wehub-resource-sync
39 lines
815 B
Docker
39 lines
815 B
Docker
# syntax=docker/dockerfile:1
|
|
FROM node:22-alpine
|
|
|
|
# Install runtime dependencies
|
|
RUN apk --no-cache add \
|
|
git \
|
|
bash \
|
|
python3 \
|
|
py3-pip \
|
|
curl \
|
|
&& npm install -g @anthropic-ai/claude-agent-sdk
|
|
|
|
# Create non-root user for security
|
|
RUN adduser -u 10001 -D -s /bin/bash sandboxuser
|
|
|
|
# Set working directory
|
|
WORKDIR /app
|
|
|
|
# Create output directory
|
|
RUN mkdir -p /output && chown sandboxuser:sandboxuser /output
|
|
|
|
# Copy execution script
|
|
COPY execute.js /app/execute.js
|
|
COPY package.json /app/package.json
|
|
|
|
# Install dependencies
|
|
RUN npm install --production && \
|
|
chown -R sandboxuser:sandboxuser /app
|
|
|
|
# Switch to non-root user
|
|
USER sandboxuser
|
|
|
|
# Set environment
|
|
ENV HOME=/home/sandboxuser
|
|
ENV NODE_ENV=production
|
|
|
|
# Default command (overridden by launcher)
|
|
CMD ["node", "/app/execute.js"]
|