deer-flow/docker
zhernrong92 e97d93503d
fix: make local-dev (make dev) work on non-root / NFS hosts (#3590)
* fix(scripts): avoid lsof hang during make dev cleanup on NFS

`_is_deerflow_pid` and `_report_reclaimed_ports` call `lsof -p <pid>` to
enumerate a process's open files. On hosts whose working tree or home is
on a network filesystem (NFS/autofs), `lsof -p` blocks indefinitely on the
kernel stat calls, so `make dev` / `make stop` hang forever at
"Stopping all services...".

Add `-b` (avoid kernel blocking functions) and `-w` (suppress the
resulting warnings) to both calls. The network-only `lsof -nP -iTCP`
probes are unaffected and already returned quickly.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(nginx): set global error_log so local-dev nginx starts as non-root

nginx.local.conf only declared `error_log` inside the `http {}` block.
nginx opens its compiled-in default error log (on Debian/Ubuntu builds,
the absolute /var/log/nginx/error.log) at startup, before it reaches the
http-block directive. When `make dev` launches nginx as a non-root user
that path is not writable, so startup fails with:

    [emerg] open() "/var/log/nginx/error.log" failed (13: Permission denied)

Declare a global (main-context) `error_log logs/nginx-error.log warn;`.
Combined with the existing `-p $REPO_ROOT`, logging resolves to the
repo-local logs/ directory and nginx starts without elevated privileges.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-19 23:20:55 +08:00
..
nginx fix: make local-dev (make dev) work on non-root / NFS hosts (#3590) 2026-06-19 23:20:55 +08:00
provisioner docs: document custom AIO sandbox images (#3548) 2026-06-13 22:50:51 +08:00
dev-entrypoint.sh fix(dev): create backend/sandbox before uvicorn reload-exclude (#3459) (#3460) 2026-06-09 15:29:40 +08:00
docker-compose-dev.yaml fix(doc):update the document for the docker configuration 2026-06-14 11:35:01 +08:00
docker-compose.cli-auth.yaml fix(security): do not bind-mount host CLI auth dirs by default (#3521) 2026-06-14 10:50:05 +08:00
docker-compose.dood.yaml fix(doc):update the document for the docker configuration 2026-06-14 11:35:01 +08:00
docker-compose.yaml fix(doc):update the document for the docker configuration 2026-06-14 11:35:01 +08:00