Merge pull request #1316 from zhuanyongxigua/codex/mcp-readonly-multi-instance

feat(mcp): add read-only multi-instance server

Author: jlongWang

mcp_server/.dockerignore

@@ -0,0 +1,7 @@
+.git
+.gitignore
+secrets/
+state/
+*.log
+mcp-server
+coverage.out

mcp_server/.gitignore

@@ -0,0 +1,5 @@
+/secrets/
+/state/
+/mcp-server
+*.log
+coverage.out

mcp_server/Dockerfile

@@ -1,28 +1,29 @@
-FROM golang:1.24-alpine AS builder
+FROM golang:1.25.14-alpine3.23 AS builder
 
-WORKDIR /app
+ARG GOPROXY
+
+WORKDIR /src
 
 RUN apk add --no-cache git
 
 COPY go.mod go.sum ./
-
 RUN go mod download
 
 COPY . .
+RUN CGO_ENABLED=0 go build -trimpath -ldflags="-s -w" -o /out/mcp-server .
 
-RUN CGO_ENABLED=0 go build -o mcp-server .
-
-FROM alpine:latest
-
-WORKDIR /app
+FROM alpine:3.22
 
-RUN apk add --no-cache ca-certificates tzdata
+RUN apk add --no-cache ca-certificates tzdata \
+    && install -d -m 700 /var/lib/safeline-mcp \
+    && install -d -m 755 /etc/safeline-mcp
 
-COPY --from=builder /app/mcp-server .
-COPY --from=builder /app/config.yaml .
+COPY --from=builder /out/mcp-server /app/mcp-server
+COPY config.yaml /etc/safeline-mcp/config.yaml
 
 ENV TZ=Asia/Shanghai
 
 EXPOSE 5678
 
-CMD ["./mcp-server"] 
+ENTRYPOINT ["/app/mcp-server"]
+CMD ["--config", "/etc/safeline-mcp/config.yaml"]