tinycode-container/ContainerFile at main · bobbyjohnstx/tinycode-container · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# syntax=docker/dockerfile:1
# tinycode-container: tinycode (web mode) for Kubernetes/OpenShift
# Build: podman build -f ContainerFile --platform linux/amd64 -t ghcr.io/bobbyjohnstx/tinycode-container:latest .
# Multi-arch: podman build -f ContainerFile --platform linux/amd64,linux/arm64 ...

ARG TARGETARCH
ARG TINYCODE_VERSION=2.6.1

# Stage 1: Download pre-built release binary (no Go toolchain needed)
FROM registry.access.redhat.com/ubi9/ubi-minimal AS fetcher

ARG TARGETARCH
ARG TINYCODE_VERSION

RUN microdnf install -y tar gzip && microdnf clean all

RUN ARCH=${TARGETARCH:-amd64} && \
    curl -fsSL "https://github.com/bobbyjohnstx/tinycode/releases/download/v${TINYCODE_VERSION}/tinycode-linux-${ARCH}.tar.gz" \
      -o /tmp/tinycode.tar.gz && \
    tar xzf /tmp/tinycode.tar.gz -C /tmp && \
    mv /tmp/tinycode-linux-${ARCH}/tinycode /tmp/tinycode-binary && \
    chmod +x /tmp/tinycode-binary && \
    rm -rf /tmp/tinycode.tar.gz /tmp/tinycode-linux-*

# Download plugin binaries from the release
RUN ARCH=${TARGETARCH:-amd64} && \
    mkdir -p /tmp/plugins && \
    if curl -fsSL "https://github.com/bobbyjohnstx/tinycode/releases/download/v${TINYCODE_VERSION}/tinycode-plugins-linux-${ARCH}.tar.gz" \
      -o /tmp/plugins.tar.gz 2>/dev/null; then \
      tar xzf /tmp/plugins.tar.gz -C /tmp/plugins && \
      rm -f /tmp/plugins.tar.gz; \
    else \
      echo "Plugin bundle not available — container will run without bundled plugins"; \
    fi

# Stage 2: Runtime — UBI9 minimal with entrypoint
FROM registry.access.redhat.com/ubi9/ubi-minimal AS runtime

ARG TARGETARCH

RUN microdnf install -y shadow-utils tar gzip git-core && \
    microdnf clean all

# Create non-root user (UID 1001, GID 0 for OpenShift arbitrary UID support)
RUN useradd -u 1001 -r -g 0 -m -s /sbin/nologin tinycode && \
    microdnf remove -y shadow-utils && microdnf clean all

# Copy tinycode binary
COPY --from=fetcher /tmp/tinycode-binary /usr/local/bin/tinycode

# Copy plugin binaries (if available from release bundle)
COPY --from=fetcher /tmp/plugins/ /opt/tinycode-plugins/

# Copy entrypoint script
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh

# Stage bundled agents and skills in a non-PVC path.
# The entrypoint copies them into the PVC-mounted config dir on startup.
# (PVC at ~/.config/tinycode/ shadows anything COPY'd there at build time.)
COPY config/agent /opt/tinycode-defaults/agent
COPY config/skills /opt/tinycode-defaults/skills

ENV XDG_DATA_HOME=/home/tinycode/.local/share \
    XDG_CONFIG_HOME=/home/tinycode/.config \
    XDG_STATE_HOME=/home/tinycode/.local/state \
    XDG_CACHE_HOME=/home/tinycode/.cache \
    HOME=/home/tinycode \
    SHELL=/bin/sh \
    PATH="/home/tinycode/.local/bin:/opt/tinycode-plugins:${PATH}"

RUN mkdir -p \
    /home/tinycode/.local/share/tinycode \
    /home/tinycode/.config/tinycode \
    /home/tinycode/.local/state/tinycode \
    /home/tinycode/.cache/tinycode && \
    chown -R 1001:0 /home/tinycode && \
    chmod -R g=u /home/tinycode

EXPOSE 4096
USER 1001
WORKDIR /home/tinycode

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]