ci: Add Docker support

- Add .clang-tidy to check the code style and safety
- Add DockerFile to this project.
- Ignore some warnings.

Author: caomengxuan666

.clang-tidy

@@ -0,0 +1,87 @@
+---
+Checks: '-*,
+        clang-analyzer-core.*,
+        clang-analyzer-cplusplus.*,
+        modernize-redundant-void-arg,
+        modernize-use-bool-literals,
+        modernize-use-equals-default,
+        modernize-use-nullptr,
+        modernize-use-override,
+        google-explicit-constructor,
+        google-readability-casting,
+        readability-braces-around-statements,
+        readability-identifier-naming.ClassCase,
+        readability-identifier-naming.StructCase,
+        readability-identifier-naming.TypedefCase,
+        readability-identifier-naming.EnumCase,
+        readability-non-const-parameter,
+        cert-dcl21-cpp,
+        bugprone-undelegated-constructor,
+        bugprone-macro-parentheses,
+        bugprone-macro-repeated-side-effects,
+        bugprone-forward-declaration-namespace,
+        bugprone-bool-pointer-implicit-conversion,
+        bugprone-misplaced-widening-cast,
+        cppcoreguidelines-narrowing-conversions,
+        cppcoreguidelines-pro-type-reinterpret-cast,
+        misc-unconventional-assign-operator'
+WarningsAsErrors: ''
+HeaderFilterRegex: ''
+CheckOptions:
+  - key:             modernize-redundant-void-arg
+    value:           'true' 
+  - key:             modernize-use-bool-literals
+    value:           'true'  
+  - key:             modernize-use-equals-default
+    value:           'true'  
+  - key:             modernize-use-nullptr
+    value:           'true'  
+  - key:             modernize-use-override
+    value:           'true'  
+  # Google 
+  - key:             google-explicit-constructor
+    value:           'true'  
+  - key:             google-readability-casting
+    value:           'true'  
+
+  # Readability
+  - key:             readability-braces-around-statements
+    value:           'true'  
+  - key:             readability-identifier-naming.ClassCase
+    value:           'CamelCase'  
+  - key:             readability-identifier-naming.StructCase
+    value:           'CamelCase'  
+  - key:             readability-identifier-naming.TypedefCase
+    value:           'CamelCase' 
+  - key:             readability-identifier-naming.EnumCase
+    value:           'CamelCase' 
+  - key:             readability-non-const-parameter
+    value:           'true'  
+
+  # CERT 
+  - key:             cert-dcl21-cpp
+    value:           'true'  
+
+  # Bugprone
+  - key:             bugprone-undelegated-constructor
+    value:           'true' 
+  - key:             bugprone-macro-parentheses
+    value:           'true'  
+  - key:             bugprone-macro-repeated-side-effects
+    value:           'true'  
+  - key:             bugprone-forward-declaration-namespace
+    value:           'true'  
+  - key:             bugprone-bool-pointer-implicit-conversion
+    value:           'true' 
+  - key:             bugprone-misplaced-widening-cast
+    value:           'true'  
+
+  # CppCoreGuidelines
+  - key:             cppcoreguidelines-narrowing-conversions
+    value:           'true' 
+  - key:             cppcoreguidelines-pro-type-reinterpret-cast
+    value:           'true' 
+
+  # Miscellaneous
+  - key:             misc-unconventional-assign-operator
+    value:           'true'  

.dockerignore

@@ -0,0 +1,20 @@
+*.git
+*.log
+*.md
+*.ini
+*.json
+*.png
+*.jpg
+*.sh
+*.pyc
+__pycache__
+.vscode
+.idea
+.cache
+logs
+certs
+
+!README.md
+
+!LICENSE
+

.gitignore

@@ -11,4 +11,5 @@ mcp-server.log
 /.vs
 checks.json
 /certs
-*.exe
+*.exe
+checks.json

CMakeLists.txt

@@ -1,4 +1,4 @@
-cmake_minimum_required(VERSION 3.23)
+cmake_minimum_required(VERSION 3.22)
 project(MCPServer.cpp LANGUAGES CXX C VERSION 1.0.5.0)
 
 if(UNIX AND NOT APPLE)
@@ -67,6 +67,8 @@ if(WIN32)
     add_compile_definitions(_WIN32_WINDOWS)
 endif()
 
+add_compile_definitions(OPENSSL_API_COMPAT=30000)
+
 # link mimalloc
 # target_link_libraries(mcp-server++ PRIVATE ${LINKED_LIBRARIES})
 if(MSVC)
@@ -201,6 +203,9 @@ endif()
 # CPack support for packaging
 include(cmake/CPackConfig.cmake)
 
+# CPack RPM spec file
+set(CPACK_RESOURCE_FILE_LICENSE ${CMAKE_CURRENT_SOURCE_DIR}/LICENSE)
+
 # testing
 # Only build tests when including libs
 if(CPACK_INCLUDE_LIBS)
@@ -225,4 +230,8 @@ endif()
 
 if(BUILD_EXAMPLES)
     add_subdirectory(examples)
-endif()
+endif()
+
+set_target_properties(generate_cert PROPERTIES
+    COMPILE_DEFINITIONS "OPENSSL_SUPPRESS_DEPRECATED"
+)

Dockerfile

@@ -0,0 +1,45 @@
+FROM ubuntu:22.04 AS builder
+
+RUN apt update && \
+    apt install -y build-essential cmake git libssl-dev && \
+    apt clean && \
+    rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+#RUN rm -rf /app/build
+
+COPY . .
+
+RUN mkdir -p build && \
+    cd build && \
+    cmake -DCMAKE_BUILD_TYPE=Release -DCPACK_INCLUDE_LIBS=OFF .. && \
+    make -j$(nproc) && \
+    strip bin/mcp-server++
+
+# -----------------------------------------------------------------------------------#
+FROM debian:12-slim
+
+RUN echo 'deb https://mirrors.ustc.edu.cn/debian bookworm main' > /etc/apt/sources.list && \
+    echo 'deb https://mirrors.ustc.edu.cn/debian bookworm-updates main' >> /etc/apt/sources.list && \
+    echo 'deb https://mirrors.ustc.edu.cn/debian-security bookworm-security main' >> /etc/apt/sources.list
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends ca-certificates && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+        libssl3 \
+        ca-certificates && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
+
+COPY --from=builder /app/build/bin/mcp-server++ /mcp-server++
+COPY config.ini.example /config.ini
+
+RUN mkdir -p /logs /plugins
+
+EXPOSE 6666 6667
+
+CMD ["/mcp-server++"]

src/transport/http_handler.cpp

@@ -663,20 +663,17 @@ namespace mcp::transport {
     }
 
     // Helper function: fully read and discard remaining request body (avoid buffer residue)
-    asio::awaitable<void> HttpHandler::discard_remaining_request_body(
-            std::shared_ptr<Session> session,
-            const HttpRequest &req,
-            size_t already_read) {// Note parameter name changed to "total bytes read"
+    asio::awaitable<void> HttpHandler::discard_remaining_request_body(std::shared_ptr<Session> session, const HttpRequest &request, [[maybe_unused]] size_t already_read) {
         try {
-            auto it = req.headers.find("Content-Length");
-            if (it == req.headers.end()) {
+            auto it = request.headers.find("Content-Length");
+            if (it == request.headers.end()) {
                 co_return;
             }
 
             size_t content_len = std::stoull(it->second);
 
             // Calculate already read body length
-            size_t already_read_body = req.body.size();
+            size_t already_read_body = request.body.size();
 
             // Key: add underflow protection to avoid negative numbers (unsigned underflow)
             if (already_read_body >= content_len) {
@@ -705,20 +702,17 @@ namespace mcp::transport {
     }
 
     // Helper function: fully read and discard remaining request body for SSL sessions (avoid buffer residue)
-    asio::awaitable<void> HttpHandler::discard_remaining_request_body(
-            std::shared_ptr<SslSession> session,
-            const HttpRequest &req,
-            size_t already_read) {// Note parameter name changed to "total bytes read"
+    asio::awaitable<void> HttpHandler::discard_remaining_request_body(std::shared_ptr<SslSession> session, const HttpRequest &request, [[maybe_unused]] size_t already_read) {
         try {
-            auto it = req.headers.find("Content-Length");
-            if (it == req.headers.end()) {
+            auto it = request.headers.find("Content-Length");
+            if (it == request.headers.end()) {
                 co_return;
             }
 
             size_t content_len = std::stoull(it->second);
 
             // Calculate already read body length
-            size_t already_read_body = req.body.size();
+            size_t already_read_body = request.body.size();
 
             // Key: add underflow protection to avoid negative numbers (unsigned underflow)
             if (already_read_body >= content_len) {

src/transport/session.h

@@ -40,7 +40,7 @@ namespace mcp::transport {
          * @param message The message to send
          * @param flush Whether to flush the data immediately
          */
-        virtual asio::awaitable<void> stream_write(const std::string &message, bool flush = true) {
+        virtual asio::awaitable<void> stream_write(const std::string &message, [[maybe_unused]] bool flush = true) {
             // Default implementation just calls regular write
             co_await write(message);
             co_return;

src/transport/ssl_session.cpp

@@ -188,7 +188,7 @@ namespace mcp::transport {
      * @param message Data to send to client
      * @param flush Whether to flush the data immediately
      */
-    asio::awaitable<void> SslSession::stream_write(const std::string &message, bool flush) {
+    asio::awaitable<void> SslSession::stream_write(const std::string &message, [[maybe_unused]] bool flush) {
         if (closed_ || !ssl_stream_.lowest_layer().is_open()) {
             MCP_DEBUG("Attempted stream write to closed SSL session (ID: {})", session_id_);
             co_return;

third_party/miniz/CMakeLists.txt

@@ -1 +1,3 @@
-add_library(miniz STATIC miniz.c)
+add_library(miniz STATIC miniz.c)
+
+target_compile_definitions(miniz PRIVATE MZ_USE_STDIO_FILEFUNC_64)

third_party/miniz/miniz.c

@@ -24,9 +24,6 @@
  * THE SOFTWARE.
  *
  **************************************************************************/
-
-
-
 typedef unsigned char mz_validate_uint16[sizeof(mz_uint16) == 2 ? 1 : -1];
 typedef unsigned char mz_validate_uint32[sizeof(mz_uint32) == 4 ? 1 : -1];
 typedef unsigned char mz_validate_uint64[sizeof(mz_uint64) == 8 ? 1 : -1];
@@ -3181,6 +3178,35 @@ static int mz_stat64(const char *path, struct __stat64 *buffer)
 #define MZ_FREOPEN(p, m, s) freopen(p, m, s)
 #define MZ_DELETE_FILE remove
 
+#if defined(__linux__) || defined(__linux) || defined(linux) || defined(__gnu_linux__)
+#ifndef _LARGEFILE64_SOURCE
+#define _LARGEFILE64_SOURCE
+#endif
+#ifndef _FILE_OFFSET_BITS
+#define _FILE_OFFSET_BITS 64
+#endif
+#endif
+
+#elif defined(__linux__) || defined(__linux) || defined(linux) || defined(__gnu_linux__)
+/* Linux with large file support via _FILE_OFFSET_BITS=64 */
+#ifndef MINIZ_NO_TIME
+#include <utime.h>
+#endif
+#include <sys/stat.h>
+#include <stdio.h>
+
+#define MZ_FOPEN(f, m) fopen(f, m)
+#define MZ_FCLOSE fclose
+#define MZ_FREAD fread
+#define MZ_FWRITE fwrite
+#define MZ_FTELL64 ftello
+#define MZ_FSEEK64 fseeko
+#define MZ_FILE_STAT_STRUCT stat
+#define MZ_FILE_STAT stat
+#define MZ_FFLUSH fflush
+#define MZ_FREOPEN(f, m, s) freopen(f, m, s)
+#define MZ_DELETE_FILE remove
+
 #else
 #pragma message("Using fopen, ftello, fseeko, stat() etc. path for file I/O - this path may not support large files.")
 #ifndef MINIZ_NO_TIME