利用Docker快速构建基于devpi的企业级私有PyPI Server

FROM suadminwen/python3-ubuntu:latest

WORKDIR /root/

RUN pip install supervisor
RUN mkdir /devpi
RUN pip install devpi-server devpi-web devpi-lockdown \
  && devpi-init \
  && devpi-gen-config --host 0.0.0.0 --port 3141

RUN apt update \
  && apt install nginx -y

COPY ./nginx-devpi.conf /etc/nginx/sites-enabled/default
COPY ./run.sh /root/

EXPOSE 31415
EXPOSE 80
 
ENTRYPOINT ["bash", "run.sh"]

server {
    server_name 0.0.0.0;
    listen 80;
    gzip             on;
    gzip_min_length  2000;
    gzip_proxied     any;
    gzip_types       application/json;

    proxy_read_timeout 60s;
    client_max_body_size 64M;

    # set to where your devpi-server state is on the filesystem
    root /root/.devpi/server;

    # this redirects to the login view when not logged in
    recursive_error_pages on;
    error_page 401 = @error401;
    location @error401 {
        return 302 /+login;
    }

    # lock down everything by default
    auth_request /+authcheck;

    location = /+login {
        auth_request off;
        proxy_set_header X-outside-url $scheme://$http_host;
        proxy_pass http://localhost:3141;
    }

    location ~ /\+api$ {
        auth_request off;
        proxy_set_header X-outside-url $scheme://$http_host;
        proxy_pass http://localhost:3141;
    }

    # try serving static files directly
    location ~ /\+f/ {
        auth_request off;
        # workaround to pass non-GET/HEAD requests through to the named location below
        error_page 418 = @proxy_to_app;
        if ($request_method !~ (GET)|(HEAD)) {
            return 418;
        }

        expires max;
        try_files /+files$uri @proxy_to_app;
    }
    # try serving docs directly
    location ~ /\+doc/ {
        auth_request off;
    # if the --documentation-path option of devpi-web is used,
    # then the root must be set accordingly here
    root /root/.devpi/server;
    try_files $uri @proxy_to_app;
            }
  location / {
    # workaround to pass all requests to / through to the named location below
    error_page 418 = @proxy_to_app;
    return 418;
  }
  location @proxy_to_app {
    proxy_pass http://localhost:3141;
    proxy_set_header X-outside-url $scheme://$http_host;
    proxy_set_header X-Real-IP $remote_addr;
  }

  location = /+authcheck {
    internal;
    proxy_pass_request_body off;
    proxy_set_header Content-Length "";
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-outside-url $scheme://$http_host;
    proxy_pass http://localhost:3141;
  }
}

echo -e 'start supervisord'
/usr/local/bin/supervisord -c /root/gen-config/supervisord.conf

echo -e 'start nginx'
nginx -g 'daemon off;'

services:
  devpiserver:
    container_name: devpiserver
    build:
      context: .
    ports:
      - 80:80
      - 31415:80
    volumes:
      - ~/.devpi:/root/.devpi

pip install devpi-server
devpi init

docker-compose up -d

pip install -U devpi-client

devpi use http://devpi.xxxxx.com/

# 使用root账号登录
devpi login root --password=
# 修改root用户密码为qwe
devpi user -m root password=qwe 
# 创建新用户dev并设定密码为qwe
devpi user -c dev password=qwe
# 新用户登录
devpi login dev --password=qwe
# 退出登录
devpi logoff

# 创建dev索引
devpi index -c dev bases=root/pypi
# 使用dev索引
devpi use root/dev

# 当仓库中不存在包时，从豆瓣下载包缓存到本地（默认是从官方源 https://pypi.python.org/simple/ 下载）
devpi index root/dev mirror_url = “https://pypi.doubanio.com/simple/"
# devpi push 命令是将包从一个索引推送到另外一个索引，例如将包example推送到root/dev
devpi push example==1.0 root/dev

devpi use http://pypi-xx.com/
devpi login root --password=qwe
devpi use root/dev
devpi upload --formats bdist_wheel
devpi upload --with-docs
devpi upload

devpi remove example
devpi remove example>=1.0.1

pip install -i "http://[host]/root/dev/+simple/" [package] --trusted-host [host]

pip install -i "http://[user]:[password]@[host]/root/dev/+simple/" [package] --trusted-host [host]

[global]
timeout = 60
index-url = http://pypi-xx.com/root/dev/+simple/
[install]
trusted-host = pypi-xx.com

[global]
timeout = 60
index-url = http://[user]:[password]@[host]/root/dev/+simple/
[install]
trusted-host = pypi-xx.com

devpi upload --from-dir '+files'