Local-Codex-for-Enterprise/Dockerfile at main · Joseffb/Local-Codex-for-Enterprise · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
ARG RUST_VERSION=1.95.0

FROM rust:${RUST_VERSION}-bookworm AS builder

ARG DEBIAN_FRONTEND=noninteractive
ARG BUILD_PROFILE=release
ARG CARGO_PROFILE_RELEASE_LTO=thin
ARG CARGO_PROFILE_RELEASE_CODEGEN_UNITS=16

RUN apt-get update \
    && apt-get install -y --no-install-recommends \
        build-essential \
        ca-certificates \
        clang \
        cmake \
        git \
        libsqlite3-dev \
        libssl-dev \
        pkg-config \
        protobuf-compiler \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /src
COPY . .

RUN --mount=type=cache,target=/usr/local/cargo/registry \
    --mount=type=cache,target=/src/codex-rs/target \
    cd codex-rs \
    && case "$BUILD_PROFILE" in \
        release) \
            CARGO_PROFILE_RELEASE_LTO="$CARGO_PROFILE_RELEASE_LTO" CARGO_PROFILE_RELEASE_CODEGEN_UNITS="$CARGO_PROFILE_RELEASE_CODEGEN_UNITS" cargo build --locked --release -p codex-cli --bin codex -p codex-enterprise-server --bin codex-enterprise-server --bin codex-worker-runtime-broker -p codex-app-server --bin codex-app-server \
            && install -m 0755 target/release/codex /usr/local/bin/codex \
            && install -m 0755 target/release/codex-enterprise-server /usr/local/bin/codex-enterprise-server \
            && install -m 0755 target/release/codex-worker-runtime-broker /usr/local/bin/codex-worker-runtime-broker \
            && install -m 0755 target/release/codex-app-server /usr/local/bin/codex-app-server ;; \
        dev) \
            cargo build --locked -p codex-cli --bin codex -p codex-enterprise-server --bin codex-enterprise-server --bin codex-worker-runtime-broker -p codex-app-server --bin codex-app-server \
            && install -m 0755 target/debug/codex /usr/local/bin/codex \
            && install -m 0755 target/debug/codex-enterprise-server /usr/local/bin/codex-enterprise-server \
            && install -m 0755 target/debug/codex-worker-runtime-broker /usr/local/bin/codex-worker-runtime-broker \
            && install -m 0755 target/debug/codex-app-server /usr/local/bin/codex-app-server ;; \
        *) echo "unsupported BUILD_PROFILE=$BUILD_PROFILE; use release or dev" >&2; exit 1 ;; \
    esac

FROM debian:bookworm-slim AS runtime

ARG DEBIAN_FRONTEND=noninteractive

RUN apt-get update \
    && apt-get install -y --no-install-recommends \
        bubblewrap \
        ca-certificates \
        curl \
        git \
        gnupg \
        less \
        openssh-client \
        ripgrep \
        util-linux \
        zsh \
    && install -m 0755 -d /etc/apt/keyrings \
    && curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
    && chmod a+r /etc/apt/keyrings/docker.asc \
    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian bookworm stable" > /etc/apt/sources.list.d/docker.list \
    && apt-get update \
    && apt-get install -y --no-install-recommends \
        docker-buildx-plugin \
        docker-ce-cli \
        docker-compose-plugin \
        docker-model-plugin \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

COPY --from=builder /usr/local/bin/codex /usr/local/bin/codex
COPY --from=builder /usr/local/bin/codex-enterprise-server /usr/local/bin/codex-enterprise-server
COPY --from=builder /usr/local/bin/codex-worker-runtime-broker /usr/local/bin/codex-worker-runtime-broker
COPY --from=builder /usr/local/bin/codex-app-server /usr/local/bin/codex-app-server
COPY --chmod=0755 docker-entrypoint.sh /usr/local/bin/codex-container-entrypoint

RUN useradd --create-home --uid 1000 --shell /bin/zsh codex \
    && install -d -m 0755 -o codex -g codex /workspace /codex-home

USER codex
ENV CODEX_HOME=/codex-home
ENV HOME=/codex-home
WORKDIR /workspace

ENTRYPOINT ["codex-container-entrypoint"]

FROM runtime AS worker-broker

USER root
WORKDIR /var/lib/lcfe-worker-broker
ENTRYPOINT ["codex-worker-runtime-broker"]

FROM rust:${RUST_VERSION}-bookworm AS enterprise-dev

ARG DEBIAN_FRONTEND=noninteractive

RUN apt-get update \
    && apt-get install -y --no-install-recommends \
        bubblewrap \
        ca-certificates \
        clang \
        cmake \
        curl \
        git \
        gnupg \
        less \
        libsqlite3-dev \
        libssl-dev \
        openssh-client \
        pkg-config \
        protobuf-compiler \
        ripgrep \
        zsh \
    && install -m 0755 -d /etc/apt/keyrings \
    && curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
    && chmod a+r /etc/apt/keyrings/docker.asc \
    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian bookworm stable" > /etc/apt/sources.list.d/docker.list \
    && apt-get update \
    && apt-get install -y --no-install-recommends \
        docker-buildx-plugin \
        docker-ce-cli \
        docker-compose-plugin \
        docker-model-plugin \
    && cargo install cargo-watch --locked \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

RUN useradd --create-home --uid 1000 --shell /bin/zsh codex

COPY --chmod=0755 docker-entrypoint.sh /usr/local/bin/codex-container-entrypoint
COPY --chmod=0755 scripts/local-codex-enterprise-watch.sh /usr/local/bin/local-codex-enterprise-watch
COPY --chmod=0755 scripts/local-codex-dev-codex.sh /usr/local/bin/codex

ENV CARGO_HOME=/cargo-home
ENV CARGO_TARGET_DIR=/cargo-target
ENV CODEX_HOME=/codex-home
ENV HOME=/codex-home
ENV LOCAL_CODEX_ENTERPRISE_SOURCE_DIR=/src
WORKDIR /src

ENTRYPOINT ["local-codex-enterprise-watch"]