mirror of
https://github.com/Sea-Haven-Industries/open-swe.git
synced 2026-09-30 06:53:14 +00:00
0f6eaaea78
* chore: include ripgrep in sandbox image (#1728) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> (cherry picked from commit 129ddcf9a2fe8b3710535eb10098f80c98b47690) * feat: include Cargo in sandbox image (#1729) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> (cherry picked from commit 1ea03a4330cc9faac65157f3fb94842d074e0231) * fix: prefer LangSmith tools for trace links (#1751) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> (cherry picked from commit c69459adcafad4a59028232514cecb3bdaf0dfc0) * fix: add trace link to error banner (#1750) Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> (cherry picked from commit 5cb2e2bb3582d69241b386bb0852c6f6b40b2dbb) * fix: link issue PRs and prompt repo conventions (#1704) Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> (cherry picked from commit 22e024cb1ca080e233eb2cc164767446173a7870) * chore: reconcile triage ledger --------- Co-authored-by: Johannes du Plessis <johannes@langchain.dev> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com> Co-authored-by: Ramon Nogueira <ramon.nogueira@langchain.dev> Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com> Co-authored-by: Palash Shah <35114859+Palashio@users.noreply.github.com>
101 lines
3.9 KiB
Docker
101 lines
3.9 KiB
Docker
FROM python:3.14.6-slim-trixie
|
|
|
|
ARG DOCKER_CLI_VERSION=5:29.1.5-1~debian.13~trixie
|
|
ARG NODEJS_VERSION=24.18.0-1nodesource1
|
|
ARG UV_VERSION=0.9.26
|
|
ARG YARN_VERSION=4.12.0
|
|
ARG GH_VERSION=2.83.1
|
|
ARG SFW_VERSION=2.0.6
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
# Skip sfw's daily background update check at runtime. The check hits
|
|
# api.github.com/repos/SocketDev/sfw-free, which the sandbox proxy authenticates
|
|
# with the GitHub App installation token (no access to that repo), so it fails
|
|
# and the wrapper can't fall back to a binary it never managed to fetch. The
|
|
# initial download still runs at build time below, where egress is unrestricted.
|
|
ENV SFW_SKIP_UPDATE_CHECK=1
|
|
|
|
RUN apt-get update && apt-get install -y \
|
|
git \
|
|
curl \
|
|
wget \
|
|
ca-certificates \
|
|
gnupg \
|
|
lsb-release \
|
|
build-essential \
|
|
cargo \
|
|
openssh-client \
|
|
jq \
|
|
ripgrep \
|
|
unzip \
|
|
zip \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN install -m 0755 -d /etc/apt/keyrings \
|
|
&& curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
|
|
&& chmod a+r /etc/apt/keyrings/docker.asc \
|
|
&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian $(. /etc/os-release && echo \"$VERSION_CODENAME\") stable" \
|
|
| tee /etc/apt/sources.list.d/docker.list > /dev/null \
|
|
&& apt-get update \
|
|
&& apt-get install -y "docker-ce-cli=${DOCKER_CLI_VERSION}" \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN set -eux; \
|
|
arch="$(dpkg --print-architecture)"; \
|
|
case "${arch}" in \
|
|
amd64) gh_arch="amd64" ;; \
|
|
arm64) gh_arch="arm64" ;; \
|
|
*) echo "unsupported architecture: ${arch}" >&2; exit 1 ;; \
|
|
esac; \
|
|
curl -fsSL "https://github.com/cli/cli/releases/download/v${GH_VERSION}/gh_${GH_VERSION}_linux_${gh_arch}.deb" -o /tmp/gh.deb; \
|
|
apt-get update; \
|
|
apt-get install -y /tmp/gh.deb; \
|
|
rm -rf /tmp/gh.deb /var/lib/apt/lists/*
|
|
|
|
RUN set -eux; \
|
|
arch="$(dpkg --print-architecture)"; \
|
|
case "${arch}" in \
|
|
amd64) uv_arch="x86_64-unknown-linux-gnu"; uv_sha256="30ccbf0a66dc8727a02b0e245c583ee970bdafecf3a443c1686e1b30ec4939e8" ;; \
|
|
arm64) uv_arch="aarch64-unknown-linux-gnu"; uv_sha256="f71040c59798f79c44c08a7a1c1af7de95a8d334ea924b47b67ad6b9632be270" ;; \
|
|
*) echo "unsupported architecture: ${arch}" >&2; exit 1 ;; \
|
|
esac; \
|
|
curl -fsSL "https://github.com/astral-sh/uv/releases/download/${UV_VERSION}/uv-${uv_arch}.tar.gz" -o /tmp/uv.tar.gz; \
|
|
echo "${uv_sha256} /tmp/uv.tar.gz" | sha256sum -c -; \
|
|
tar -xzf /tmp/uv.tar.gz -C /tmp; \
|
|
install -m 0755 -d /root/.local/bin; \
|
|
install -m 0755 "/tmp/uv-${uv_arch}/uv" /root/.local/bin/uv; \
|
|
install -m 0755 "/tmp/uv-${uv_arch}/uvx" /root/.local/bin/uvx; \
|
|
rm -rf /tmp/uv.tar.gz "/tmp/uv-${uv_arch}"
|
|
|
|
ENV PATH=/root/.local/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
|
|
RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \
|
|
&& apt-get install -y "nodejs=${NODEJS_VERSION}" \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& corepack enable \
|
|
&& corepack prepare "yarn@${YARN_VERSION}" --activate \
|
|
&& npm i -g "sfw@${SFW_VERSION}" \
|
|
&& sfw --version \
|
|
&& test -e "$(npm root -g)/sfw/.sfw-cache/latest"
|
|
|
|
ENV GO_VERSION=1.23.5
|
|
|
|
RUN curl -fsSL "https://go.dev/dl/go${GO_VERSION}.linux-$(dpkg --print-architecture).tar.gz" | tar -C /usr/local -xz
|
|
|
|
ENV PATH=/usr/local/go/bin:/root/.local/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
ENV GOPATH=/root/go
|
|
ENV PATH=/root/go/bin:/usr/local/go/bin:/root/.local/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
|
|
|
|
WORKDIR /workspace
|
|
|
|
RUN echo "=== Installed versions ===" \
|
|
&& python --version \
|
|
&& uv --version \
|
|
&& node --version \
|
|
&& yarn --version \
|
|
&& sfw --version \
|
|
&& go version \
|
|
&& cargo --version \
|
|
&& docker --version \
|
|
&& git --version \
|
|
&& gh --version
|