65 lines
2.2 KiB
Docker
65 lines
2.2 KiB
Docker
ARG TEA_VERSION=0.14.2
|
|
|
|
FROM node:24-bookworm-slim AS codex
|
|
|
|
ARG CODEX_VERSION=0.144.6
|
|
ARG CODEGRAPH_VERSION=1.3.1
|
|
RUN npm install --global \
|
|
"@openai/codex@${CODEX_VERSION}" \
|
|
"@colbymchenry/codegraph@${CODEGRAPH_VERSION}"
|
|
|
|
FROM ghcr.io/astral-sh/uv:0.8.14 AS uv
|
|
|
|
FROM gitea/tea:${TEA_VERSION} AS tea
|
|
|
|
FROM python:3.13-slim-bookworm
|
|
|
|
ENV PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1 \
|
|
UV_LINK_MODE=copy \
|
|
UV_NO_DEV=1 \
|
|
CODEGRAPH_TELEMETRY=0 \
|
|
CODEX_HOME=/var/lib/codex \
|
|
XDG_CONFIG_HOME=/run/agentci \
|
|
PATH=/opt/agentci/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install --yes --no-install-recommends adduser ca-certificates git libstdc++6 \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& /usr/sbin/adduser --disabled-password --gecos "" --uid 10001 agentci \
|
|
&& mkdir -p /opt/agentci /var/lib/agentci /var/lib/codex /etc/codex /run/agentci \
|
|
&& chown agentci:agentci /run/agentci
|
|
|
|
COPY --from=uv /uv /uvx /usr/local/bin/
|
|
COPY --from=tea /bin/tea /usr/local/bin/tea
|
|
COPY --from=codex /usr/local/bin/node /usr/local/bin/node
|
|
COPY --from=codex /usr/local/lib/node_modules/@openai/codex /usr/local/lib/node_modules/@openai/codex
|
|
COPY --from=codex /usr/local/lib/node_modules/@colbymchenry /usr/local/lib/node_modules/@colbymchenry
|
|
RUN ln -s /usr/local/lib/node_modules/@openai/codex/bin/codex.js /usr/local/bin/codex \
|
|
&& ln -s /usr/local/lib/node_modules/@colbymchenry/codegraph/npm-shim.js \
|
|
/usr/local/bin/codegraph
|
|
|
|
WORKDIR /opt/agentci
|
|
COPY pyproject.toml uv.lock README.md ./
|
|
COPY src ./src
|
|
COPY scripts ./scripts
|
|
COPY codex/config.toml /etc/codex/config.toml
|
|
|
|
RUN chmod 0755 \
|
|
/opt/agentci/scripts/entrypoint.sh \
|
|
/opt/agentci/scripts/gitea-askpass.sh \
|
|
/usr/local/bin/tea \
|
|
/usr/local/bin/codex \
|
|
/usr/local/bin/codegraph \
|
|
&& uv sync --frozen --no-dev \
|
|
&& chown -R agentci:agentci /opt/agentci /var/lib/agentci /var/lib/codex
|
|
|
|
USER agentci
|
|
EXPOSE 8080
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
|
|
CMD ["python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/health/live')"]
|
|
|
|
ENTRYPOINT ["/opt/agentci/scripts/entrypoint.sh"]
|
|
CMD ["agentci"]
|