feat(infra): p6 hardening - metrics collection and registry mirror

- 4 services add collectDefaultMetrics for process metrics
- docker-compose.yml images prefixed with docker.m.daocloud.io
- Prometheus v0.51.0 (nonexistent) fixed to v2.51.0
- Grafana port remapped 3000 to 3030 to avoid teacher-portal conflict
- ClickHouse edu_analytics database initialized
- known-issues.md documents 7 new P6 scenario-to-rule mappings

infra/docker-compose.yml

@@ -1,7 +1,8 @@
 name: edu-full
 services:
   mysql:
-    image: mysql:8.0
+    # 镜像加速：通过 daocloud 镜像源绕过 docker.io 被墙问题
+    image: docker.m.daocloud.io/library/mysql:8.0
     container_name: edu-mysql
     restart: unless-stopped
     environment:
@@ -20,7 +21,7 @@ services:
       timeout: 5s
       retries: 5
   redis:
-    image: redis:7-alpine
+    image: docker.m.daocloud.io/library/redis:7-alpine
     container_name: edu-redis
     restart: unless-stopped
     ports:
@@ -33,7 +34,7 @@ services:
       timeout: 3s
       retries: 5
   kafka:
-    image: confluentinc/cp-kafka:7.6.0
+    image: docker.m.daocloud.io/confluentinc/cp-kafka:7.6.0
     container_name: edu-kafka
     profiles: ["p3", "p4", "p5", "p6"]
     restart: unless-stopped
@@ -54,7 +55,7 @@ services:
       timeout: 10s
       retries: 5
   zookeeper:
-    image: confluentinc/cp-zookeeper:7.6.0
+    image: docker.m.daocloud.io/confluentinc/cp-zookeeper:7.6.0
     container_name: edu-zookeeper
     profiles: ["p3", "p4", "p5", "p6"]
     restart: unless-stopped
@@ -66,7 +67,7 @@ services:
       timeout: 5s
       retries: 5
   clickhouse:
-    image: clickhouse/clickhouse-server:24.3
+    image: docker.m.daocloud.io/clickhouse/clickhouse-server:24.3
     container_name: edu-clickhouse
     profiles: ["p4", "p5", "p6"]
     restart: unless-stopped
@@ -81,7 +82,7 @@ services:
       timeout: 5s
       retries: 5
   neo4j:
-    image: neo4j:5.20
+    image: docker.m.daocloud.io/library/neo4j:5.20
     container_name: edu-neo4j
     profiles: ["p4", "p5", "p6"]
     restart: unless-stopped
@@ -98,6 +99,7 @@ services:
       timeout: 10s
       retries: 5
   elasticsearch:
+    # Elastic 官方镜像在 docker.elastic.co，非 Docker Hub，通常不被墙
     image: docker.elastic.co/elasticsearch/elasticsearch:8.13.0
     container_name: edu-es
     profiles: ["p5", "p6"]
@@ -116,7 +118,7 @@ services:
       timeout: 10s
       retries: 5
   jaeger:
-    image: jaegertracing/all-in-one:1.57
+    image: docker.m.daocloud.io/jaegertracing/all-in-one:1.57
     container_name: edu-jaeger
     profiles: ["observability"]
     restart: unless-stopped
@@ -126,7 +128,7 @@ services:
       - "16686:16686"
       - "4318:4318"
   prometheus:
-    image: prom/prometheus:v0.51.0
+    image: docker.m.daocloud.io/prom/prometheus:v2.51.0
     container_name: edu-prometheus
     profiles: ["observability"]
     restart: unless-stopped
@@ -135,14 +137,14 @@ services:
     ports:
       - "9090:9090"
   grafana:
-    image: grafana/grafana:10.4.0
+    image: docker.m.daocloud.io/grafana/grafana:10.4.0
     container_name: edu-grafana
     profiles: ["observability"]
     restart: unless-stopped
     environment:
       GF_SECURITY_ADMIN_PASSWORD: admin
     ports:
-      - "3001:3001"
+      - "3030:3000"
     volumes:
       - grafana_data:/var/lib/grafana
 volumes:
@@ -151,4 +153,4 @@ volumes:
   clickhouse_data:
   neo4j_data:
   es_data:
-  grafana_data:
+  grafana_data: