opencode_remote/Dockerfile at main · rudik99/opencode_remote · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
FROM debian:bookworm-slim

ENV DEBIAN_FRONTEND=noninteractive \
    PATH="/home/opencode/.opencode/bin:/usr/local/bin:${PATH}"

RUN apt-get update && apt-get install -y --no-install-recommends \
      build-essential ca-certificates curl fd-find git git-lfs gh gnupg \
      jq less nano openssh-client procps python3 python3-pip ripgrep unzip \
 && ln -s /usr/bin/fdfind /usr/local/bin/fd \
 && rm -rf /var/lib/apt/lists/*

# Current Docker CLI with Buildx and Compose; the daemon runs in DinD.
RUN install -m 0755 -d /etc/apt/keyrings \
 && curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
 && chmod a+r /etc/apt/keyrings/docker.asc \
 && . /etc/os-release \
 && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian ${VERSION_CODENAME} stable" \
      > /etc/apt/sources.list.d/docker.list \
 && apt-get update \
 && apt-get install -y --no-install-recommends \
      docker-buildx-plugin docker-ce-cli docker-compose-plugin \
 && rm -rf /var/lib/apt/lists/*

# Node 22 is used by local MCP servers and JavaScript projects.
RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
 && apt-get install -y --no-install-recommends nodejs \
 && rm -rf /var/lib/apt/lists/*

# Native TypeScript 7 compiler and LSP. Project-local TypeScript remains untouched.
ARG TYPESCRIPT_VERSION=7.0.2
RUN npm install -g "typescript@${TYPESCRIPT_VERSION}" \
 && tsc --version

# Salesforce CLI provides workspace-local OAuth state for the official Salesforce MCP server.
ARG SALESFORCE_CLI_VERSION=latest
RUN npm install -g "@salesforce/cli@${SALESFORCE_CLI_VERSION}" \
 && sf --version

# Official Claude Code CLI for subscription-backed delegated tasks.
ARG CLAUDE_CODE_VERSION=latest
RUN npm install -g "@anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}" \
 && claude --version

RUN printf '#!/bin/sh\nexit 0\n' > /usr/local/bin/xdg-open \
 && chmod +x /usr/local/bin/xdg-open

COPY --chmod=0755 scripts/opencode-entrypoint.sh /usr/local/bin/opencode-entrypoint

ARG OPENCODE_UID=1000
ARG OPENCODE_GID=1000
RUN if getent group "${OPENCODE_GID}" >/dev/null; then \
      group_name=$(getent group "${OPENCODE_GID}" | cut -d: -f1); \
    else \
      group_name=opencode; \
      groupadd -g "${OPENCODE_GID}" "${group_name}"; \
    fi \
 && useradd -m -u "${OPENCODE_UID}" -g "${group_name}" -s /bin/bash opencode \
 && mkdir -p /workspace \
 && chown "${OPENCODE_UID}:${OPENCODE_GID}" /workspace

USER opencode
WORKDIR /home/opencode

ARG OPENCODE_VERSION=latest
RUN mkdir -p \
      /home/opencode/.ssh \
      /home/opencode/.config/opencode \
      /home/opencode/.local/share/opencode \
      /home/opencode/.opencode \
 && ssh-keyscan github.com >> /home/opencode/.ssh/known_hosts 2>/dev/null || true

RUN if [ "${OPENCODE_VERSION}" = "latest" ]; then \
      curl -fsSL https://opencode.ai/install | bash; \
    else \
      curl -fsSL https://opencode.ai/install | bash -s -- --version "${OPENCODE_VERSION}"; \
    fi

WORKDIR /workspace
ENTRYPOINT ["/usr/local/bin/opencode-entrypoint"]
CMD ["web", "--hostname", "0.0.0.0", "--port", "4096"]