusicBot by jagrosh (https://github.com/jagrosh/MusicBot), via the maintained fork by arif-banai (https://github.com/arif-banai/MusicBot). See NOTICE for attribution. Licensed under Apache 2.0. YouTube-side changes had broken playback entirely. Fixes: - Apply the remote signature cipher independently of OAuth. Deciphering and authentication are unrelated, but the cipher was only configured when OAuth was enabled, so the default install fell back to the bundled extractor and failed with "Must find sig function from script: /s/player/<id>/...". Now always applied, and configurable via playback.youtube.remoteCipher.url. - Add the ANDROID client and order the client list by reliability. ANDROID is currently the only client YouTube reliably streams to anonymously. WEB moves last, as YouTube answers it with SABR-only responses carrying no playable format ("No supported audio streams available, available types:"). - Detect sign-in failures across the whole exception graph. The existing hint could never fire: it matched the aggregate AllClientsFailedException message rather than the per-client reasons, and compared against an ASCII apostrophe while YouTube sends U+2019. - Track youtube-source past 1.18.2, which predates the TV client User-Agent fix and the contentLength recovery fix. Measured on previously failing tracks: 5/5 playing, stable across repeat runs (was 1/5). No OAuth required. Adds 17 tests; 676 unit + 48 integration pass.
96 lines
3.7 KiB
Docker
96 lines
3.7 KiB
Docker
# syntax=docker/dockerfile:1.12
|
|
|
|
# Multi-stage build for JMusicBot
|
|
# Stage 1: Build the application
|
|
FROM maven:3.9.12-eclipse-temurin-25-alpine AS builder
|
|
|
|
ARG BUILD_TIMESTAMP
|
|
ENV BUILD_TIMESTAMP=$BUILD_TIMESTAMP
|
|
|
|
WORKDIR /build
|
|
|
|
# Copy pom.xml first for better layer caching
|
|
COPY --link pom.xml .
|
|
|
|
# Download dependencies with BuildKit cache mount for Maven repository
|
|
# This significantly speeds up builds by persisting dependencies between builds
|
|
RUN --mount=type=cache,target=/root/.m2/repository \
|
|
mvn dependency:go-offline -B -Pdocker
|
|
|
|
# Copy source code
|
|
COPY --link src ./src
|
|
|
|
# Build the application with BuildKit cache mount
|
|
RUN --mount=type=cache,target=/root/.m2/repository \
|
|
if [ -n "$BUILD_TIMESTAMP" ]; then \
|
|
mvn clean package -DskipTests -B -Pdocker -Dproject.build.outputTimestamp="$BUILD_TIMESTAMP"; \
|
|
else \
|
|
mvn clean package -DskipTests -B -Pdocker; \
|
|
fi
|
|
|
|
|
|
# Stage 2: Create custom minimal JRE using jlink
|
|
# Using noble (Ubuntu 24.04) for glibc 2.39 compatibility with native libraries
|
|
FROM eclipse-temurin:25-jdk-noble AS jre-builder
|
|
|
|
# Create a minimal JRE with only the modules JMusicBot needs
|
|
# Modules determined by: jdeps --print-module-deps --ignore-missing-deps <jar>
|
|
# Plus runtime-loaded modules that jdeps can't detect:
|
|
# java.base - Core Java classes
|
|
# java.compiler - Annotation processing (used by some libraries)
|
|
# java.desktop - GUI support (Swing/AWT, even for headless mode)
|
|
# java.logging - SLF4J/Logback logging
|
|
# java.naming - JNDI (required by Logback)
|
|
# java.net.http - HTTP client API
|
|
# java.scripting - ScriptEngine for EvalCmd (Rhino)
|
|
# java.security.jgss - Kerberos/GSS-API security
|
|
# java.sql - JDBC (used by some dependencies)
|
|
# jdk.crypto.ec - Elliptic curve crypto for TLS/SSL (Discord API) - runtime loaded
|
|
# jdk.management - JMX management extensions
|
|
# jdk.unsupported - Native library access (jdave, udpqueue)
|
|
RUN $JAVA_HOME/bin/jlink \
|
|
--add-modules java.base,java.compiler,java.desktop,java.logging,java.naming,java.net.http,java.scripting,java.security.jgss,java.sql,jdk.crypto.ec,jdk.management,jdk.unsupported \
|
|
--strip-debug \
|
|
--no-man-pages \
|
|
--no-header-files \
|
|
--compress=zip-6 \
|
|
--output /javaruntime
|
|
|
|
|
|
# Stage 3: Runtime image
|
|
# Using Bitnami minideb:trixie (Debian 13) for minimal size with glibc 2.41
|
|
# Required for jdave/udpqueue native libraries which need glibc >= 2.38
|
|
FROM bitnami/minideb:trixie
|
|
|
|
# OCI image labels for better traceability and management
|
|
LABEL org.opencontainers.image.title="JMusicBot" \
|
|
org.opencontainers.image.description="A cross-platform Discord music bot with a clean interface" \
|
|
org.opencontainers.image.url="https://jmusicbot.com" \
|
|
org.opencontainers.image.source="https://github.com/arif-banai/MusicBot" \
|
|
org.opencontainers.image.vendor="JMusicBot" \
|
|
org.opencontainers.image.licenses="Apache-2.0"
|
|
|
|
# Copy custom JRE from jre-builder stage
|
|
ENV JAVA_HOME=/opt/java/openjdk
|
|
ENV PATH="${JAVA_HOME}/bin:${PATH}"
|
|
COPY --from=jre-builder /javaruntime $JAVA_HOME
|
|
|
|
# Create non-root user and application directories in single layer
|
|
RUN groupadd --gid 10001 jmusicbot && \
|
|
useradd --uid 10001 --gid 10001 --shell /bin/false jmusicbot && \
|
|
mkdir -p /app /musicbot && \
|
|
chown -R jmusicbot:jmusicbot /app /musicbot
|
|
|
|
# Copy the built JAR from builder stage
|
|
COPY --from=builder --chown=jmusicbot:jmusicbot /build/target/JMusicBot-*-All.jar /app/app.jar
|
|
|
|
# Copy and set permissions for entrypoint script
|
|
COPY --chown=jmusicbot:jmusicbot --chmod=755 docker/entrypoint.sh /app/entrypoint.sh
|
|
|
|
WORKDIR /musicbot
|
|
|
|
# Switch to non-root user for security
|
|
USER jmusicbot
|
|
|
|
ENTRYPOINT ["/app/entrypoint.sh"]
|