ryeos/Dockerfile.dev at main · leolilley/ryeos · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
# syntax=docker/dockerfile:1.7
#
# ryeosd-full:dev — fast local dev image.
# Copies host-built release binaries + already-published bundles
# instead of compiling inside the image. Run scripts/populate-bundles.sh
# on the host first.
#
# Build:
#   docker build -f Dockerfile.dev -t ryeosd-full:dev .
# Run (explicitly trust the dev/custom publisher baked into this image):
#   docker run -e RYEOS_TRUST_BAKED_PUBLISHERS=1 ryeosd-full:dev

# debian:trixie ships glibc 2.41+, matching modern host toolchains. The
# previous base (debian:bookworm-slim, glibc 2.36) refused to load
# host-built release binaries with `GLIBC_2.39 not found`.
FROM node:22-trixie-slim@sha256:4228fca437e45714a3ebd1d4ecd1dcc583cf79f5a940aa025e286b472d93b67c AS node-runtime

FROM debian:trixie-slim@sha256:28de0877c2189802884ccd20f15ee41c203573bd87bb6b883f5f46362d24c5c2

RUN apt-get update && apt-get install -y --no-install-recommends \
        ca-certificates python3 tini && \
    rm -rf /var/lib/apt/lists/*
RUN test -x /usr/bin/tini
RUN test -x /usr/bin/python3

COPY --from=node-runtime /usr/local/ /usr/local/

WORKDIR /app

# Host-built binaries (release profile, x86_64-unknown-linux-gnu).
COPY target/release/ryeosd             /usr/local/bin/ryeosd
COPY target/release/ryeos              /usr/local/bin/ryeos
COPY target/release/ryeos-core-tools   /usr/local/bin/ryeos-core-tools

# Already-published bundles (CAS rebuilt by populate-bundles.sh).
COPY bundles/.ai         /opt/ryeos/.ai
COPY bundles/core        /opt/ryeos/core
COPY bundles/central-auth /opt/ryeos/central-auth
COPY bundles/standard    /opt/ryeos/standard
COPY bundles/web         /opt/ryeos/web
COPY bundles/browser     /opt/ryeos/browser
COPY bundles/ryeos-ui     /opt/ryeos/ryeos-ui
COPY bundles/hosted-node /opt/ryeos/hosted-node
COPY bundles/codex       /opt/ryeos/codex
COPY bundles/render-sandbox /opt/ryeos/render-sandbox
COPY bundles/opencode    /opt/ryeos/opencode
COPY bundles/local-inference /opt/ryeos/local-inference

COPY deploy/entrypoint.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh

ENV HOME=/data/app
ENV RYEOS_APP_ROOT=/data/app
ENV RYEOS_INIT_NODE_PROFILE=full
EXPOSE 8000

# Image-level provenance only. The binary's own revision is baked in by the
# host build (ryeos-app/build.rs reads the local git SHA), since this image
# copies host-built binaries rather than compiling.
ARG VCS_REF=unknown
ARG BUILD_DATE=unknown
LABEL org.opencontainers.image.source="https://github.com/leolilley/ryeos"
LABEL org.opencontainers.image.revision="$VCS_REF"
LABEL org.opencontainers.image.created="$BUILD_DATE"

HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
  CMD ["python3", "-c", "import os,urllib.request;urllib.request.urlopen('http://127.0.0.1:'+os.environ.get('PORT','8000')+'/_ryeos/ready',timeout=3).read()"]

ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/entrypoint.sh"]