import io import json import os import shlex import subprocess import re import threading import uuid import base64 import glob import time from typing import Optional, Dict, Any, List, Literal, Tuple from collections import defaultdict from datetime import datetime, timezone, timedelta import tenacity import requests import pandas as pd import jwt from fastapi import Request from huggingface_hub import HfApi, hf_hub_download from huggingface_hub.utils._errors import RepositoryNotFoundError from loguru import logger from cryptography.hazmat.primitives.ciphers.aead import AESGCM from huggingface_hub import SpaceStage from cachetools import cached, TTLCache from competitions.enums import SubmissionStatus, ErrorMessage from competitions.params import EvalParams from . import HF_URL USER_TOKEN = os.environ.get("USER_TOKEN") def token_information(token): if token.startswith("hf_oauth"): _api_url = HF_URL + "/oauth/userinfo" else: _api_url = HF_URL + "/api/whoami-v2" headers = {} cookies = {} if token.startswith("hf_"): headers["Authorization"] = f"Bearer {token}" else: cookies = {"token": token} try: response = requests.get( _api_url, headers=headers, cookies=cookies, timeout=3, ) except (requests.Timeout, ConnectionError) as err: logger.error(f"Failed to request whoami-v2 - {repr(err)}") raise Exception("Hugging Face Hub is unreachable, please try again later.") if response.status_code != 200: logger.error(f"Failed to request whoami-v2 - {response.status_code}") raise Exception("Invalid token.") resp = response.json() user_info = {} if token.startswith("hf_oauth"): user_info["id"] = resp["sub"] user_info["name"] = resp["preferred_username"] user_info["orgs"] = [resp["orgs"][k]["preferred_username"] for k in range(len(resp["orgs"]))] else: user_info["id"] = resp["id"] user_info["name"] = resp["name"] user_info["orgs"] = [resp["orgs"][k]["name"] for k in range(len(resp["orgs"]))] return user_info def user_authentication(request: Request): auth_header = request.headers.get("Authorization") bearer_token = None if auth_header and auth_header.startswith("Bearer "): bearer_token = auth_header.split(" ")[1] if bearer_token: try: _ = token_information(token=bearer_token) return bearer_token except Exception as e: logger.error(f"Failed to verify token: {e}") return None if USER_TOKEN is not None: try: _ = token_information(token=USER_TOKEN) return USER_TOKEN except Exception as e: logger.error(f"Failed to verify token: {e}") return None if "oauth_info" in request.session: try: _ = token_information(token=request.session["oauth_info"]["access_token"]) return request.session["oauth_info"]["access_token"] except Exception as e: request.session.pop("oauth_info", None) logger.error(f"Failed to verify token: {e}") return None return None def user_authentication_dep(token, return_raw=False): if token.startswith("hf_oauth"): _api_url = HF_URL + "/oauth/userinfo" else: _api_url = HF_URL + "/api/whoami-v2" headers = {} cookies = {} if token.startswith("hf_"): headers["Authorization"] = f"Bearer {token}" else: cookies = {"token": token} try: response = requests.get( _api_url, headers=headers, cookies=cookies, timeout=3, ) except (requests.Timeout, ConnectionError) as err: logger.error(f"Failed to request whoami-v2 - {repr(err)}") raise Exception("Hugging Face Hub is unreachable, please try again later.") resp = response.json() if return_raw: return resp user_info = {} if "error" in resp: return resp if token.startswith("hf_oauth"): user_info["id"] = resp["sub"] user_info["name"] = resp["preferred_username"] user_info["orgs"] = [resp["orgs"][k]["preferred_username"] for k in range(len(resp["orgs"]))] else: user_info["id"] = resp["id"] user_info["name"] = resp["name"] user_info["orgs"] = [resp["orgs"][k]["name"] for k in range(len(resp["orgs"]))] return user_info def make_clickable_user(user_id): link = "https://huggingface.co/" + user_id return f'{user_id}' def run_evaluation(params, local=False, wait=False): params = json.loads(params) if isinstance(params, str): params = json.loads(params) params = EvalParams(**params) if not local: params.output_path = "/tmp/model" params.save(output_dir=params.output_path) cmd = [ "python", "-m", "competitions.evaluate", "--config", os.path.join(params.output_path, "params.json"), ] cmd = [str(c) for c in cmd] logger.info(cmd) env = os.environ.copy() cmd = shlex.split(" ".join(cmd)) process = subprocess.Popen(cmd, env=env) if wait: process.wait() return process.pid def pause_space(params): if "SPACE_ID" in os.environ: if os.environ["SPACE_ID"].split("/")[-1].startswith("comp-"): logger.info("Pausing space...") api = HfApi(token=params.token) api.pause_space(repo_id=os.environ["SPACE_ID"]) def delete_space(params): if "SPACE_ID" in os.environ: if os.environ["SPACE_ID"].split("/")[-1].startswith("comp-"): logger.info("Deleting space...") api = HfApi(token=params.token) api.delete_repo(repo_id=os.environ["SPACE_ID"], repo_type="space") def uninstall_requirements(requirements_fname): if os.path.exists(requirements_fname): # read the requirements.txt uninstall_list = [] with open(requirements_fname, "r", encoding="utf-8") as f: for line in f: if line.startswith("-"): uninstall_list.append(line[1:]) # create an uninstall.txt with open("uninstall.txt", "w", encoding="utf-8") as f: for line in uninstall_list: f.write(line) pipe = subprocess.Popen( [ "pip", "uninstall", "-r", "uninstall.txt", "-y", ], ) pipe.wait() logger.info("Requirements uninstalled.") return def install_requirements(requirements_fname): # check if params.project_name has a requirements.txt if os.path.exists(requirements_fname): # install the requirements using subprocess, wait for it to finish install_list = [] with open(requirements_fname, "r", encoding="utf-8") as f: for line in f: # if line startswith - then skip but dont skip if line startswith -- if line.startswith("-"): if not line.startswith("--"): continue install_list.append(line) with open("install.txt", "w", encoding="utf-8") as f: for line in install_list: f.write(line) pipe = subprocess.Popen( [ "pip", "install", "-r", "install.txt", ], ) pipe.wait() logger.info("Requirements installed.") return logger.info("No requirements.txt found. Skipping requirements installation.") return def is_user_admin(user_token, competition_organization): user_info = token_information(token=user_token) user_orgs = user_info.get("orgs", []) for org in user_orgs: if org == competition_organization: return True return False class TeamAlreadyExistsError(Exception): """Custom exception for when a team already exists.""" pass class TeamFileApi: def __init__(self, hf_token: str, competition_id: str): self.hf_token = hf_token self.competition_id = competition_id self._lock = threading.Lock() def _get_team_info(self, user_id: str) -> Optional[Dict[str, Any]]: user_team = hf_hub_download( repo_id=self.competition_id, filename="user_team.json", token=self.hf_token, repo_type="dataset", ) with open(user_team, "r", encoding="utf-8") as f: user_team = json.load(f) if user_id not in user_team: return None team_id = user_team[user_id] team_metadata = hf_hub_download( repo_id=self.competition_id, filename="teams.json", token=self.hf_token, repo_type="dataset", ) with open(team_metadata, "r", encoding="utf-8") as f: team_metadata = json.load(f) return team_metadata[team_id] def _create_team(self, user_id: str, team_name: str, other_data: Dict[str, Any]) -> str: with self._lock: user_team = hf_hub_download( repo_id=self.competition_id, filename="user_team.json", token=self.hf_token, repo_type="dataset", ) with open(user_team, "r", encoding="utf-8") as f: user_team = json.load(f) team_metadata = hf_hub_download( repo_id=self.competition_id, filename="teams.json", token=self.hf_token, repo_type="dataset", ) with open(team_metadata, "r", encoding="utf-8") as f: team_metadata = json.load(f) # create a new team, if user is not in any team team_id = str(uuid.uuid4()) user_team[user_id] = team_id team_metadata[team_id] = { "id": team_id, "name": team_name, "members": [user_id], "leader": user_id, "other_data": other_data, } user_team_json = json.dumps(user_team, indent=4) user_team_json_bytes = user_team_json.encode("utf-8") user_team_json_buffer = io.BytesIO(user_team_json_bytes) team_metadata_json = json.dumps(team_metadata, indent=4) team_metadata_json_bytes = team_metadata_json.encode("utf-8") team_metadata_json_buffer = io.BytesIO(team_metadata_json_bytes) api = HfApi(token=self.hf_token) api.upload_file( path_or_fileobj=user_team_json_buffer, path_in_repo="user_team.json", repo_id=self.competition_id, repo_type="dataset", ) api.upload_file( path_or_fileobj=team_metadata_json_buffer, path_in_repo="teams.json", repo_id=self.competition_id, repo_type="dataset", ) return team_id def create_team(self, user_token: str, team_name: str, other_data: Dict[str, Any]) -> str: user_info = token_information(token=user_token) return self._create_team(user_info["id"], team_name, other_data) def update_team(self, user_token: str, team_name: str, other_data: Dict[str, Any]) -> str: user_info = token_information(token=user_token) user_id = user_info["id"] team_info = self._get_team_info(user_id) with self._lock: team_metadata = hf_hub_download( repo_id=self.competition_id, filename="teams.json", token=self.hf_token, repo_type="dataset", ) with open(team_metadata, "r", encoding="utf-8") as f: team_metadata = json.load(f) team_id = team_info["id"] team_detail = team_metadata[team_id] team_metadata[team_id] = { **team_detail, "name": team_name, "other_data": other_data, } team_metadata_json = json.dumps(team_metadata, indent=4) team_metadata_json_bytes = team_metadata_json.encode("utf-8") team_metadata_json_buffer = io.BytesIO(team_metadata_json_bytes) api = HfApi(token=self.hf_token) api.upload_file( path_or_fileobj=team_metadata_json_buffer, path_in_repo="teams.json", repo_id=self.competition_id, repo_type="dataset", ) def get_team_info(self, user_token: str) -> Optional[Dict[str, Any]]: user_info = token_information(token=user_token) return self._get_team_info(user_info["id"]) def update_team_name(self, user_token, new_team_name): user_info = token_information(token=user_token) user_id = user_info["id"] team_info = self._get_team_info(user_id) with self._lock: team_metadata = hf_hub_download( repo_id=self.competition_id, filename="teams.json", token=self.hf_token, repo_type="dataset", ) with open(team_metadata, "r", encoding="utf-8") as f: team_metadata = json.load(f) team_metadata[team_info["id"]]["name"] = new_team_name team_metadata_json = json.dumps(team_metadata, indent=4) team_metadata_json_bytes = team_metadata_json.encode("utf-8") team_metadata_json_buffer = io.BytesIO(team_metadata_json_bytes) api = HfApi(token=self.hf_token) api.upload_file( path_or_fileobj=team_metadata_json_buffer, path_in_repo="teams.json", repo_id=self.competition_id, repo_type="dataset", ) return new_team_name @cached(cache=TTLCache(maxsize=1, ttl=600)) def get_team_white_list(self) -> List[str]: file = hf_hub_download( repo_id=self.competition_id, filename="team_id_whitelist.json", token=self.hf_token, repo_type="dataset", ) with open(file, "r", encoding="utf-8") as f: team_white_list = json.load(f) return team_white_list @cached(cache=TTLCache(maxsize=1, ttl=600)) def get_team_submission_limit(self): file = hf_hub_download( repo_id=self.competition_id, filename="team_submission_limit.json", token=self.hf_token, repo_type="dataset", ) with open(file, "r", encoding="utf-8") as f: team_submission_limit = json.load(f) return team_submission_limit team_file_api = TeamFileApi( os.environ.get("HF_TOKEN", None), os.environ.get("COMPETITION_ID"), ) class UserTokenApi: def __init__(self, hf_token: str, key_base64: str, competition_id: str): self.hf_token = hf_token self.key = base64.b64decode(key_base64) self.competition_id = competition_id def _encrypt(self, text: str) -> str: aesgcm = AESGCM(self.key) nonce = os.urandom(12) encrypted_data = aesgcm.encrypt(nonce, text.encode(), None) return base64.b64encode(nonce + encrypted_data).decode() def _decrypt(self, encrypted_text: str) -> str: aesgcm = AESGCM(self.key) data = base64.b64decode(encrypted_text) nonce = data[:12] ciphertext = data[12:] plaintext = aesgcm.decrypt(nonce, ciphertext, None) return plaintext.decode() def put(self, team_id: str, user_token: str): encrypted_token = self._encrypt(user_token) api = HfApi(token=self.hf_token) api.upload_file( path_or_fileobj=io.BytesIO(encrypted_token.encode()), path_in_repo=f"team_user_tokens/{team_id}", repo_id=self.competition_id, repo_type="dataset", ) def get(self, team_id: str) -> Optional[str]: try: user_token = hf_hub_download( repo_id=self.competition_id, filename=f"team_user_tokens/{team_id}", token=self.hf_token, repo_type="dataset", ) except Exception as e: logger.error(f"Failed to download user token - {e}") return None with open(user_token, "r", encoding="utf-8") as f: encrypted_token = f.read() return self._decrypt(encrypted_token) user_token_api = UserTokenApi( os.environ.get("HF_TOKEN", None), os.environ.get("USER_TOKEN_KEY_BASE64"), os.environ.get("COMPETITION_ID") ) class ServerManager: def __init__(self, hf_token: str, server_url_list: List[str], space_name_list: List[str]): self.hf_token = hf_token self.api = HfApi(token=hf_token) self.server_url_list = server_url_list self.space_name_list = space_name_list self._cur_index = 0 self._lock = threading.Lock() def get_next_server(self) -> str: with self._lock: server_url = self.server_url_list[self._cur_index] self._cur_index = (self._cur_index + 1) % len(self.server_url_list) return server_url def pause_all_servers(self): """Pause all servers.""" for space_name in self.space_name_list: try: self.api.pause_space(repo_id=space_name) except Exception as e: logger.error(f"Failed to pause space {space_name} - {e}") @tenacity.retry(stop=tenacity.stop_after_attempt(5), wait=tenacity.wait_fixed(15)) def start_all_servers(self): """Start all servers.""" for space_name in self.space_name_list: stage = self.api.space_info(space_name).runtime.stage.lower() if stage == "running": continue self.api.restart_space(repo_id=space_name) while True: time.sleep(10) stage = self.api.space_info(space_name).runtime.stage.lower() if "error" in stage: self.api.restart_space(repo_id=space_name) continue if stage == "running": break server_manager = ServerManager( os.environ.get("HF_TOKEN", None), ["https://xdimlab-hugsim-web-server-0.hf.space"], ["XDimLab/hugsim_web_server_0"] ) class SubmissionApi: def __init__(self, hf_token: str, competition_id: str): self.hf_token = hf_token self.competition_id = competition_id self.api = HfApi(token=hf_token) def exists_submission_info(self, team_id: str) -> bool: """ Check if submission info exists for a given team ID. Args: team_id (str): The team ID. Returns: bool: True if submission info exists, False otherwise. """ return self.api.file_exists( repo_id=self.competition_id, filename=f"submission_info/{team_id}.json", repo_type="dataset", ) def download_submission_info(self, team_id: str) -> Dict[str, Any]: """ Download the submission info from Hugging Face Hub. Args: team_id (str): The team ID. Returns: Dict[str, Any]: The submission info. """ submission_info_path = self.api.hf_hub_download( repo_id=self.competition_id, filename=f"submission_info/{team_id}.json", repo_type="dataset", ) with open(submission_info_path, 'r') as f: submission_info = json.load(f) return submission_info def upload_submission_info(self, team_id: str, user_submission_info: Dict[str, Any]): user_submission_info_json = json.dumps(user_submission_info, indent=4) user_submission_info_json_bytes = user_submission_info_json.encode("utf-8") user_submission_info_json_buffer = io.BytesIO(user_submission_info_json_bytes) self.api.upload_file( path_or_fileobj=user_submission_info_json_buffer, path_in_repo=f"submission_info/{team_id}.json", repo_id=self.competition_id, repo_type="dataset", ) def update_submission_data(self, team_id: str, submission_id: str, data: Dict[str, Any]): user_submission_info = self.download_submission_info(team_id) for submission in user_submission_info["submissions"]: if submission["submission_id"] == submission_id: submission.update(data) break self.upload_submission_info(team_id, user_submission_info) def update_submission_status(self, team_id: str, submission_id: str, status: int): self.update_submission_data(team_id, submission_id, {"status": status}) def count_by_status(self, team_id: str, status_list: List[SubmissionStatus]) -> int: user_submission_info = self.download_submission_info(team_id) count = sum(1 for submission in user_submission_info["submissions"] if SubmissionStatus(submission["status"]) in status_list) return count submission_api = SubmissionApi( hf_token=os.environ.get("HF_TOKEN", None), competition_id=os.environ.get("COMPETITION_ID") ) class ErrorLogApi: def __init__(self, hf_token: str, competition_id: str, encode_key: str): self.hf_token = hf_token self.competition_id = competition_id self.api = HfApi(token=hf_token) self.encode_key = encode_key def save_error_log(self, submission_id: str, content: str): """Save the error log of a space to the submission.""" content_buffer = io.BytesIO(content.encode()) self.api.upload_file( path_or_fileobj=content_buffer, path_in_repo=f"error_logs/{submission_id}.txt", repo_id=self.competition_id, repo_type="dataset", ) def get_log(self, space_id: str, kind: Literal["run", "build"], tail: int = -1) -> str: """Get the build log of a space.""" url = f"https://huggingface.co/api/spaces/{space_id}/logs/{kind}" headers = { "Authorization": f"Bearer {self.hf_token}" } response = requests.get(url, headers=headers) if response.status_code != 200: raise RuntimeError(f"Failed to get logs: {response.status_code}\n{response.text}") content = response.text line_str_list = [] start_index = 0 if tail == -1 else max(0, len(content.split('\n')) - tail) for line in content.split('\n')[start_index:]: if line.startswith("data:"): line_json = json.loads(line[5:].strip()) line_str_list.append(f"{line_json['timestamp']}: {line_json['data']}") return "\n".join(line_str_list) def generate_log_token(self, submission_id: str) -> str: payload = { "submission_id": submission_id, "exp": datetime.now(timezone.utc) + timedelta(hours=1) } token = jwt.encode(payload, self.encode_key, algorithm="HS256") return token def get_log_by_token(self, token: str) -> str: try: payload = jwt.decode(token, self.encode_key, algorithms=["HS256"]) submission_id = payload["submission_id"] except jwt.ExpiredSignatureError: raise RuntimeError("Token has expired.") except jwt.InvalidTokenError as e: raise RuntimeError(f"Invalid token: {e}") log_file_path = self.api.hf_hub_download( repo_id=self.competition_id, filename=f"error_logs/{submission_id}.txt", repo_type="dataset", ) with open(log_file_path, 'r') as f: file_content = f.read() return file_content error_log_api = ErrorLogApi( hf_token=os.environ.get("HF_TOKEN", None), competition_id=os.environ.get("COMPETITION_ID"), encode_key=os.environ.get("ERROR_LOG_ENCODE_KEY", "key") ) class SpaceCleaner: def __init__(self, hf_token: str, competition_id: str): self.hf_token = hf_token self.competition_id = competition_id self.api = HfApi(token=hf_token) self.space_build_error_count = defaultdict(int) def delete_space(self, space_id: str): """Delete a space by its ID.""" self.api.delete_repo(repo_id=space_id, repo_type="space") def clean_space(self, space_id: str, team_id: str, submission_id: str): try: space_info = self.api.space_info(repo_id=space_id) except RepositoryNotFoundError: submission_api.update_submission_data( team_id=team_id, submission_id=submission_id, data={"status": SubmissionStatus.FAILED.value, "error_message": ErrorMessage.START_SPACE_FAILED.value}, ) return if (datetime.now(timezone.utc) - space_info.created_at).total_seconds() > 60 * 60 * 1.5: # If the space is older than 1.5 hours, delete it self.delete_space(space_id) submission_api.update_submission_data( team_id=team_id, submission_id=submission_id, data={"status": SubmissionStatus.FAILED.value, "error_message": ErrorMessage.SPACE_TIMEOUT.value}, ) return if space_info.runtime.stage == SpaceStage.BUILD_ERROR: self.space_build_error_count[space_id] += 1 if self.space_build_error_count[space_id] >= 3: log_content = error_log_api.get_log(space_id, kind="build") error_log_api.save_error_log(submission_id, log_content) self.delete_space(space_id) submission_api.update_submission_data( team_id=team_id, submission_id=submission_id, data={"status": SubmissionStatus.FAILED.value, "error_message": ErrorMessage.BUILD_SPACE_FAILED.value}, ) else: self.api.restart_space(repo_id=space_id) return if space_info.runtime.stage == SpaceStage.RUNTIME_ERROR: log_content = error_log_api.get_log(space_id, kind="run") error_log_api.save_error_log(submission_id, log_content) self.delete_space(space_id) submission_api.update_submission_data( team_id=team_id, submission_id=submission_id, data={"status": SubmissionStatus.FAILED.value, "error_message": ErrorMessage.RUNTIME_ERROR.value}, ) return space_cleaner = SpaceCleaner( os.environ.get("HF_TOKEN", None), os.environ.get("COMPETITION_ID") ) class LeaderboardApi: def __init__(self, hf_token: str, competition_id: str): self.hf_token = hf_token self.competition_id = competition_id self.api = HfApi(token=hf_token) @cached(cache=TTLCache(maxsize=1, ttl=300)) def get_leaderboard(self) -> pd.DataFrame: """ Get the leaderboard for the competition. Returns: pd.DataFrame: The leaderboard as a DataFrame. """ all_scores = self._get_all_scores() if not all_scores: return pd.DataFrame(columns=["team_id", "team_name", "rc", "hdscore"]) df = pd.DataFrame(all_scores) df = df.sort_values(by=["hdscore", "rc"], ascending=[False, False]) df = df.groupby("team_id").first() df = df.sort_values(by=["hdscore", "rc"], ascending=[False, False]) df['rank'] = range(1, len(df) + 1) df.insert(0, 'rank', df.pop('rank')) df.reset_index(drop=True, inplace=True) return df def _get_all_scores(self) -> List[Dict[str, Any]]: team_metadata = self.api.hf_hub_download( repo_id=self.competition_id, filename="teams.json", repo_type="dataset", ) with open(team_metadata, "r", encoding="utf-8") as f: team_metadata = json.load(f) submission_jsons = self.api.snapshot_download( repo_id=self.competition_id, allow_patterns="submission_info/*.json", repo_type="dataset", ) submission_jsons = glob.glob(os.path.join(submission_jsons, "submission_info/*.json")) all_scores = [] for _json_path in submission_jsons: with open(_json_path, "r", encoding="utf-8") as f: _json = json.load(f) team_id = _json["id"] for sub in _json["submissions"]: if sub["status"] != SubmissionStatus.SUCCESS.value: continue all_scores.append({ "team_id": team_id, "team_name": team_metadata[team_id]["name"], "rc": sub["score"]["rc"], "hdscore": sub["score"]["hdscore"], }) return all_scores leaderboard_api = LeaderboardApi( hf_token=os.environ.get("HF_TOKEN", None), competition_id=os.environ.get("COMPETITION_ID") ) class DockerfileModifier: def __init__(self, allowed_hosts: str, source_so_path: str = "./network_filter.so"): self.allowed_hosts = allowed_hosts self.source_so_path = source_so_path self.tatget_so_dir = "/_app_extensions" self.tatget_so_path = os.path.join(self.tatget_so_dir, "network_filter.so") self.preload_prefix = f'LD_PRELOAD={self.tatget_so_path} ALLOWED_HOSTS="{allowed_hosts}"' def parse_dockerfile_line(self, line: str) -> Tuple[str, str, str]: """ 解析 Dockerfile 行,返回 (指令名, 原始命令, 格式类型) 格式类型: 'exec' (JSON数组) 或 'shell' (shell命令) """ line = line.strip() # 匹配 CMD 或 ENTRYPOINT cmd_match = re.match(r'^(CMD|ENTRYPOINT)\s+(.+)$', line, re.IGNORECASE) if not cmd_match: return "", "", "" instruction = cmd_match.group(1).upper() command_part = cmd_match.group(2).strip() # 判断是 exec 格式 (JSON数组) 还是 shell 格式 if command_part.startswith('[') and command_part.endswith(']'): return instruction, command_part, "exec" else: return instruction, command_part, "shell" def modify_shell_format(self, command: str) -> str: """修改 shell 格式的命令""" # 在原命令前添加环境变量 return f'{self.preload_prefix} {command}' def modify_exec_format(self, command: str) -> str: """修改 exec 格式 (JSON数组) 的命令""" try: # 解析 JSON 数组格式 # 移除外层的方括号 inner = command[1:-1].strip() # 简单的 JSON 数组解析 parts = [] current = "" in_quotes = False escape_next = False for char in inner: if escape_next: current += char escape_next = False elif char == '\\': current += char escape_next = True elif char == '"' and not escape_next: in_quotes = not in_quotes current += char elif char == ',' and not in_quotes: parts.append(current.strip()) current = "" else: current += char if current.strip(): parts.append(current.strip()) # 移除引号并处理转义 cleaned_parts = [] for part in parts: part = part.strip() if part.startswith('"') and part.endswith('"'): part = part[1:-1] # 处理基本的转义字符 part = part.replace('\\"', '"').replace('\\\\', '\\') cleaned_parts.append(part) if not cleaned_parts: return command # 构建新的命令 # 第一个元素通常是 shell (/bin/sh, /bin/bash 等) # 如果第一个元素是 shell,修改执行的命令 if len(cleaned_parts) >= 3 and cleaned_parts[0] in ['/bin/sh', '/bin/bash', 'sh', 'bash']: if cleaned_parts[1] == '-c': # 格式: ["/bin/sh", "-c", "command"] original_cmd = cleaned_parts[2] new_cmd = f'{self.preload_prefix} {original_cmd}' new_parts = [cleaned_parts[0], cleaned_parts[1], new_cmd] + cleaned_parts[3:] else: # 直接在现有命令前添加环境变量,通过 shell 执行 original_cmd = ' '.join(cleaned_parts[1:]) new_cmd = f'{self.preload_prefix} {original_cmd}' new_parts = [cleaned_parts[0], '-c', new_cmd] else: # 直接执行的命令,需要通过 shell 包装 original_cmd = ' '.join(cleaned_parts) new_parts = ['/bin/sh', '-c', f'{self.preload_prefix} {original_cmd}'] # 重新构建 JSON 数组 escaped_parts = [] for part in new_parts: # 转义引号和反斜杠 escaped = part.replace('\\', '\\\\').replace('"', '\\"') escaped_parts.append(f'"{escaped}"') return '[' + ', '.join(escaped_parts) + ']' except Exception as e: print(f"警告: 解析 exec 格式失败: {e}") print(f"原始命令: {command}") # 如果解析失败,转换为 shell 格式 return f'{self.preload_prefix} {command}' def modify_dockerfile_content(self, content: str, user_repo: str, user_token: str) -> Tuple[str, List[str]]: """ 修改 Dockerfile 内容 返回: (修改后的内容, 修改日志) """ lines = content.splitlines() modified_lines = [] changes = [] for i, line in enumerate(lines, 1): instruction, command, format_type = self.parse_dockerfile_line(line) if instruction in ['CMD', 'ENTRYPOINT'] and command: if format_type == "shell": new_command = self.modify_shell_format(command) new_line = f'{instruction} {new_command}' elif format_type == "exec": new_command = self.modify_exec_format(command) new_line = f'{instruction} {new_command}' else: new_line = line changes.append(f"第 {i} 行: {instruction} 指令已修改") changes.append(f" 原始: {line}") changes.append(f" 修改: {new_line}") modified_lines.append(new_line) elif instruction in ["COPY", "ADD"]: pass else: modified_lines.append(line) last_user = None for line in modified_lines[::-1]: if line.startswith("USER"): last_user = line.split()[1].strip() modified_lines.insert(2, "COPY --from=builder /app /app") if last_user is None: modified_lines.insert(-1, f"COPY {self.source_so_path}" + f" {self.tatget_so_path}") else: modified_lines.insert(3, f"RUN chown -R {last_user}:{last_user} /app") modified_lines.insert(-1, f"COPY --chown={last_user}:{last_user} {self.source_so_path} {self.tatget_so_path}") modified_lines.insert(-1, f"RUN chown -R {last_user}:{last_user} {self.tatget_so_dir}") first_build_stage = [ "FROM python:3.10-slim AS builder", "WORKDIR /app", f"ENV USER_HF_TOKEN='{user_token}'", "RUN pip install huggingface_hub", f"RUN python -c \"from huggingface_hub import snapshot_download; import os; import base64; snapshot_download('{user_repo}', repo_type='model', local_dir='.', token=base64.b64decode(os.getenv('USER_HF_TOKEN')).decode())\"" ] first_build_stage.extend(modified_lines) modified_lines = first_build_stage return '\n'.join(modified_lines), changes dockerfile_modifier = DockerfileModifier("127.0.0.1,xdimlab-hugsim-web-server-0.hf.space")