| # debian.sh --arch 'amd64' out/ 'bookworm' '@1775433600' |
| ARG TARGETARCH=amd64 |
| ARG BUN_VERSION=1.3.11 |
| ARG JUST_VERSION=1.50.0 |
| ENV DEBIAN_FRONTEND=noninteractive |
| RUN |3 TARGETARCH=amd64 BUN_VERSION=1.3.11 JUST_VERSION=1.50.0 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends ca-certificates curl git python3 unzip && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN |3 TARGETARCH=amd64 BUN_VERSION=1.3.11 JUST_VERSION=1.50.0 /bin/sh -c set -eux; case "${TARGETARCH}" in amd64) BARCH=x64 ;; arm64) BARCH=aarch64 ;; *) echo "unsupported arch: ${TARGETARCH}" >&2 && exit 1 ;; esac; curl -fsSL "https://github.com/oven-sh/bun/releases/download/bun-v${BUN_VERSION}/bun-linux-${BARCH}.zip" -o /tmp/bun.zip; unzip -q /tmp/bun.zip -d /tmp/bun-dir; install -m 0755 "/tmp/bun-dir/bun-linux-${BARCH}/bun" /usr/local/bin/bun; rm -rf /tmp/bun.zip /tmp/bun-dir; bun --version # buildkit |
| RUN |3 TARGETARCH=amd64 BUN_VERSION=1.3.11 JUST_VERSION=1.50.0 /bin/sh -c set -eux; case "${TARGETARCH}" in amd64) JUST_TARGET=x86_64-unknown-linux-musl; JUST_SHA=27e011cd6328fadd632e59233d2cf5f18460b8a8c4269acd324c1a8669f34db0 ;; arm64) JUST_TARGET=aarch64-unknown-linux-musl; JUST_SHA=3beb4967ce05883cf09ac12d6d128166eb4c6d0b03eff74b61018a6880655d7d ;; *) echo "unsupported arch: ${TARGETARCH}" >&2 && exit 1 ;; esac; curl -fsSL "https://github.com/casey/just/releases/download/${JUST_VERSION}/just-${JUST_VERSION}-${JUST_TARGET}.tar.gz" -o /tmp/just.tgz; echo "${JUST_SHA} /tmp/just.tgz" | sha256sum -c -; mkdir -p /tmp/just-extract; tar -xzf /tmp/just.tgz -C /tmp/just-extract just; install -m 0755 /tmp/just-extract/just /usr/local/bin/just; rm -rf /tmp/just.tgz /tmp/just-extract; just --version # buildkit |
| WORKDIR /workspace |
| ARG TARGETARCH=amd64 |
| ENV DEBIAN_FRONTEND=noninteractive |
| RUN |1 TARGETARCH=amd64 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends python3-pip && rm -rf /var/lib/apt/lists/* # buildkit |
| COPY scripts/shell-stream-hook.sh /usr/local/bin/shell-stream-hook # buildkit |
| COPY scripts/cl-shell-stream-cap.sh /usr/local/bin/cl-shell-stream-cap # buildkit |
| RUN |1 TARGETARCH=amd64 /bin/sh -c chmod 0755 /usr/local/bin/shell-stream-hook /usr/local/bin/cl-shell-stream-cap # buildkit |
| ARG RTK_VERSION=0.37.2 |
| RUN |2 TARGETARCH=amd64 RTK_VERSION=0.37.2 /bin/sh -c set -eux; case "${TARGETARCH}" in amd64) RTK_TARGET=x86_64-unknown-linux-musl; RTK_SHA=3dfb7a05636a68687ba1c5aa696fa8d5fcb494447ded86d9eb8b88b7100a37c6 ;; arm64) RTK_TARGET=aarch64-unknown-linux-gnu; RTK_SHA=1d8d7fcca6cb05e1867c08bb4e5aa5f107c037c607131e511b726ae33ac35a47 ;; *) echo "unsupported arch: ${TARGETARCH}" >&2 && exit 1 ;; esac; curl -fsSL "https://github.com/rtk-ai/rtk/releases/download/v${RTK_VERSION}/rtk-${RTK_TARGET}.tar.gz" -o /tmp/rtk.tgz; echo "${RTK_SHA} /tmp/rtk.tgz" | sha256sum -c -; tar -xzf /tmp/rtk.tgz -C /tmp; install -m 0755 /tmp/rtk /usr/local/bin/rtk; rm -rf /tmp/rtk /tmp/rtk.tgz; rtk --version # buildkit |
| COPY package.json bun.lock tsconfig.base.json tsconfig.json /tmp/cmgr/ # buildkit |
| COPY apps/forge-mcp/ /tmp/cmgr/apps/forge-mcp/ # buildkit |
| COPY apps/server/ /tmp/cmgr/apps/server/ # buildkit |
| COPY apps/web/package.json /tmp/cmgr/apps/web/package.json # buildkit |
| COPY packages/ /tmp/cmgr/packages/ # buildkit |
| RUN |2 TARGETARCH=amd64 RTK_VERSION=0.37.2 /bin/sh -c cd /tmp/cmgr && bun install --frozen-lockfile && bun build apps/forge-mcp/src/main.ts --compile --outfile /usr/local/bin/forge-mcp && rm -rf /tmp/cmgr # buildkit |
| COPY vendor/penpot-mcp-server/ /tmp/penpot-mcp-server/ # buildkit |
| RUN |2 TARGETARCH=amd64 RTK_VERSION=0.37.2 /bin/sh -c pip install --no-cache-dir --break-system-packages /tmp/penpot-mcp-server/ && rm -rf /tmp/penpot-mcp-server/ # buildkit |
| ENV DISABLE_AUTOUPDATER=1 |
| RUN |2 TARGETARCH=amd64 RTK_VERSION=0.37.2 /bin/sh -c set -eux; case "${TARGETARCH}" in amd64) CC_PKG=claude-code-linux-x64 ;; arm64) CC_PKG=claude-code-linux-arm64 ;; *) echo "unsupported arch: ${TARGETARCH}" >&2 && exit 1 ;; esac; mkdir -p /opt/claude-code; tarball_url=$(curl -fsSL "https://registry.npmjs.org/@anthropic-ai/${CC_PKG}/latest" | grep -oE '"tarball":"[^"]+"' | head -1 | cut -d\" -f4); [ -n "$tarball_url" ] || { echo "failed to resolve ${CC_PKG} latest tarball" >&2; exit 1; }; curl -fsSL "$tarball_url" | tar -xz -C /opt/claude-code --strip-components=1; install -m 0755 /opt/claude-code/claude /usr/local/bin/claude; rm -rf /opt/claude-code # buildkit |
| ARG CURSOR_AGENT_VERSION=2026.05.09-0afadcc |
| RUN |3 TARGETARCH=amd64 RTK_VERSION=0.37.2 CURSOR_AGENT_VERSION=2026.05.09-0afadcc /bin/sh -c set -eux; case "${TARGETARCH}" in amd64) ARCH=x64 ;; arm64) ARCH=arm64 ;; *) echo "unsupported arch: ${TARGETARCH}" >&2 && exit 1 ;; esac; mkdir -p /opt/cursor-agent; curl -fsSL "https://downloads.cursor.com/lab/${CURSOR_AGENT_VERSION}/linux/${ARCH}/agent-cli-package.tar.gz" | tar -xz -C /opt/cursor-agent --strip-components=1; chmod 0755 /opt/cursor-agent/cursor-agent /opt/cursor-agent/node; ln -sf /opt/cursor-agent/cursor-agent /usr/local/bin/cursor-agent # buildkit |
| ENV PLAYWRIGHT_BROWSERS_PATH=/opt/ms-playwright |
| RUN |3 TARGETARCH=amd64 RTK_VERSION=0.37.2 CURSOR_AGENT_VERSION=2026.05.09-0afadcc /bin/sh -c bun x playwright@latest install --with-deps chromium && chmod -R a+rX /opt/ms-playwright && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN |3 TARGETARCH=amd64 RTK_VERSION=0.37.2 CURSOR_AGENT_VERSION=2026.05.09-0afadcc /bin/sh -c groupadd --gid 1000 claude && useradd --uid 1000 --gid 1000 --shell /bin/bash --create-home claude # buildkit |
| RUN |3 TARGETARCH=amd64 RTK_VERSION=0.37.2 CURSOR_AGENT_VERSION=2026.05.09-0afadcc /bin/sh -c install -d -o claude -g claude -m 0755 /state && install -d -o claude -g claude -m 0755 /home/claude/.config && install -d -o claude -g claude -m 0755 /home/claude/.config/claude-code && install -d -o claude -g claude -m 0755 /home/claude/.config/rtk # buildkit |
| RUN |3 TARGETARCH=amd64 RTK_VERSION=0.37.2 CURSOR_AGENT_VERSION=2026.05.09-0afadcc /bin/sh -c printf '[telemetry]\nconsent_given = false\nenabled = false\n' > /home/claude/.config/rtk/config.toml && chown claude:claude /home/claude/.config/rtk/config.toml && chmod 0644 /home/claude/.config/rtk/config.toml # buildkit |
| USER claude |
| WORKDIR /home/claude |
| CMD ["sleep" "infinity"] |
