didericis-claude
9a04ab262b
test / integration-docker (pull_request) Successful in 19s
test / unit (pull_request) Failing after 39s
lint / lint (push) Successful in 56s
tracker-policy-pr / check-pr (pull_request) Failing after 13m51s
test / integration-firecracker (pull_request) Failing after 14m1s
test / coverage (pull_request) Has been skipped
test / publish-infra (pull_request) Has been skipped
- Drop the module-level paragraph emphasizing the single-UID security boundary (#issuecomment-5010): redundant given the safe environment. - Move `podman` from each agent image (claude, codex, pi) into the `build_image` derived layer so bottles without `nested_containers` pay no image-size cost (#issuecomment-5013). - Update `build_image` docstring and inline comments to reflect the move. - Add TODO(#394) noting the planned docker-layer abstraction refactor. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
44 lines
1.2 KiB
Docker
44 lines
1.2 KiB
Docker
# bot-bottle Pi provider image.
|
|
#
|
|
# Node LTS, git/network tooling, and the Pi coding-agent CLI installed globally.
|
|
|
|
FROM node:22-trixie-slim
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
git \
|
|
ca-certificates \
|
|
curl \
|
|
fd-find \
|
|
openssh-client \
|
|
ripgrep \
|
|
&& ln -s /usr/bin/fdfind /usr/local/bin/fd \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends python3 python3-pip python3-venv \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN npm install -g --ignore-scripts --no-fund --no-audit @earendil-works/pi-coding-agent \
|
|
&& npm cache clean --force
|
|
|
|
RUN install -d -o node -g node -m 755 /home/node/.config /home/node/.config/git \
|
|
&& mkdir -p /home/node/.pi/agent \
|
|
/home/node/.pi/context-mode/sessions \
|
|
/tmp/pi-subagents-uid-1000 \
|
|
&& chown -R node:node /home/node/.pi /tmp \
|
|
&& chmod -R u+rwX /tmp \
|
|
&& chown root:root /tmp /var/tmp \
|
|
&& chmod 1777 /tmp /var/tmp
|
|
|
|
USER node
|
|
WORKDIR /home/node
|
|
|
|
RUN pi install npm:@harms-haus/pi-cwd \
|
|
&& pi install npm:pi-web-access \
|
|
&& pi install npm:context-mode \
|
|
&& pi install npm:pi-subagents \
|
|
&& pi install npm:pi-mcp-adapter
|
|
|
|
CMD ["pi"]
|