mirror of
https://github.com/Monadical-SAS/cubbi.git
synced 2025-12-21 20:59:05 +00:00
71 lines
2.1 KiB
Docker
71 lines
2.1 KiB
Docker
FROM python:3.12-slim
|
|
|
|
LABEL maintainer="team@monadical.com"
|
|
LABEL description="Goose with MCP servers"
|
|
|
|
# Install system dependencies including gosu for user switching and shadow for useradd/groupadd
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
gosu \
|
|
passwd \
|
|
git \
|
|
openssh-server \
|
|
bash \
|
|
curl \
|
|
bzip2 \
|
|
iputils-ping \
|
|
iproute2 \
|
|
libxcb1 \
|
|
libdbus-1-3 \
|
|
nano \
|
|
vim \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Set up SSH server directory (configuration will be handled by entrypoint if needed)
|
|
RUN mkdir -p /var/run/sshd && chmod 0755 /var/run/sshd
|
|
# Do NOT enable root login or set root password here
|
|
|
|
# Install python dependencies
|
|
# This is done before copying scripts for better cache management
|
|
# Consider moving this WORKDIR /tmp section if goose CLI isn't strictly needed for base image setup
|
|
WORKDIR /tmp
|
|
RUN curl -fsSL https://github.com/block/goose/releases/download/stable/download_cli.sh -o download_cli.sh && \
|
|
chmod +x download_cli.sh && \
|
|
./download_cli.sh && \
|
|
# Move goose to a system-wide location
|
|
mv /root/.local/bin/goose /usr/local/bin/goose && \
|
|
# Clean up
|
|
rm -rf /root/.local download_cli.sh /tmp/goose-*
|
|
|
|
# Create app directory
|
|
WORKDIR /app
|
|
|
|
# Copy initialization scripts
|
|
COPY mc-init.sh /mc-init.sh
|
|
COPY entrypoint.sh /entrypoint.sh
|
|
COPY mc-driver.yaml /mc-driver.yaml
|
|
COPY init-status.sh /init-status.sh
|
|
COPY update-goose-config.sh /usr/local/bin/update-goose-config.sh
|
|
|
|
# Extend env via bashrc
|
|
|
|
# Make scripts executable
|
|
RUN chmod +x /mc-init.sh /entrypoint.sh /init-status.sh \
|
|
/usr/local/bin/update-goose-config.sh
|
|
|
|
# Set up initialization status check on login
|
|
RUN echo '[ -x /init-status.sh ] && /init-status.sh' >> /etc/bash.bashrc
|
|
|
|
# Set up environment
|
|
ENV PYTHONUNBUFFERED=1
|
|
ENV PYTHONDONTWRITEBYTECODE=1
|
|
# Set WORKDIR to /app, common practice and expected by mc-init.sh
|
|
WORKDIR /app
|
|
|
|
# Expose ports
|
|
EXPOSE 8000 22
|
|
|
|
# Set entrypoint - container starts as root, entrypoint handles user switching
|
|
ENTRYPOINT ["/entrypoint.sh"]
|
|
# Default command if none is provided (entrypoint will run this via gosu)
|
|
CMD ["tail", "-f", "/dev/null"]
|