make webhook

2026-07-13 18:50:38 +02:00
parent 2f128550fc
commit 40c822d3bf
67 changed files with 6286 additions and 2053 deletions
@@ -0,0 +1,72 @@
+# syntax=docker/dockerfile:1
+
+FROM node:24-alpine AS app-build
+WORKDIR /src/app
+COPY app/package.json app/package-lock.json ./
+COPY app/config/tsconfig.json ./config/tsconfig.json
+RUN npm ci
+COPY app/src ./src
+RUN npm run build && npm prune --omit=dev
+
+FROM node:24-alpine AS runtime
+RUN apk add --no-cache ca-certificates coreutils git openssh-client \
+    && addgroup -g 10001 ci-agent \
+    && adduser -D -u 10001 -G ci-agent -h /home/ci-agent ci-agent \
+    && install -d -o ci-agent -g ci-agent -m 0700 \
+         /var/lib/olixero-agent/state \
+         /var/lib/olixero-agent/workspaces \
+         /var/lib/opencode-agent/data \
+         /var/lib/opencode-agent/cache \
+    && install -d -o root -g root -m 0555 \
+         /opt/ci-agents \
+         /opt/ci-agents/empty-config \
+         /opt/ci-agents/empty-config/opencode
+
+COPY --from=app-build /src/app/dist /opt/ci-agents/dist
+COPY --from=app-build /src/app/node_modules /opt/ci-agents/node_modules
+COPY app/scripts/git-askpass.sh /opt/ci-agents/bin/git-askpass.sh
+
+RUN chmod -R a-w /opt/ci-agents \
+    && chmod 0555 /opt/ci-agents/bin/git-askpass.sh
+
+ENV HOME=/home/ci-agent \
+    NODE_ENV=production \
+    AGENT_DB_PATH=/var/lib/olixero-agent/state/agent.db \
+    AGENT_WORKSPACE_ROOT=/var/lib/olixero-agent/workspaces
+
+WORKDIR /opt/ci-agents
+USER ci-agent
+
+FROM runtime AS controller
+EXPOSE 8080
+CMD ["node", "/opt/ci-agents/dist/application/controller/main.js"]
+
+FROM runtime AS executor
+ARG TARGETARCH=amd64
+ARG OPENCODE_VERSION=1.17.18
+ARG GITEA_MCP_VERSION=1.3.0
+USER root
+RUN npm install --global --omit=dev "opencode-ai@${OPENCODE_VERSION}" \
+    && case "${TARGETARCH}" in \
+         amd64) asset="gitea-mcp_Linux_x86_64.tar.gz"; sha="99e144ee9821c8ef26dfb05daa3351435ed55eb56bd1b7418c4f7b573cc92ce2" ;; \
+         arm64) asset="gitea-mcp_Linux_arm64.tar.gz"; sha="07dd4b6823c145baee817ad664043cc26ce5903d0358693949b0ee2da18d4b62" ;; \
+         *) echo "Unsupported TARGETARCH: ${TARGETARCH}" >&2; exit 1 ;; \
+       esac \
+    && wget -q -O "/tmp/${asset}" "https://gitea.com/gitea/gitea-mcp/releases/download/v${GITEA_MCP_VERSION}/${asset}" \
+    && printf '%s  %s\n' "${sha}" "/tmp/${asset}" | sha256sum --check - \
+    && tar -xzf "/tmp/${asset}" -C /tmp \
+    && install -m 0755 /tmp/gitea-mcp /usr/local/bin/gitea-mcp \
+    && rm -f "/tmp/${asset}" /tmp/gitea-mcp
+
+COPY opencode /opt/ci-agents/opencode
+RUN chmod -R a-w /opt/ci-agents
+
+ENV XDG_DATA_HOME=/var/lib/opencode-agent/data \
+    XDG_CONFIG_HOME=/opt/ci-agents/empty-config \
+    XDG_CACHE_HOME=/var/lib/opencode-agent/cache \
+    OPENCODE_CONFIG_DIR=/opt/ci-agents/opencode \
+    OPENCODE_DISABLE_PROJECT_CONFIG=true \
+    OPENCODE_DISABLE_EXTERNAL_SKILLS=true
+
+USER ci-agent
+CMD ["node", "/opt/ci-agents/dist/application/execution/main.js"]