da326b265d
- Replace broad COPY . . with targeted COPY src/ and firmware/ to preserve Docker layer cache across non-build file changes (4.1) - Inline permissions/config prep into builder stage, removing the extra busybox stage and its maintenance/security overhead (4.2) - Strip heavy dev tools (vim, git, iputils-ping, openssl) from dev image, keeping only ca-certificates and curl (4.3) - Replace expensive zeroclaw doctor healthcheck with lightweight zeroclaw status; increase interval from 30s to 60s (4.4) Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
108 lines
4.1 KiB
Docker
108 lines
4.1 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
# ── Stage 1: Build ────────────────────────────────────────────
|
|
FROM rust:1.93-slim@sha256:9663b80a1621253d30b146454f903de48f0af925c967be48c84745537cd35d8b AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# Install build dependencies
|
|
RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
|
|
--mount=type=cache,target=/var/lib/apt,sharing=locked \
|
|
apt-get update && apt-get install -y \
|
|
pkg-config \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# 1. Copy manifests and toolchain pin to cache dependencies with the same compiler
|
|
COPY Cargo.toml Cargo.lock rust-toolchain.toml ./
|
|
# Create dummy targets declared in Cargo.toml so manifest parsing succeeds.
|
|
RUN mkdir -p src benches \
|
|
&& echo "fn main() {}" > src/main.rs \
|
|
&& echo "fn main() {}" > benches/agent_benchmarks.rs
|
|
RUN --mount=type=cache,id=zeroclaw-cargo-registry,target=/usr/local/cargo/registry,sharing=locked \
|
|
--mount=type=cache,id=zeroclaw-cargo-git,target=/usr/local/cargo/git,sharing=locked \
|
|
--mount=type=cache,id=zeroclaw-target,target=/app/target,sharing=locked \
|
|
cargo build --release --locked
|
|
RUN rm -rf src benches
|
|
|
|
# 2. Copy only build-relevant source paths (avoid cache-busting on docs/tests/scripts)
|
|
COPY src/ src/
|
|
COPY firmware/ firmware/
|
|
RUN --mount=type=cache,id=zeroclaw-cargo-registry,target=/usr/local/cargo/registry,sharing=locked \
|
|
--mount=type=cache,id=zeroclaw-cargo-git,target=/usr/local/cargo/git,sharing=locked \
|
|
--mount=type=cache,id=zeroclaw-target,target=/app/target,sharing=locked \
|
|
cargo build --release --locked && \
|
|
cp target/release/zeroclaw /app/zeroclaw && \
|
|
strip /app/zeroclaw
|
|
|
|
# Prepare runtime directory structure and default config inline (no extra stage)
|
|
RUN mkdir -p /zeroclaw-data/.zeroclaw /zeroclaw-data/workspace && \
|
|
cat > /zeroclaw-data/.zeroclaw/config.toml <<EOF && \
|
|
chown -R 65534:65534 /zeroclaw-data
|
|
workspace_dir = "/zeroclaw-data/workspace"
|
|
config_path = "/zeroclaw-data/.zeroclaw/config.toml"
|
|
api_key = ""
|
|
default_provider = "openrouter"
|
|
default_model = "anthropic/claude-sonnet-4-20250514"
|
|
default_temperature = 0.7
|
|
|
|
[gateway]
|
|
port = 3000
|
|
host = "[::]"
|
|
allow_public_bind = true
|
|
EOF
|
|
|
|
# ── Stage 2: Development Runtime (Debian) ────────────────────
|
|
FROM debian:trixie-slim@sha256:f6e2cfac5cf956ea044b4bd75e6397b4372ad88fe00908045e9a0d21712ae3ba AS dev
|
|
|
|
# Install essential runtime dependencies only (use docker-compose.override.yml for dev tools)
|
|
RUN apt-get update && apt-get install -y \
|
|
ca-certificates \
|
|
curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=builder /zeroclaw-data /zeroclaw-data
|
|
COPY --from=builder /app/zeroclaw /usr/local/bin/zeroclaw
|
|
|
|
# Overwrite minimal config with DEV template (Ollama defaults)
|
|
COPY dev/config.template.toml /zeroclaw-data/.zeroclaw/config.toml
|
|
RUN chown 65534:65534 /zeroclaw-data/.zeroclaw/config.toml
|
|
|
|
# Environment setup
|
|
# Use consistent workspace path
|
|
ENV ZEROCLAW_WORKSPACE=/zeroclaw-data/workspace
|
|
ENV HOME=/zeroclaw-data
|
|
# Defaults for local dev (Ollama) - matches config.template.toml
|
|
ENV PROVIDER="ollama"
|
|
ENV ZEROCLAW_MODEL="llama3.2"
|
|
ENV ZEROCLAW_GATEWAY_PORT=3000
|
|
|
|
# Note: API_KEY is intentionally NOT set here to avoid confusion.
|
|
# It is set in config.toml as the Ollama URL.
|
|
|
|
WORKDIR /zeroclaw-data
|
|
USER 65534:65534
|
|
EXPOSE 3000
|
|
ENTRYPOINT ["zeroclaw"]
|
|
CMD ["gateway"]
|
|
|
|
# ── Stage 3: Production Runtime (Distroless) ─────────────────
|
|
FROM gcr.io/distroless/cc-debian13:nonroot@sha256:84fcd3c223b144b0cb6edc5ecc75641819842a9679a3a58fd6294bec47532bf7 AS release
|
|
|
|
COPY --from=builder /app/zeroclaw /usr/local/bin/zeroclaw
|
|
COPY --from=builder /zeroclaw-data /zeroclaw-data
|
|
|
|
# Environment setup
|
|
ENV ZEROCLAW_WORKSPACE=/zeroclaw-data/workspace
|
|
ENV HOME=/zeroclaw-data
|
|
# Default provider (model is set in config.toml, not here,
|
|
# so config file edits are not silently overridden)
|
|
ENV PROVIDER="openrouter"
|
|
ENV ZEROCLAW_GATEWAY_PORT=3000
|
|
|
|
# API_KEY must be provided at runtime!
|
|
|
|
WORKDIR /zeroclaw-data
|
|
USER 65534:65534
|
|
EXPOSE 3000
|
|
ENTRYPOINT ["zeroclaw"]
|
|
CMD ["gateway"]
|