feat: ship astrbot CLI in Docker image for in-container password reset

[Soulter]

Summary

• Install the project itself (uv pip install -e . --no-deps) in the Docker image so the astrbot console script is available inside the container
• Create the /AstrBot/.astrbot marker so the CLI recognizes the container working directory as an initialized AstrBot root
• Document the password reset workflow in the zh/en Docker deployment guides
• Reorganize the zh/en FAQ forgot-password section by deployment method (Docker / uv & pip package / other)

Motivation

The astrbot password / astrbot conf set dashboard.password commands already existed, but the Docker image only installed third-party dependencies, not the project itself, so there was no astrbot entrypoint in the container. Additionally, .astrbot is excluded by .dockerignore, so the CLI refused to run with "not a valid AstrBot root directory".

Docker users can now reset a forgotten dashboard password with:

docker exec -it astrbot astrbot password  # the first `astrbot` is your container name (check with `docker ps`)
docker restart astrbot  # required: the running server holds the config in memory

Verification

Built the image locally and verified end-to-end in a running container:

1. which astrbot -> /usr/local/bin/astrbot; /AstrBot/.astrbot exists
2. docker exec -i <c> astrbot password writes pbkdf2_password + legacy md5 hash to data/cmd_config.json and clears password_change_required / sets password_storage_upgraded
3. After docker restart, POST /api/auth/login with the new password returns a JWT (wrong password is rejected)

Image size impact is minimal (a small .pth-based editable install pointing back to the baked-in source tree; deps are not reinstalled thanks to --no-deps). The editable install keeps the CLI in sync with the server code shipped in the image, so the two never drift apart within one image build.

Summary by Sourcery

Enable dashboard password resets from Docker containers and document the workflow across deployment guides and FAQs.

New Features:

• Add the AstrBot CLI to Docker images and initialize the container working directory so password resets can be performed in-container.

Build:

• Install the project package in the Docker image (editable, no dependency reinstallation).

Documentation:

• Document Docker dashboard password reset procedures and organize forgot-password guidance by deployment method in English and Chinese documentation.

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

Sourcery assessment

Needs a human reviewer. The image now exposes a command that can persistently change the dashboard username and password, so a faulty packaging or CLI interaction could lock users out or alter authentication state in a way that reverting the image would not undo. Docker exec access limits who can invoke it, but the credential change itself outlives a revert.

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	astrbot-docs	2d99044	Commit Preview URL Branch Preview URL	Oct 07 2026, 03:41 PM