feat: agent sandbox pv preview - go daemon

Author: xiaoj655

sandbox/daemon/Dockerfile

@@ -0,0 +1,36 @@
+# 生产用多阶段镜像: 构建 daemon 二进制, 以常驻(resident)模式运行。
+# 沙箱内 daemon 与常驻 daemon 共用同一二进制, 常驻模式由 CMD 的 `resident` 参数切入。
+
+FROM golang:1.25.4-alpine3.22 AS builder
+
+WORKDIR /workspace
+
+# 构建依赖: git(make build 通过 git describe 注入版本)、make、bash
+RUN apk add --no-cache git make bash
+
+# 先拉依赖, 利用层缓存
+COPY go.mod go.mod
+COPY go.sum go.sum
+RUN go mod download
+
+COPY . .
+
+# make build 会同时生成 swagger 文档并产出 build/daemon
+RUN make build
+
+FROM alpine:3.22
+
+WORKDIR /app
+
+# 时区与根证书(archive 需 HTTPS PUT 到 bkrepo 临时 URL);
+# mailcap 提供 /etc/mime.types, 让标准库 mime.TypeByExtension 能识别更多扩展名。
+RUN apk add --no-cache ca-certificates tzdata mailcap
+
+COPY --from=builder /workspace/build/daemon /app/daemon
+COPY --from=builder /workspace/build/daemon /usr/local/bin/daemon
+
+# 常驻 daemon 默认监听 8000
+EXPOSE 8000
+
+ENTRYPOINT ["/app/daemon"]
+CMD ["resident"]

sandbox/daemon/cmd/main.go

@@ -188,6 +188,13 @@ func main() {
 		return
 	}
 
+	// resident 子命令: 以常驻模式启动(挂 CFS 根, 面向 apiserver 提供 PV 文件操作)。
+	// 与 version 同构, 靠 os.Args[1] 特判, 不影响现有沙箱 daemon 的 entrypoint 拉起逻辑。
+	if len(os.Args) > 1 && os.Args[1] == "resident" {
+		runResident()
+		return
+	}
+
 	errChan := make(chan error)
 
 	cfg, err := config.Load()
@@ -269,6 +276,41 @@ func main() {
 	slog.Info("Shutdown complete")
 }
 
+// runResident starts the daemon in resident mode.
+//
+// It shares the common bootstrap (config + logging + signal-driven graceful shutdown)
+// with the sandbox mode but does NOT manage an entrypoint child process: the resident
+// daemon is a standalone platform component that only serves PV file operations over HTTP.
+func runResident() {
+	cfg, err := config.Load()
+	if err != nil {
+		slog.Error("Failed to load config", "error", err)
+		panic(err)
+	}
+
+	var logWriter io.Writer
+	logFile, err := os.OpenFile(cfg.DaemonLogFilePath, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0o644)
+	if err != nil {
+		slog.Error("Failed to open log file", "path", cfg.DaemonLogFilePath, "error", err)
+	} else {
+		defer logFile.Close() // nolint
+		logWriter = logFile
+	}
+	initLogs(logWriter)
+
+	slog.Info("Starting resident daemon", "cfsRoot", cfg.CFSRoot)
+
+	ctx, stop := signal.NotifyContext(context.Background(), syscall.SIGINT, syscall.SIGTERM)
+	defer stop()
+
+	if err := server.StartResident(ctx); err != nil {
+		slog.Error("Resident server error", "error", err)
+		os.Exit(1)
+	}
+
+	slog.Info("Resident daemon shutdown complete")
+}
+
 func initLogs(logWriter io.Writer) {
 	logLevel := config.ParseLogLevel(config.G.LogLevel)
 	handler := config.NewMultiWriterHandler(logLevel, os.Stdout, logWriter)