| # debian.sh --arch 'amd64' out/ 'bookworm' '@1782172800' |
| RUN /bin/sh -c groupadd --gid 1000 node && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit |
| ENV NODE_VERSION=26.4.0 |
| RUN /bin/sh -c ARCH= OPENSSL_ARCH= && dpkgArch="$(dpkg --print-architecture)" && case "${dpkgArch##*-}" in amd64) ARCH='x64' OPENSSL_ARCH='linux-x86_64';; ppc64el) ARCH='ppc64le' OPENSSL_ARCH='linux-ppc64le';; s390x) ARCH='s390x' OPENSSL_ARCH='linux*-s390x';; arm64) ARCH='arm64' OPENSSL_ARCH='linux-aarch64';; armhf) ARCH='armv7l' OPENSSL_ARCH='linux-armv4';; *) echo "unsupported architecture"; exit 1 ;; esac && set -ex && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr xz-utils libatomic1 --no-install-recommends && rm -rf /var/lib/apt/lists/* && export GNUPGHOME="$(mktemp -d)" && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \; && apt-mark auto '.*' > /dev/null && find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && ln -s /usr/local/bin/node /usr/local/bin/nodejs && node --version && npm --version && rm -rf /tmp/* # buildkit |
| COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["node"] |
| USER root |
| /bin/sh -c apt-get update && apt-get install -y --no-install-recommends python3 python3-pip python3-venv build-essential curl file git procps ripgrep jq ca-certificates imagemagick ffmpeg && printf '%s\n' '#!/bin/sh' 'case "$1" in' ' identify|convert|mogrify|compare|composite|animate|display|montage|stream|import|conjure) cmd="$1"; shift; exec "$cmd" "$@" ;;' ' *) exec convert "$@" ;;' 'esac' > /usr/local/bin/magick && chmod 755 /usr/local/bin/magick && rm -rf /var/lib/apt/lists/* |
| /bin/sh -c mkdir -p -m 755 /etc/apt/keyrings && curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg -o /etc/apt/keyrings/githubcli-archive-keyring.gpg && chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" > /etc/apt/sources.list.d/github-cli.list && apt-get update && apt-get install -y --no-install-recommends gh && rm -rf /var/lib/apt/lists/* |
| /bin/sh -c git config --system user.name "SteelDynamite" && git config --system user.email "196822204+SteelDynamite@users.noreply.github.com" && git config --system credential.helper '!gh auth git-credential' |
| /bin/sh -c BX_INSTALL_DIR=/usr/local/bin sh -c "$(curl -fsSL https://raw.githubusercontent.com/brave/brave-search-cli/main/scripts/install.sh)" && python3 -m venv /opt/agent-tools && /opt/agent-tools/bin/pip install --no-cache-dir --upgrade pip && /opt/agent-tools/bin/pip install --no-cache-dir jina-cli youtube-transcript-api 'markitdown[all]' && ln -s /opt/agent-tools/bin/jina /usr/local/bin/jina && ln -s /opt/agent-tools/bin/markitdown /usr/local/bin/markitdown && arch="$(dpkg --print-architecture)" && case "$arch" in amd64) slack_asset=slackcli-linux; unity_arch=amd64 ;; arm64) slack_asset=slackcli-linux-arm64; unity_arch=arm64 ;; *) echo "unsupported architecture: $arch" >&2; exit 1 ;; esac && slack_version="$(curl -fsSL https://api.github.com/repos/shaharia-lab/slackcli/releases/latest | jq -r .tag_name)" && curl -fsSL "https://github.com/shaharia-lab/slackcli/releases/download/${slack_version}/${slack_asset}" -o /usr/local/bin/slackcli && chmod 755 /usr/local/bin/slackcli && curl -fsSL "https://github.com/youngwoocho02/unity-cli/releases/latest/download/unity-cli-linux-${unity_arch}" -o /usr/local/bin/unity-cli && chmod 755 /usr/local/bin/unity-cli && bx --version && jina --version && slackcli --version && unity-cli version |
| ARG PASEO_VERSION |
| ARG PASEO_VERSION PI_AGENT_VERSION |
| |2 PASEO_VERSION=0.1.103 PI_AGENT_VERSION=0.80.3 /bin/sh -c npm install -g @getpaseo/cli@${PASEO_VERSION} @earendil-works/pi-coding-agent@${PI_AGENT_VERSION} |
| ENV PYTHONPATH=/opt/agent-tools/lib/python3.11/site-packages |
| |2 PASEO_VERSION=0.1.103 PI_AGENT_VERSION=0.80.3 /bin/sh -c install -d -o node -g node -m 755 /home/node/.config /home/node/.local /home/node/.local/share /home/node/.local/state /home/node/.cache /home/node/.paseo /home/node/.pi |
| USER node |
| WORKDIR /projects |
| EXPOSE 6767 |
| ENTRYPOINT ["paseo", "daemon", "start", "--foreground", "--listen", "0.0.0.0:6767", "--home", "/home/node/.paseo", "--hostnames", "paseo.steeldynamite.com", "--no-relay"] |
