build(docker): add core application image

2026-07-11 21:43:28 +02:00
parent 3ac0623247
commit 77923e501f
5 changed files with 272 additions and 0 deletions
@@ -0,0 +1,64 @@
+# syntax=docker/dockerfile:1
+FROM node:22.19.0-bookworm-slim AS node-runtime
+
+RUN npm install --global --ignore-scripts --no-audit --no-fund \
+      @earendil-works/pi-coding-agent@0.80.3 \
+    && pi --version
+
+FROM node:22.19.0-bookworm-slim AS backend-build
+WORKDIR /src/backend
+COPY backend/package.json backend/package-lock.json ./
+RUN npm ci --no-audit --no-fund
+COPY backend/ ./
+RUN npm run build \
+    && npm prune --omit=dev
+
+FROM node:22.19.0-bookworm-slim AS gate-deps
+WORKDIR /src/harness
+COPY harness/package.json harness/package-lock.json ./
+RUN npm ci --no-audit --no-fund
+
+FROM python:3.12-slim-bookworm AS runtime
+
+RUN apt-get update \
+    && apt-get install --yes --no-install-recommends ca-certificates curl \
+    && rm -rf /var/lib/apt/lists/* \
+    && useradd --create-home --uid 10001 thoth \
+    && mkdir -p /app/backend /app/docker/smoke /data/settings \
+    && chown -R thoth:thoth /data
+
+COPY --from=node-runtime /usr/local/bin/node /usr/local/bin/node
+COPY --from=node-runtime /usr/local/lib/node_modules /usr/local/lib/node_modules
+RUN ln -s /usr/local/lib/node_modules/@earendil-works/pi-coding-agent/dist/cli.js /usr/local/bin/pi \
+    && node --version \
+    && pi --version
+
+WORKDIR /app
+COPY harness/ /app/harness/
+COPY --from=gate-deps /src/harness/node_modules /app/harness/node_modules
+RUN python -m venv /opt/venv \
+    && /opt/venv/bin/pip install --no-cache-dir /app/harness
+
+COPY --from=backend-build /src/backend/dist /app/backend/dist
+COPY --from=backend-build /src/backend/node_modules /app/backend/node_modules
+COPY docker/core-entrypoint.sh /app/docker/core-entrypoint.sh
+COPY docker/smoke/core-smoke.sh /app/docker/smoke/core-smoke.sh
+RUN chmod 0555 /app/docker/core-entrypoint.sh /app/docker/smoke/core-smoke.sh \
+    && test ! -e /app/harness/.env \
+    && test ! -d /app/harness/workspaces
+
+ENV PATH="/opt/venv/bin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" \
+    HOST=0.0.0.0 \
+    PORT=8787 \
+    THT_HARNESS_DIR=/app/harness \
+    THT_BIN=/opt/venv/bin/tht \
+    PI_BIN=/usr/local/bin/pi \
+    THT_DATA_ROOT=/data \
+    SETTINGS_FILE=/data/settings/settings.json \
+    HOME=/home/thoth
+
+WORKDIR /app/harness
+EXPOSE 8787
+USER 10001:10001
+ENTRYPOINT ["/app/docker/core-entrypoint.sh"]
+CMD ["server"]