mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-25 03:45:46 -06:00
Peter Steinberger
234df15a6d
* build(deps): refresh dependencies after cooldown Apply dependency, toolchain, action, image, and exact tool updates released by the inclusive 2026-08-16 seven-day cutoff. Adapt owner boundaries for the resulting CUA, logging, Teams, Markdown, native, and test-harness contract changes while retaining versions blocked by upstream compatibility constraints. * fix(ui): align markdown renderer env typing * fix(deps): align postcss and mistral peer contracts * fix(deps): repair refreshed dependency contracts * fix(deps): retain tslog startup budget * fix(ci): verify Android tools with SHA-256 * fix(ci): fence Android SDK cache version
52 lines
2.0 KiB
Docker
52 lines
2.0 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
FROM ubuntu:24.04@sha256:d78ab76437b1afc5f01e223d6bf0172763f404bb166441328845adbef44518cb
|
|
|
|
# Smoke images are pinned and short-lived, so skip distro upgrades here and
|
|
# spend the time budget on installer coverage instead.
|
|
RUN --mount=type=cache,id=openclaw-install-sh-nonroot-apt-cache,target=/var/cache/apt,sharing=locked \
|
|
--mount=type=cache,id=openclaw-install-sh-nonroot-apt-lists,target=/var/lib/apt,sharing=locked \
|
|
set -eux; \
|
|
for attempt in 1 2 3; do \
|
|
if apt-get update -o Acquire::Retries=3; then break; fi; \
|
|
echo "apt-get update failed (attempt ${attempt})" >&2; \
|
|
if [ "${attempt}" -eq 3 ]; then exit 1; fi; \
|
|
sleep 3; \
|
|
done; \
|
|
apt-get -o Acquire::Retries=3 install -y --no-install-recommends \
|
|
bash \
|
|
ca-certificates \
|
|
curl \
|
|
g++ \
|
|
make \
|
|
python3 \
|
|
sudo
|
|
|
|
# Preinstall the supported Node runtime in a cacheable build layer so the
|
|
# non-root smoke covers user-local npm prefixing and missing git without paying
|
|
# the full NodeSource bootstrap cost on every container run.
|
|
RUN --mount=type=cache,id=openclaw-install-sh-nonroot-apt-cache,target=/var/cache/apt,sharing=locked \
|
|
--mount=type=cache,id=openclaw-install-sh-nonroot-apt-lists,target=/var/lib/apt,sharing=locked \
|
|
set -eux; \
|
|
installer="$(mktemp)"; \
|
|
curl -fsSL --connect-timeout 10 --max-time 120 -o "$installer" https://deb.nodesource.com/setup_24.x; \
|
|
bash "$installer"; \
|
|
rm -f "$installer"; \
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends nodejs
|
|
|
|
RUN useradd -m -s /bin/bash app \
|
|
&& echo "app ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/app
|
|
|
|
USER app
|
|
WORKDIR /home/app
|
|
|
|
ENV NPM_CONFIG_FUND=false
|
|
ENV NPM_CONFIG_AUDIT=false
|
|
ENV NPM_CONFIG_UPDATE_NOTIFIER=false
|
|
|
|
COPY install-sh-common/cli-verify.sh /usr/local/install-sh-common/cli-verify.sh
|
|
COPY install-sh-common/version-parse.sh /usr/local/install-sh-common/version-parse.sh
|
|
COPY --chmod=755 install-sh-nonroot/run.sh /usr/local/bin/openclaw-install-nonroot
|
|
|
|
ENTRYPOINT ["/usr/local/bin/openclaw-install-nonroot"]
|