mirror of
https://github.com/harivansh-afk/sandbox-agent.git
synced 2026-04-15 14:03:52 +00:00
553f249836
* fix: add postinstall chmod for npm binary permissions * fix: report npm package version instead of compiled binary version The --version flag now reports the version from package.json instead of the version compiled into the Rust binary. This ensures the version matches what was installed via npm, even when binaries are reused from previous releases. * fix: bake version into binary at build time Instead of hacking around the version in the Node.js wrapper script, properly pass the version at build time via SANDBOX_AGENT_VERSION env var. Changes: - build.rs: Generate version.rs with VERSION constant from env var - main.rs: Use generated version constant for clap --version - Dockerfiles: Accept SANDBOX_AGENT_VERSION as build arg - build.sh: Pass version as second argument to Docker builds - release.yaml: Pass version to build script during CI - Remove version hack from sdks/cli/bin/sandbox-agent wrapper The version is now baked into the binary during the release build, ensuring --version reports the correct npm package version.
105 lines
3.4 KiB
Docker
105 lines
3.4 KiB
Docker
# syntax=docker/dockerfile:1.10.0
|
|
|
|
# Build inspector frontend
|
|
FROM node:22-alpine AS inspector-build
|
|
WORKDIR /app
|
|
RUN npm install -g pnpm
|
|
|
|
# Copy package files for workspaces
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
|
|
COPY frontend/packages/inspector/package.json ./frontend/packages/inspector/
|
|
COPY sdks/typescript/package.json ./sdks/typescript/
|
|
|
|
# Install dependencies
|
|
RUN pnpm install --filter @sandbox-agent/inspector...
|
|
|
|
# Copy SDK source (with pre-generated types from docs/openapi.json)
|
|
COPY docs/openapi.json ./docs/
|
|
COPY sdks/typescript ./sdks/typescript
|
|
|
|
# Build SDK (just tsup, skip generate since types are pre-generated)
|
|
RUN cd sdks/typescript && SKIP_OPENAPI_GEN=1 pnpm exec tsup
|
|
|
|
# Copy inspector source and build
|
|
COPY frontend/packages/inspector ./frontend/packages/inspector
|
|
RUN cd frontend/packages/inspector && pnpm exec vite build
|
|
|
|
FROM rust:1.88.0 AS base
|
|
|
|
# Install dependencies
|
|
RUN apt-get update && apt-get install -y \
|
|
musl-tools \
|
|
musl-dev \
|
|
llvm-14-dev \
|
|
libclang-14-dev \
|
|
clang-14 \
|
|
libssl-dev \
|
|
pkg-config \
|
|
ca-certificates \
|
|
g++ \
|
|
g++-multilib \
|
|
git \
|
|
curl && \
|
|
rm -rf /var/lib/apt/lists/* && \
|
|
wget -q https://github.com/cross-tools/musl-cross/releases/latest/download/x86_64-unknown-linux-musl.tar.xz && \
|
|
tar -xf x86_64-unknown-linux-musl.tar.xz -C /opt/ && \
|
|
rm x86_64-unknown-linux-musl.tar.xz
|
|
|
|
# Install musl targets
|
|
RUN rustup target add x86_64-unknown-linux-musl
|
|
|
|
# Set environment variables
|
|
ENV PATH="/opt/x86_64-unknown-linux-musl/bin:$PATH" \
|
|
LIBCLANG_PATH=/usr/lib/llvm-14/lib \
|
|
CLANG_PATH=/usr/bin/clang-14 \
|
|
CC_x86_64_unknown_linux_musl=x86_64-unknown-linux-musl-gcc \
|
|
CXX_x86_64_unknown_linux_musl=x86_64-unknown-linux-musl-g++ \
|
|
AR_x86_64_unknown_linux_musl=x86_64-unknown-linux-musl-ar \
|
|
CARGO_TARGET_X86_64_UNKNOWN_LINUX_MUSL_LINKER=x86_64-unknown-linux-musl-gcc \
|
|
CARGO_INCREMENTAL=0 \
|
|
RUSTFLAGS="-C target-feature=+crt-static -C link-arg=-static-libgcc" \
|
|
CARGO_NET_GIT_FETCH_WITH_CLI=true
|
|
|
|
# Set working directory
|
|
WORKDIR /build
|
|
|
|
# Build for x86_64
|
|
FROM base AS x86_64-builder
|
|
|
|
# Accept version as build arg
|
|
ARG SANDBOX_AGENT_VERSION
|
|
ENV SANDBOX_AGENT_VERSION=${SANDBOX_AGENT_VERSION}
|
|
|
|
# Set up OpenSSL for x86_64 musl target
|
|
ENV SSL_VER=1.1.1w
|
|
RUN wget https://www.openssl.org/source/openssl-$SSL_VER.tar.gz \
|
|
&& tar -xzf openssl-$SSL_VER.tar.gz \
|
|
&& cd openssl-$SSL_VER \
|
|
&& ./Configure no-shared no-async --prefix=/musl --openssldir=/musl/ssl linux-x86_64 \
|
|
&& make -j$(nproc) \
|
|
&& make install_sw \
|
|
&& cd .. \
|
|
&& rm -rf openssl-$SSL_VER*
|
|
|
|
# Configure OpenSSL env vars for the build
|
|
ENV OPENSSL_DIR=/musl \
|
|
OPENSSL_INCLUDE_DIR=/musl/include \
|
|
OPENSSL_LIB_DIR=/musl/lib \
|
|
PKG_CONFIG_ALLOW_CROSS=1
|
|
|
|
# Copy the source code
|
|
COPY . .
|
|
|
|
# Copy pre-built inspector frontend
|
|
COPY --from=inspector-build /app/frontend/packages/inspector/dist ./frontend/packages/inspector/dist
|
|
|
|
# Build for Linux with musl (static binary) - x86_64
|
|
RUN --mount=type=cache,target=/usr/local/cargo/registry \
|
|
--mount=type=cache,target=/usr/local/cargo/git \
|
|
--mount=type=cache,target=/build/target \
|
|
cargo build -p sandbox-agent --release --target x86_64-unknown-linux-musl && \
|
|
mkdir -p /artifacts && \
|
|
cp target/x86_64-unknown-linux-musl/release/sandbox-agent /artifacts/sandbox-agent-x86_64-unknown-linux-musl
|
|
|
|
# Default command to show help
|
|
CMD ["ls", "-la", "/artifacts"]
|