{% link text url [external] [title] %}

/hexo/malideBlog $ npm install https://github.com/CodeFalling/hexo-asset-image --save

added 21 packages, and audited 306 packages in 10s

43 packages are looking for funding
  run `npm fund` for details

12 vulnerabilities (2 low, 1 moderate, 5 high, 4 critical)

To address all issues possible (including breaking changes), run:
  npm audit fix --force

Some issues need review, and may require choosing
a different dependency.

Run `npm audit` for details.
/hexo/malideBlog $ hexo clean

# ============================================
# Hexo 博客容器镜像
# 基于 Alpine Linux 构建的轻量级 Hexo 环境
# ============================================

# 使用 Alpine Linux 作为基础镜像（体积小，安全性高）
FROM alpine:latest

# 设置构建时的代理环境变量（用于加速包下载）
ENV http_prosy=http://192.168.88.2:7890
ENV https_proxy=http://192.168.88.2:7890

# 安装运行 Hexo 所需的依赖包
# - git: 用于版本控制和主题/插件安装
# - nodejs/npm: Hexo 运行环境
# - openssh: SSH 连接支持
# - su-exec: 轻量级用户切换工具（比 su 和 sudo 更适合容器）
RUN apk add --update --no-cache git nodejs npm openssh su-exec && \
    # 全局安装 hexo-cli 命令行工具
    npm install -g --loglevel=error hexo-cli && \
    # 清理 NPM 缓存和 APK 缓存以减小镜像体积
    npm cache clean --force && \
    rm -rf /var/cache/apk/*

# 创建非特权用户 hexo (UID:1000, GID:1000)
# 使用非 root 用户运行应用是容器安全最佳实践
RUN addgroup -S hexo -g 1000 && \
    adduser -S hexo -g 'hexo' -u 1000 -G hexo && \
    # 创建 Hexo 博客目录结构
    mkdir -p /hexo/malideBlog && \
    # 设置目录所有权（注意：volume 挂载会覆盖此权限）
    chown -R hexo:hexo /hexo

# 设置容器工作目录为博客根目录
WORKDIR /hexo/malideBlog

# 声明容器对外暴露的端口（Hexo 默认服务端口）
EXPOSE 4000

# 创建启动脚本来配置 Git 用户信息
RUN printf '#!/bin/sh\n\
set -e\n\
\n\
# 配置 Git 用户信息（如果提供了环境变量）\n\
if [ -n "$GIT_USER_EMAIL" ]; then\n\
    echo "配置 Git 邮箱: $GIT_USER_EMAIL"\n\
    git config --global user.email "$GIT_USER_EMAIL"\n\
fi\n\
\n\
if [ -n "$GIT_USER_NAME" ]; then\n\
    echo "配置 Git 用户名: $GIT_USER_NAME"\n\
    git config --global user.name "$GIT_USER_NAME"\n\
fi\n\
\n\
echo "环境准备完成，当前用户: $(whoami)"\n\
\n\
# 执行传入的命令\n\
exec "$@"\n' > /entrypoint.sh && \
    chmod +x /entrypoint.sh

# 设置默认用户为 hexo
# 容器内所有操作都以 hexo 用户执行
USER hexo

# 容器启动入口点
ENTRYPOINT ["/entrypoint.sh"]

# 默认命令：启动交互式 shell
CMD ["/bin/sh"]

## --network host。让 docker build 时，使用宿主机网络， 这样 Dockerfile 中配置的代理才能生效。
docker build -t mali/hexo:1.0 --no-cache --rm --network host .

mkdir -p ./blog ./ssh
chown -R 1000:1000 ./blog ./ssh

# ============================================
# Hexo 博客服务 Docker Compose 配置
# ============================================

services:
  hexo:
    # 容器名称
    container_name: hexo
    
    # 使用的镜像
    image: mali/hexo:1.0
    
    # 容器重启策略：除非手动停止，否则总是重启
    restart: unless-stopped
    
    # 环境变量配置
    environment:
      # 设置时区为上海（东八区）
      - TZ=Asia/Shanghai
      # 代理配置（通过 clash 容器代理网络请求）
      - http_proxy=http://clash:7890
      - https_proxy=http://clash:7890
      # 不代理本地回环地址
      - no_proxy=localhost,127.0.0.1,::1
      # Git 用户配置（用于提交代码时的身份信息）
      - GIT_USER_EMAIL=mali@codermali.com
      - GIT_USER_NAME=codermali
    
    # 数据卷挂载
    # 将宿主机 ./blog 目录挂载到容器内的 Hexo 博客目录
    # 注意：需要在宿主机上提前创建目录并设置权限：
    #   mkdir -p ./blog ./ssh
    #   chown -R 1000:1000 ./blog ./ssh
    volumes:
      - ./blog:/hexo/malideBlog
      - ./ssh:/home/hexo/.ssh
    
    # 端口映射：宿主机 4000 端口映射到容器 4000 端口
    ports:
      - 4000:4000
    
    # 连接到外部网络（与其他服务如 clash 通信）
    networks:
      - services_network
    
    # 保持标准输入打开，允许交互式操作
    stdin_open: true
    
    # 分配伪终端，支持终端交互
    tty: true

# 网络配置
networks:
  # 使用外部已存在的网络（需要提前创建）
  services_network:
    external: true

## 邮箱必须和Github的注册邮箱一致
/home/hexo/.hexo # git config --global user.email "mali@codermali.com"
## 用户名必须和Github的用户名一致
/home/hexo/.hexo # git config --global user.name "codermali"
/home/hexo/.hexo # 

## 验证
/home/hexo/.hexo # git config --list
user.email=mali@codermali.comm
user.name=codermali

/home/hexo/.hexo # ssh-keygen -t rsa -C mali@codermali.com
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Created directory '/root/.ssh'.
Enter passphrase for "/root/.ssh/id_rsa" (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa
Your public key has been saved in /root/.ssh/id_rsa.pub
The key fingerprint is:
SHA256:1ZYDWuIiNKYS/s57b4W6ALUQG8N68oJVQpuHwNI2bw0 mali@codermali.com
The key's randomart image is:
+---[RSA 3072]----+
|=*. +   . o      |
|o=XBE. . + o .   |
|+==*oo. o . =    |
|o.*.+... . . .   |
|.* +    S        |
|o =    . .       |
| . +  . .        |
|    oo .         |
|   ...+.         |
+----[SHA256]-----+
/home/hexo/.hexo #

## 将公钥（id_rsa.pub）内容添加到Github
路径是 github -> Setting -> SSH and GPG keys -> New SSH Key 。

## 验证连接成功
/home/hexo/.hexo # ssh git@github.com
The authenticity of host 'github.com (20.205.243.166)' can't be established.
ED25519 key fingerprint is SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added 'github.com' (ED25519) to the list of known hosts.
PTY allocation request failed on channel 0
Hi codermali! You've successfully authenticated, but GitHub does not provide shell access.
Connection to github.com closed.
/home/hexo/.hexo #

$ hexo deploy