Merge pull request Stack-Cairn#240 from Stack-Cairn/fix/docker-arm64-image

fix(docker): 修复 arm64 镜像内置 x86-64 二进制导致 ARM 服务器无法运行

Author: su-fen

.github/workflows/gateway-docker.yml

@@ -61,3 +61,25 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
           provenance: false
+
+      # Guard against mislabeled variants: v0.1.0 through v1.1.8 advertised
+      # arm64 while shipping an x86-64 binary (TARGETARCH defaults in the
+      # Dockerfile shadowed the values buildx injects).
+      - name: Verify per-arch binaries
+        run: |
+          set -euo pipefail
+          image="$(echo "$IMAGE_NAME" | tr '[:upper:]' '[:lower:]')@${{ steps.push.outputs.digest }}"
+          for arch in amd64 arm64; do
+            case "$arch" in
+              amd64) want="x86-64" ;;
+              arm64) want="aarch64" ;;
+            esac
+            docker pull --platform "linux/$arch" "$image" >/dev/null
+            docker rm -f "verify-$arch" >/dev/null 2>&1 || true
+            docker create --platform "linux/$arch" --name "verify-$arch" "$image" >/dev/null
+            docker cp "verify-$arch:/usr/local/bin/liveagent-gateway" "/tmp/gateway-$arch"
+            docker rm -f "verify-$arch" >/dev/null
+            info="$(file -b "/tmp/gateway-$arch")"
+            echo "linux/$arch: $info"
+            echo "$info" | grep -q "$want" || { echo "::error::linux/$arch image contains a non-$arch gateway binary"; exit 1; }
+          done

Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1.7
 
-FROM node:22.17.1-bookworm-slim AS webui
+FROM --platform=$BUILDPLATFORM node:22.17.1-bookworm-slim AS webui
 
 WORKDIR /src/crates/agent-gateway/web
 RUN npm install -g pnpm@10.32.1
@@ -11,10 +11,11 @@ RUN pnpm install --frozen-lockfile
 COPY crates/agent-gateway/web ./
 RUN pnpm build
 
-FROM golang:1.25-bookworm AS gateway-builder
+FROM --platform=$BUILDPLATFORM golang:1.25-bookworm AS gateway-builder
 
-ARG TARGETOS=linux
-ARG TARGETARCH=amd64
+# Keep these ARGs bare: a default value shadows the per-platform values buildx injects.
+ARG TARGETOS
+ARG TARGETARCH
 
 WORKDIR /src/crates/agent-gateway