mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-15 05:09:44 +08:00
45060f4492
* chore(gator): add gator gate skill * chore(gator): add sandbox launcher scaffold * chore(gator): add codex image and docs checks * chore(gator): fold approved provider policy rules * chore(gator): add deterministic reviewer runner * chore(gator): clarify ok-to-test comments * chore(gator): structure launcher harnesses * chore(gator): require e2e for dependabot * chore(gator): add codex refresh profile * chore(gator): wip manifest agent launcher * feat(agents): supervise watch cycles in sandbox * fix(agents): preserve gateway refresh state * fix(gator): continue human response threads * fix(agents): keep watch supervisor retrying * fix(agents): use refreshed Codex credential aliases * fix(gator): avoid misleading gh auth checks * docs(agents): remove architecture build update * fix(gator): use REST-backed GitHub writes * fix(agents): bake immutable agent payloads * fix(agents): upload writable agent workspace * fix(agents): surface gator watch progress * fix(agents): prevent codex stdin hang * fix(agents): align codex subagent input * fix(agents): heartbeat during active cycles * fix(agents): clean up heartbeat sleep * fix(agents): disable gh telemetry in codex harness * fix(agents): reconcile closed gator PRs * fix(agents): query closed gator PR labels separately * fix(agents): tolerate rotated credential placeholders * fix(agents): enforce gator same-sha comment guard Signed-off-by: John Myers <johntmyers@users.noreply.github.com> * docs(agents): scope gator trusted commentary Signed-off-by: John Myers <johntmyers@users.noreply.github.com> * fix(gator): treat reviewer failures as transient Signed-off-by: Evan Lezar <elezar@nvidia.com> * feat(agents): refine gator supervised workflow Signed-off-by: John Myers <johntmyers@users.noreply.github.com> * fix(agents): stream codex prompts via stdin Signed-off-by: John Myers <johntmyers@users.noreply.github.com> * docs(agents): clarify trusted gator responses Signed-off-by: John Myers <johntmyers@users.noreply.github.com> * refactor(agents): scope gator PR to scripts Signed-off-by: John Myers <johntmyers@users.noreply.github.com> --------- Signed-off-by: John Myers <johntmyers@users.noreply.github.com> Signed-off-by: Evan Lezar <elezar@nvidia.com> Co-authored-by: John Myers <johntmyers@users.noreply.github.com> Co-authored-by: Evan Lezar <elezar@nvidia.com>
99 lines
3.5 KiB
Docker
99 lines
3.5 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# Gator sandbox image.
|
|
#
|
|
# This mirrors the OpenShell Community base image's core system and developer
|
|
# tooling, but keeps the initial agent surface focused on Codex + GitHub tooling
|
|
# for the gator-gate workflow.
|
|
|
|
FROM nvcr.io/nvidia/base/ubuntu:noble-20251013 AS system
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive \
|
|
PYTHONDONTWRITEBYTECODE=1 \
|
|
PYTHONUNBUFFERED=1
|
|
|
|
WORKDIR /sandbox
|
|
|
|
# Core system dependencies copied from the community base sandbox image.
|
|
# iproute2: network namespace management (ip netns, veth pairs)
|
|
# iptables: legacy bypass detection (kept for transition)
|
|
# nftables: bypass detection; log + reject rules for direct connection diagnostics
|
|
# dnsutils: dig, nslookup
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
curl \
|
|
dnsutils \
|
|
iproute2 \
|
|
iptables \
|
|
nftables \
|
|
iputils-ping \
|
|
net-tools \
|
|
netcat-openbsd \
|
|
openssh-sftp-server \
|
|
procps \
|
|
traceroute \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN groupadd -r supervisor && useradd -r -g supervisor -s /usr/sbin/nologin supervisor && \
|
|
groupadd -r sandbox && useradd -r -g sandbox -d /sandbox -s /bin/bash sandbox
|
|
|
|
FROM system AS devtools
|
|
|
|
# Node.js 22 + build toolchain. Keep the default apt installs aligned with the
|
|
# community base image, then add the small CLI tools gator commonly needs.
|
|
RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \
|
|
apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
git \
|
|
jq \
|
|
less \
|
|
nodejs=22.22.1-1nodesource1 \
|
|
ripgrep \
|
|
vim-tiny \
|
|
nano \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& npm install -g npm@11.11.0
|
|
|
|
# GitHub CLI
|
|
RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
|
|
-o /usr/share/keyrings/githubcli-archive-keyring.gpg && \
|
|
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
|
|
> /etc/apt/sources.list.d/github-cli.list && \
|
|
apt-get update && apt-get install -y --no-install-recommends gh && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
ARG CODEX_VERSION=latest
|
|
RUN npm install -g "@openai/codex@${CODEX_VERSION}" && \
|
|
(npm cache clean --force >/dev/null 2>&1 || true) && \
|
|
codex --version
|
|
|
|
# Provider profiles include both /usr/bin and /usr/local/bin variants for common
|
|
# tools. Create the /usr/local/bin aliases in this image so sandbox symlink
|
|
# resolution does not warn about missing alternate paths during policy reloads.
|
|
RUN ln -sf /usr/bin/gh /usr/local/bin/gh && \
|
|
ln -sf /usr/bin/git /usr/local/bin/git && \
|
|
ln -sf /usr/bin/codex /usr/local/bin/codex
|
|
|
|
FROM devtools AS final
|
|
|
|
ENV PATH="/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin"
|
|
|
|
RUN mkdir -p /etc/openshell
|
|
COPY policy.yaml /etc/openshell/policy.yaml
|
|
COPY bin/gh /usr/local/bin/gh-gator
|
|
RUN rm -f /usr/local/bin/gh && \
|
|
cp /usr/local/bin/gh-gator /usr/local/bin/gh && \
|
|
chmod 755 /usr/local/bin/gh
|
|
|
|
RUN printf 'export PATH="/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/bin:/sbin"\nexport PS1="\\u@\\h:\\w\\$ "\n' \
|
|
> /sandbox/.bashrc && \
|
|
printf '[ -f ~/.bashrc ] && . ~/.bashrc\n' > /sandbox/.profile && \
|
|
chown -R sandbox:sandbox /sandbox
|
|
|
|
USER sandbox
|
|
|
|
ENTRYPOINT ["/bin/bash"]
|