Files
OpenShell/deploy/docker/Dockerfile.supervisor

20 lines
773 B
Docker

# syntax=docker/dockerfile:1.4
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0
# The dynamically linked GNU supervisor binary is staged under
# deploy/docker/.build/prebuilt-binaries/<arch>/.
# Keep the GNU runtime and CA roots without a shell or unused native TLS libraries.
# Compute drivers set the runtime UID; direct runs default to an unprivileged user.
FROM gcr.io/distroless/base-nossl-debian13@sha256:af5cb8dd589b8520b8c06bebb9efb73d7e16406cab58e85c51761fff49d370a0 AS supervisor
ARG TARGETARCH
COPY --chmod=0555 deploy/docker/.build/prebuilt-binaries/${TARGETARCH}/openshell-supervisor /openshell-supervisor
USER 65532:65532
ENTRYPOINT ["/openshell-supervisor"]