tinycode-container/ContainerFile at main · bobbyjohnstx/tinycode-container · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
# syntax=docker/dockerfile:1
# tinycode-container: tinycode (web mode) with oh-my-tiny built-in
# Build: podman build -f ContainerFile --platform linux/amd64 -t ghcr.io/bjohns/tinycode-container:latest .
# Multi-arch: podman build -f ContainerFile --platform linux/amd64,linux/arm64 ...

ARG TARGETARCH
ARG TINYCODE_REF=main

# Stage 1: Build tinycode binary
FROM registry.access.redhat.com/ubi9/ubi AS builder

ARG TARGETARCH

RUN dnf install -y git unzip make gcc gcc-c++ && dnf clean all

# Install Bun (tinycode build toolchain)
RUN curl -fsSL https://bun.sh/install | bash
ENV PATH="/root/.bun/bin:$PATH"

# Clone tinycode from GitHub (public repo)
RUN git clone https://github.com/bobbyjohnstx/tinycode.git /build/tinycode

WORKDIR /build/tinycode
ARG TINYCODE_REF
RUN git checkout $TINYCODE_REF
RUN bun install --frozen-lockfile
# Build single self-contained binary (script/build.ts:263 — Bun compile)
RUN bun run --cwd packages/tinycode build --single

FROM registry.access.redhat.com/ubi9/ubi AS runtime

ARG TARGETARCH

RUN dnf install -y shadow-utils tar gzip git-core && dnf clean all && \
    ARCH=$(uname -m) && \
    rpm --import https://www.centos.org/keys/RPM-GPG-KEY-CentOS-Official && \
    rpm -Uvh --nodeps \
      "https://mirror.stream.centos.org/9-stream/BaseOS/${ARCH}/os/Packages/tmux-3.2a-5.el9.${ARCH}.rpm" && \
    rpm -Uvh --nodeps \
      "https://mirror.stream.centos.org/9-stream/BaseOS/${ARCH}/os/Packages/libutempter-1.2.1-6.el9.${ARCH}.rpm" 2>/dev/null || true

# Create non-root user (UID 1001, GID 0 for OpenShift arbitrary UID support)
RUN useradd -u 1001 -r -g 0 -m -s /sbin/nologin tinycode && \
    dnf remove -y shadow-utils && dnf clean all

# Copy tinycode self-contained binary
COPY --from=builder /build/tinycode/packages/tinycode/dist/tinycode-linux-*/bin/tinycode /usr/local/bin/tinycode

# Copy bundled plugins (npm packages pre-installed in plugins/)
COPY plugins/ /opt/tinycode-plugins/

# Copy entrypoint script
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh

# Stage bundled agents and skills in a non-PVC path.
# The entrypoint copies them into the PVC-mounted config dir on startup.
# (PVC at ~/.config/tinycode/ shadows anything COPY'd there at build time.)
COPY config/agent /opt/tinycode-defaults/agent
COPY config/skills /opt/tinycode-defaults/skills

ENV XDG_DATA_HOME=/home/tinycode/.local/share \
    XDG_CONFIG_HOME=/home/tinycode/.config \
    XDG_STATE_HOME=/home/tinycode/.local/state \
    XDG_CACHE_HOME=/home/tinycode/.cache \
    HOME=/home/tinycode \
    SHELL=/bin/sh \
    PATH="/home/tinycode/.local/bin:${PATH}"

RUN mkdir -p \
    /home/tinycode/.local/share/tinycode \
    /home/tinycode/.config/tinycode \
    /home/tinycode/.local/state/tinycode \
    /home/tinycode/.cache/tinycode && \
    chown -R 1001:0 /home/tinycode && \
    chmod -R g=u /home/tinycode

EXPOSE 4096
USER 1001
WORKDIR /home/tinycode

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]