initial impl

2026-07-19 12:21:26 +02:00
commit e9b895366d
64 changed files with 4113 additions and 0 deletions
@@ -0,0 +1,44 @@
+FROM node:24-bookworm-slim AS codex
+
+ARG CODEX_VERSION=0.144.6
+RUN npm install --global "@openai/codex@${CODEX_VERSION}"
+
+FROM ghcr.io/astral-sh/uv:0.8.14 AS uv
+
+FROM python:3.13-slim-bookworm
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    UV_LINK_MODE=copy \
+    UV_NO_DEV=1 \
+    CODEX_HOME=/var/lib/codex \
+    PATH=/opt/agentci/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+RUN apt-get update \
+    && apt-get install --yes --no-install-recommends adduser ca-certificates git libstdc++6 \
+    && rm -rf /var/lib/apt/lists/* \
+    && /usr/sbin/adduser --disabled-password --gecos "" --uid 10001 agentci \
+    && mkdir -p /opt/agentci /var/lib/agentci /var/lib/codex /etc/codex
+
+COPY --from=uv /uv /uvx /usr/local/bin/
+COPY --from=codex /usr/local/bin/node /usr/local/bin/node
+COPY --from=codex /usr/local/lib/node_modules/@openai/codex /usr/local/lib/node_modules/@openai/codex
+RUN ln -s /usr/local/lib/node_modules/@openai/codex/bin/codex.js /usr/local/bin/codex
+
+WORKDIR /opt/agentci
+COPY pyproject.toml uv.lock README.md ./
+COPY src ./src
+COPY scripts ./scripts
+COPY codex/config.toml /etc/codex/config.toml
+
+RUN chmod 0755 /opt/agentci/scripts/gitea-askpass.sh /usr/local/bin/codex \
+    && uv sync --frozen --no-dev \
+    && chown -R agentci:agentci /opt/agentci /var/lib/agentci /var/lib/codex
+
+USER agentci
+EXPOSE 8080
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD ["python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/health/live')"]
+
+CMD ["agentci"]