增加ssh

增加deploy下细分的tcp、tls、ssh

deploy/server/Dockerfile

@@ -2,8 +2,25 @@ FROM rust:1.89-bookworm AS builder
 
 WORKDIR /build
 
+RUN set -eux; \
+    cat > /etc/apt/sources.list.d/debian.sources <<'EOF'
+Types: deb
+URIs: http://mirrors.tuna.tsinghua.edu.cn/debian
+Suites: bookworm bookworm-updates
+Components: main
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: http://mirrors.tuna.tsinghua.edu.cn/debian-security
+Suites: bookworm-security
+Components: main
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+EOF
+
 RUN apt-get update \
-    && apt-get install -y --no-install-recommends \
+    && apt-get install -y --fix-missing --no-install-recommends \
+        -o Acquire::Retries=10 \
+        -o Acquire::http::Timeout=60 \
         build-essential \
         cmake \
         pkg-config \
@@ -19,8 +36,27 @@ RUN cargo build --release --bin rpki
 
 FROM debian:bookworm-slim AS runtime
 
+RUN set -eux; \
+    cat > /etc/apt/sources.list.d/debian.sources <<'EOF'
+Types: deb
+URIs: http://mirrors.tuna.tsinghua.edu.cn/debian
+Suites: bookworm bookworm-updates
+Components: main
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb
+URIs: http://mirrors.tuna.tsinghua.edu.cn/debian-security
+Suites: bookworm-security
+Components: main
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+EOF
+
 RUN apt-get update \
-    && apt-get install -y --no-install-recommends ca-certificates supervisor \
+    && apt-get install -y --fix-missing --no-install-recommends \
+        -o Acquire::Retries=10 \
+        -o Acquire::http::Timeout=60 \
+        ca-certificates \
+        supervisor \
     && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /app
@@ -28,7 +64,7 @@ WORKDIR /app
 COPY --from=builder /build/target/release/rpki /usr/local/bin/rpki
 COPY deploy/server/supervisord.conf /etc/supervisor/conf.d/rpki-rtr.conf
 
-RUN mkdir -p /app/data /app/rtr-db /app/certs /app/slurm /var/log/supervisor
+RUN mkdir -p /app/data /app/rtr-db /app/certs /app/slurm /app/logs /var/log/supervisor
 
 ENV RPKI_RTR_ENABLE_TLS=false \
     RPKI_RTR_TCP_ADDR=0.0.0.0:323 \
@@ -41,4 +77,4 @@ ENV RPKI_RTR_ENABLE_TLS=false \
 
 EXPOSE 323 324
 
-CMD ["supervisord", "-n", "-c", "/etc/supervisor/conf.d/rpki-rtr.conf"]
+CMD ["supervisord", "-n", "-c", "/etc/supervisor/conf.d/rpki-rtr.conf"]