ci: Add Dockerfile for multi-runner task runners image (#18975)

2025-12-16 17:46:45 +00:00 · 2025-09-02 15:00:55 +03:00
parent 10ac58ac5a
commit 6d405a6d66
6 changed files with 291 additions and 25 deletions
--- a/docker/images/runners/Dockerfile
+++ b/docker/images/runners/Dockerfile
@@ -0,0 +1,121 @@
+ARG PYTHON_IMAGE=python:3.13-slim
+
+# ==============================================================================
+# STAGE 1: JavaScript runner (@n8n/task-runner) artifact from CI
+# ==============================================================================
+FROM alpine:3.22.1 AS app-artifact-processor
+COPY ./dist/task-runner-javascript /app/task-runner-javascript
+
+# ==============================================================================
+# STAGE 2: Python runner build (@n8n/task-runner-python) with uv
+# Produces a relocatable venv tied to PYTHON_IMAGE
+# ==============================================================================
+FROM ${PYTHON_IMAGE} AS python-runner-builder
+ARG TARGETPLATFORM
+ARG UV_VERSION=0.8.14
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      curl ca-certificates build-essential pkg-config git \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN set -e; \
+  case "$TARGETPLATFORM" in \
+    "linux/amd64") UV_ARCH="x86_64-unknown-linux-gnu" ;; \
+    "linux/arm64") UV_ARCH="aarch64-unknown-linux-gnu" ;; \
+    *) echo "Unsupported platform: $TARGETPLATFORM" >&2; exit 1 ;; \
+  esac; \
+  mkdir -p /tmp/uv && cd /tmp/uv; \
+  curl -fsSLO "https://github.com/astral-sh/uv/releases/download/${UV_VERSION}/uv-${UV_ARCH}.tar.gz"; \
+  curl -fsSLO "https://github.com/astral-sh/uv/releases/download/${UV_VERSION}/uv-${UV_ARCH}.tar.gz.sha256"; \
+  sha256sum -c "uv-${UV_ARCH}.tar.gz.sha256"; \
+	tar -xzf "uv-${UV_ARCH}.tar.gz"; \
+  install -m 0755 "uv-${UV_ARCH}/uv" /usr/local/bin/uv; \
+  cd / && rm -rf /tmp/uv
+
+WORKDIR /app/task-runner-python
+
+COPY packages/@n8n/task-runner-python/pyproject.toml \
+     packages/@n8n/task-runner-python/uv.lock** \
+     packages/@n8n/task-runner-python/.python-version** \
+     ./
+
+RUN uv venv
+RUN uv sync \
+			--frozen \
+			--no-editable \
+			--no-install-project \
+			--all-extras
+
+COPY packages/@n8n/task-runner-python/ ./
+RUN uv sync \
+      --frozen \
+      --no-editable
+
+# ==============================================================================
+# STAGE 3: Task Runner Launcher download
+# ==============================================================================
+FROM alpine:3.22.1 AS launcher-downloader
+ARG TARGETPLATFORM
+ARG LAUNCHER_VERSION=1.3.0
+
+RUN set -e; \
+    case "$TARGETPLATFORM" in \
+        "linux/amd64") ARCH_NAME="amd64" ;; \
+        "linux/arm64") ARCH_NAME="arm64" ;; \
+        *) echo "Unsupported platform: $TARGETPLATFORM" && exit 1 ;; \
+    esac; \
+    mkdir /launcher-temp && cd /launcher-temp; \
+    wget -q "https://github.com/n8n-io/task-runner-launcher/releases/download/${LAUNCHER_VERSION}/task-runner-launcher-${LAUNCHER_VERSION}-linux-${ARCH_NAME}.tar.gz"; \
+    wget -q "https://github.com/n8n-io/task-runner-launcher/releases/download/${LAUNCHER_VERSION}/task-runner-launcher-${LAUNCHER_VERSION}-linux-${ARCH_NAME}.tar.gz.sha256"; \
+    echo "$(cat task-runner-launcher-${LAUNCHER_VERSION}-linux-${ARCH_NAME}.tar.gz.sha256) task-runner-launcher-${LAUNCHER_VERSION}-linux-${ARCH_NAME}.tar.gz" > checksum.sha256; \
+    sha256sum -c checksum.sha256; \
+    mkdir -p /launcher-bin; \
+    tar xzf task-runner-launcher-${LAUNCHER_VERSION}-linux-${ARCH_NAME}.tar.gz -C /launcher-bin; \
+    cd / && rm -rf /launcher-temp
+
+# ==============================================================================
+# STAGE 4: Runtime
+# ==============================================================================
+FROM ${PYTHON_IMAGE} AS runtime
+ARG NODE_VERSION=22
+ARG N8N_VERSION=snapshot
+ARG N8N_RELEASE_TYPE=dev
+
+ENV NODE_ENV=production
+ENV N8N_RELEASE_TYPE=${N8N_RELEASE_TYPE}
+ENV SHELL=/bin/sh
+
+RUN apt-get update \
+	&& apt-get install -y --no-install-recommends curl gnupg ca-certificates tini \
+	&& mkdir -p /etc/apt/keyrings \
+	&& curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
+		| gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg \
+	&& echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_${NODE_VERSION}.x nodistro main" \
+		> /etc/apt/sources.list.d/nodesource.list \
+	&& apt-get update \
+	&& apt-get install -y --no-install-recommends nodejs \
+	&& apt-get remove curl -y \
+	&& apt-get clean \
+	&& rm -rf /var/lib/apt/lists/* /var/cache/apt/archives/*.deb
+
+RUN useradd -m -u 1000 runner
+WORKDIR /home/runner
+
+COPY --from=app-artifact-processor /app/task-runner-javascript /opt/runners/task-runner-javascript
+COPY --from=python-runner-builder /app/task-runner-python /opt/runners/task-runner-python
+COPY --from=launcher-downloader /launcher-bin/* /usr/local/bin/
+
+COPY docker/images/runners/n8n-task-runners.json /etc/n8n-task-runners.json
+
+RUN chown -R runner:runner /opt/runners /home/runner
+USER runner
+
+EXPOSE 5680/tcp
+ENTRYPOINT ["tini", "--", "/usr/local/bin/task-runner-launcher"]
+CMD ["javascript", "python"]
+
+LABEL org.opencontainers.image.title="n8n task runners" \
+      org.opencontainers.image.description="Sidecar image providing n8n task runners for JavaScript and Python code execution" \
+      org.opencontainers.image.source="https://github.com/n8n-io/n8n" \
+      org.opencontainers.image.url="https://n8n.io" \
+      org.opencontainers.image.version="${N8N_VERSION}"