修改代码并推送到 GitHub 的 main
                ↓
GitHub Actions 取出代码、导出依赖
                ↓
Docker 构建 linux/amd64 镜像
                ↓
推送到阿里云 ACR 镜像仓库
                ↓
Serverless Devs 根据 s.yaml 创建或更新函数
                ↓
函数计算拉取新镜像、启动 Uvicorn
                ↓
通过 HTTP 触发器访问 /health 等应用路由

acs:ram::<你的账号ID>:role/<函数角色名称>

fastapi-demo/
├── app/
│   ├── __init__.py
│   └── main.py
├── pyproject.toml
├── uv.lock
├── Dockerfile
├── .dockerignore
├── .gitignore
├── s.yaml
└── .github/
    └── workflows/
        └── deploy-fc.yml

from fastapi import FastAPI

app = FastAPI(title="FastAPI on Function Compute")


@app.get("/")
async def home():
    return {"message": "FastAPI is running"}


@app.get("/health")
async def health():
    return {"ok": True}

[project]
name = "fastapi-fc-demo"
version = "0.1.0"
requires-python = ">=3.12"
dependencies = [
    "fastapi",
    "uvicorn",
]

uv lock

uv export --locked --no-dev --no-hashes --format requirements.txt --output-file requirements.txt

FROM python:3.12-slim

WORKDIR /code
ENV PYTHONUNBUFFERED=1
ENV PYTHONDONTWRITEBYTECODE=1

COPY requirements.txt ./
RUN python -m pip install --no-cache-dir -r requirements.txt

COPY app ./app

EXPOSE 9000
CMD ["python", "-m", "uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "9000", "--timeout-keep-alive", "86400"]

.git
.github
.venv
.env
.env.*
.s
__pycache__
*.pyc
.DS_Store

.venv/
.env
.env.*
.s/
__pycache__/
*.pyc
requirements.txt
.DS_Store

edition: 3.0.0
name: fastapi-fc3
access: fc-ci

resources:
  api:
    component: fc3
    props:
      region: ${env('FC_REGION')}
      functionName: ${env('FC_FUNCTION_NAME')}
      runtime: custom-container
      cpu: 0.5
      memorySize: 1024
      diskSize: 512
      timeout: 60
      instanceConcurrency: 1
      role: ${env('FC_FUNCTION_ROLE_ARN')}
      customContainerConfig:
        image: ${env('FC_IMAGE_URI')}
        port: 9000
      triggers:
        - triggerName: http
          triggerType: http
          qualifier: LATEST
          triggerConfig:
            authType: function
            disableURLInternet: false
            methods:
              - GET
              - POST
              - PUT
              - PATCH
              - DELETE
              - HEAD
              - OPTIONS

      customContainerConfig:
        image: ${env('FC_IMAGE_URI')}
        port: 9000
        acrInstanceId: ${env('ACR_INSTANCE_ID')}

gh secret set ALIYUN_ACCESS_KEY_ID
gh secret set ALIYUN_ACCESS_KEY_SECRET
gh secret set ACR_USERNAME
gh secret set ACR_PASSWORD

name: Deploy FastAPI to Function Compute

on:
  push:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: fc-production
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: ubuntu-latest
    env:
      FC_REGION: ${{ vars.FC_REGION }}
      FC_FUNCTION_NAME: ${{ vars.FC_FUNCTION_NAME }}
      FC_FUNCTION_ROLE_ARN: ${{ vars.FC_FUNCTION_ROLE_ARN }}
      ACR_REGISTRY: ${{ vars.ACR_REGISTRY }}
      ACR_NAMESPACE: ${{ vars.ACR_NAMESPACE }}
      ACR_REPOSITORY: ${{ vars.ACR_REPOSITORY }}

    steps:
      - name: Checkout
        uses: actions/checkout@v7.0.1

      - name: Set up Node.js for Serverless Devs
        uses: actions/setup-node@v7.1.0
        with:
          node-version: "22"

      - name: Set up uv and Python
        uses: astral-sh/setup-uv@v10.3.0
        with:
          python-version: "3.12"
          enable-cache: false

      - name: Check required configuration
        shell: bash
        env:
          ALIYUN_ACCESS_KEY_ID: ${{ secrets.ALIYUN_ACCESS_KEY_ID }}
          ALIYUN_ACCESS_KEY_SECRET: ${{ secrets.ALIYUN_ACCESS_KEY_SECRET }}
          ACR_USERNAME: ${{ secrets.ACR_USERNAME }}
          ACR_PASSWORD: ${{ secrets.ACR_PASSWORD }}
        run: |
          set -euo pipefail
          required=(
            FC_REGION FC_FUNCTION_NAME FC_FUNCTION_ROLE_ARN
            ACR_REGISTRY ACR_NAMESPACE ACR_REPOSITORY
            ALIYUN_ACCESS_KEY_ID ALIYUN_ACCESS_KEY_SECRET
            ACR_USERNAME ACR_PASSWORD
          )
          for name in "${required[@]}"; do
            if [[ -z "${!name}" ]]; then
              echo "::error::Missing configuration: $name"
              exit 1
            fi
          done

      - name: Export locked dependencies
        run: |
          uv export --locked --no-dev --no-hashes \
            --format requirements.txt \
            --output-file requirements.txt

      - name: Select image tag
        shell: bash
        run: |
          image="$ACR_REGISTRY/$ACR_NAMESPACE/$ACR_REPOSITORY:$GITHUB_SHA"
          echo "FC_IMAGE_URI=$image" >> "$GITHUB_ENV"

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4.4.1

      - name: Log in to ACR
        uses: docker/login-action@v4.6.0
        with:
          registry: ${{ env.ACR_REGISTRY }}
          username: ${{ secrets.ACR_USERNAME }}
          password: ${{ secrets.ACR_PASSWORD }}

      - name: Build and push image
        uses: docker/build-push-action@v7.4.0
        with:
          context: .
          file: ./Dockerfile
          platforms: linux/amd64
          push: true
          tags: ${{ env.FC_IMAGE_URI }}

      - name: Install Serverless Devs
        run: npm install --global @serverless-devs/s@3.1.10

      - name: Deploy function
        env:
          ALIYUN_ACCESS_KEY_ID: ${{ secrets.ALIYUN_ACCESS_KEY_ID }}
          ALIYUN_ACCESS_KEY_SECRET: ${{ secrets.ALIYUN_ACCESS_KEY_SECRET }}
        run: |
          s config add \
            --AccessKeyID "$ALIYUN_ACCESS_KEY_ID" \
            --AccessKeySecret "$ALIYUN_ACCESS_KEY_SECRET" \
            -a fc-ci -f
          s deploy --skip-push --assume-yes

git add app pyproject.toml uv.lock Dockerfile .dockerignore .gitignore s.yaml .github/workflows/deploy-fc.yml
git commit -m "Add FastAPI deployment to Function Compute"
git push origin main

import os
from datetime import datetime, timezone
from urllib.parse import urlsplit

import requests
from Tea.request import TeaRequest
from alibabacloud_openapi_util.client import Client as Signing


endpoint = os.environ["FC_HTTP_URL"].rstrip("/") + "/health"
headers = {
    "x-acs-date": datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
}
if token := os.getenv("ALIBABA_CLOUD_SECURITY_TOKEN"):
    headers["x-acs-security-token"] = token

request = TeaRequest()
request.method = "GET"
request.pathname = urlsplit(endpoint).path
request.query = {}
request.headers = headers

headers["authorization"] = Signing.get_authorization(
    request,
    "ACS3-HMAC-SHA256",
    "",
    os.environ["ALIBABA_CLOUD_ACCESS_KEY_ID"],
    os.environ["ALIBABA_CLOUD_ACCESS_KEY_SECRET"],
)

response = requests.get(endpoint, headers=headers, timeout=30)
print(response.status_code, response.text)
response.raise_for_status()

uv run --with alibabacloud-openapi-util --with requests python check_health.py

      runtime: custom.debian12
      code: ./code
      environmentVariables:
        PYTHONPATH: /code/python
      customRuntimeConfig:
        command:
          - /usr/bin/python3
        args:
          - -m
          - uvicorn
          - app.main:app
          - --host
          - 0.0.0.0
          - --port
          - "9000"
          - --timeout-keep-alive
          - "86400"
        port: 9000

export FC_IMAGE_URI="<实际ACR登录域名>/<命名空间>/<仓库>:<上一个正常提交SHA>"
s deploy --skip-push --assume-yes