diff --git a/.github/workflows/sep-tests.yml b/.github/workflows/sep-tests.yml index 30fb414164..8301c05245 100644 --- a/.github/workflows/sep-tests.yml +++ b/.github/workflows/sep-tests.yml @@ -624,7 +624,7 @@ jobs: echo "SVR_WEB_HTTPS_PORT=${SVR_WEB_HTTPS_PORT}" echo "EXPOSE_CLICKHOUSE_TCP_PORT=${EXPOSE_CLICKHOUSE_TCP_PORT}" echo "CLICKHOUSE_HTTP_PORT=${CLICKHOUSE_HTTP_PORT}" - echo "COMPOSE_PROFILES=${DOC_ENGINE},cpu,ragflow-go,tei-cpu,deepdoc,metadata-mysql,clickhouse" + echo "COMPOSE_PROFILES=${DOC_ENGINE},cpu,ragflow-go,tei-cpu,deepdoc,metadata-mysql" echo "TEI_MODEL=BAAI/bge-small-en-v1.5" echo "RAGFLOW_IMAGE=${RAGFLOW_IMAGE}" echo "DOC_ENGINE=${DOC_ENGINE}" @@ -637,7 +637,7 @@ jobs: # RAGFLOW_DEV_MODE rides along for the same reason. { echo "" - echo "COMPOSE_PROFILES=${DOC_ENGINE},cpu,ragflow-go,tei-cpu,deepdoc,metadata-mysql,clickhouse" + echo "COMPOSE_PROFILES=${DOC_ENGINE},cpu,ragflow-go,tei-cpu,deepdoc,metadata-mysql" echo "TEI_MODEL=BAAI/bge-small-en-v1.5" # The image stamps its git-describe output into /ragflow/VERSION, # so this checkout reports v0.27.x while --migrate records the @@ -1151,7 +1151,7 @@ jobs: echo "SVR_WEB_HTTPS_PORT=${SVR_WEB_HTTPS_PORT}" echo "EXPOSE_CLICKHOUSE_TCP_PORT=${EXPOSE_CLICKHOUSE_TCP_PORT}" echo "CLICKHOUSE_HTTP_PORT=${CLICKHOUSE_HTTP_PORT}" - echo "COMPOSE_PROFILES=${DOC_ENGINE},cpu,ragflow-go,tei-cpu,deepdoc,metadata-mysql,clickhouse" + echo "COMPOSE_PROFILES=${DOC_ENGINE},cpu,ragflow-go,tei-cpu,deepdoc,metadata-mysql" echo "TEI_MODEL=BAAI/bge-small-en-v1.5" echo "RAGFLOW_IMAGE=${RAGFLOW_IMAGE}" echo "DOC_ENGINE=${DOC_ENGINE}" @@ -1164,7 +1164,7 @@ jobs: # RAGFLOW_DEV_MODE rides along for the same reason. { echo "" - echo "COMPOSE_PROFILES=${DOC_ENGINE},cpu,ragflow-go,tei-cpu,deepdoc,metadata-mysql,clickhouse" + echo "COMPOSE_PROFILES=${DOC_ENGINE},cpu,ragflow-go,tei-cpu,deepdoc,metadata-mysql" echo "TEI_MODEL=BAAI/bge-small-en-v1.5" # The image stamps its git-describe output into /ragflow/VERSION, # so this checkout reports v0.27.x while --migrate records the @@ -1633,9 +1633,9 @@ jobs: # `cpu` (the heavy ragflow-cpu server container) and `deepdoc` # because this job runs the Go tests on the runner host against # the dependency services directly — no server container needed. - # `ragflow-go` brings up kvrocks + nats; `tei-cpu` the embedding + # `tei-cpu` the embedding # service; `metadata-mysql` the mysql metadata store. - echo "COMPOSE_PROFILES=infinity,ragflow-go,tei-cpu,metadata-mysql,clickhouse" + echo "COMPOSE_PROFILES=infinity,tei-cpu,metadata-mysql" echo "TEI_MODEL=BAAI/bge-small-en-v1.5" echo "DOC_ENGINE=${DOC_ENGINE}" } >> .env @@ -1646,7 +1646,7 @@ jobs: # either yml-interpolation-only or already correct in .env. { echo "" - echo "COMPOSE_PROFILES=infinity,ragflow-go,tei-cpu,metadata-mysql,clickhouse" + echo "COMPOSE_PROFILES=infinity,tei-cpu,metadata-mysql" echo "TEI_MODEL=BAAI/bge-small-en-v1.5" } >> .env RAGFLOW_HTTP_PORT=${SVR_WEB_HTTP_PORT} diff --git a/docker/.env b/docker/.env index 64e1536f46..d57c47c996 100644 --- a/docker/.env +++ b/docker/.env @@ -50,7 +50,7 @@ DEVICE=${DEVICE:-cpu} # start the in-cluster MySQL service. For external GaussDB, set both # DB_TYPE=gaussdb and METADATA_DB_PROFILE=gaussdb so MySQL stays disabled. METADATA_DB_PROFILE=${METADATA_DB_PROFILE:-mysql} -COMPOSE_PROFILES=${DOC_ENGINE},${DEVICE},metadata-${METADATA_DB_PROFILE},ragflow-go,clickhouse +COMPOSE_PROFILES=${DOC_ENGINE},${DEVICE},metadata-${METADATA_DB_PROFILE} # The version of Elasticsearch. STACK_VERSION=${STACK_VERSION:-8.11.3} @@ -441,12 +441,14 @@ ENABLE_REGISTER=1 # SANDBOX_ENABLE_SECCOMP=false # SANDBOX_MAX_MEMORY=256m # b, k, m, g # SANDBOX_TIMEOUT=10s # s, m, 1m30s + # Shared secret required by sandbox-executor-manager's /run endpoint # (Authorization: Bearer or X-Sandbox-Token). Strongly recommended; the same # value is injected into the ragflow service. Leave unset for backwards # compatibility (the executor manager then logs a security warning). # Generate one with: openssl rand -hex 32 # SANDBOX_EXECUTOR_MANAGER_API_TOKEN= + # Docker network used for sandbox runner containers. "none" (default) means # sandboxed code has no external network access. Set to "bridge" only if your # sandboxed code genuinely needs outbound network (e.g. runtime pip/npm @@ -543,26 +545,9 @@ OAUTH_AUTO_REGISTER=true # model overrides if needed: # DEEPDOC_MODEL_DIR=/path/to/InfiniFlow/deepdoc -# ----------------------------------------------------------------------------- -# DeepDoc OSS Vision Service -# ----------------------------------------------------------------------------- -# URL for the deepdoc vision API (DLA, OCR, TSR) served by OSS ONNX models. -# The `deepdoc` service defined in docker-compose.yml provides this endpoint. -# When unset, the parser falls back to inline ONNX Runtime inference. - -# Comment existing COMPOSE_PROFILES and uncomment below if need deepdoc service. -# COMPOSE_PROFILES=${DOC_ENGINE},${DEVICE},deepdoc - -# DEEPDOC_URL=http://deepdoc:9390 - -# Docker image for the OSS deepdoc service. CPU-only; uses ONNX Runtime. -# DEEPDOC_IMAGE=deepdoc_oss:latest - - # ----------------------------------------------------------------------------- # Native Go MCP listener settings # ----------------------------------------------------------------------------- - # RAGFLOW_MCP_ENABLED=true # RAGFLOW_MCP_HOST=0.0.0.0 # RAGFLOW_MCP_PORT=9382 diff --git a/docker/README.md b/docker/README.md index 096dd117c5..7528856d6c 100644 --- a/docker/README.md +++ b/docker/README.md @@ -67,7 +67,7 @@ The [.env](./.env) file is the user-facing environment file for the Go deploymen - `DB_TYPE` The business metadata database type. Defaults to `mysql`. Set it to `oceanbase` when connecting to OceanBase through its MySQL-compatible protocol. - `COMPOSE_PROFILES` - The Docker Compose profiles to enable. By default it contains `${DOC_ENGINE},${DEVICE},metadata-${METADATA_DB_PROFILE},ragflow-go,clickhouse`. + The Docker Compose profiles to enable. By default it contains `${DOC_ENGINE},${DEVICE},metadata-${METADATA_DB_PROFILE}`. - `METADATA_DB_PROFILE` Defaults to `mysql`, preserving the in-cluster MySQL service. diff --git a/docker/docker-compose-base.yml b/docker/docker-compose-base.yml index ac241345d3..7b9bcb6816 100644 --- a/docker/docker-compose-base.yml +++ b/docker/docker-compose-base.yml @@ -37,6 +37,7 @@ services: - ragflow restart: unless-stopped + opensearch01: profiles: - opensearch @@ -73,6 +74,7 @@ services: - ragflow restart: unless-stopped + infinity: profiles: - infinity @@ -100,6 +102,7 @@ services: retries: 120 restart: unless-stopped + serenedb: profiles: - serenedb @@ -121,6 +124,7 @@ services: retries: 120 restart: unless-stopped + oceanbase: profiles: - oceanbase @@ -152,6 +156,7 @@ services: - ragflow restart: unless-stopped + seekdb: profiles: - seekdb @@ -176,6 +181,7 @@ services: - ragflow restart: unless-stopped + vastbase: profiles: - vastbase @@ -206,6 +212,7 @@ services: timeout: 10s retries: 120 + sandbox-executor-manager: profiles: - sandbox @@ -242,6 +249,7 @@ services: retries: 120 restart: unless-stopped + mysql: profiles: - mysql @@ -304,6 +312,7 @@ services: retries: 120 restart: unless-stopped + minio: image: pgsty/silo:RELEASE.2026-08-06T00-00-00Z command: ["server", "--console-address", ":9001", "/data"] @@ -325,6 +334,7 @@ services: timeout: 10s retries: 120 + kvrocks: # Apache Kvrocks: a RocksDB-backed, Redis-protocol-compatible store used # ONLY by the Go services (ragflow-cpu / ragflow-gpu), which override @@ -353,8 +363,6 @@ services: # regardless of the host mapping (KVROCKS_PORT stays 6379, set by the Go overlay). ports: - "${KVROCKS_PORT:-6379}:6379" - profiles: - - ragflow-go volumes: - kvrocks_data:/var/lib/kvrocks - ./kvrocks-entrypoint.sh:/etc/kvrocks/entrypoint.sh:ro @@ -369,6 +377,7 @@ services: timeout: 10s retries: 120 + jaeger: profiles: - jaeger @@ -384,9 +393,8 @@ services: - ragflow restart: unless-stopped + nats: - profiles: - - ragflow-go image: nats:2.14.2 ports: - ${EXPOSE_NATS_PORT:-4222}:4222 @@ -404,6 +412,7 @@ services: timeout: 10s retries: 30 + tei-cpu: profiles: - tei-cpu