35dc87ef53
- Rebrand commits already in history (gsd → forge) - Sync pre-existing doc, docker, and CI config updates - All rebrand artifacts verified in place: * Native crates: forge-engine, forge-ast, forge-grep * Log prefixes: [forge] across 22+ files * Binary: ~/bin/sf-run * Workspace scopes: @sf-run/*, @singularity-forge/* * Nix flake: Rust toolchain ready System ready for: nix develop && bun run build:native Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
42 lines
1.5 KiB
Text
42 lines
1.5 KiB
Text
# ──────────────────────────────────────────────
|
|
# SF Docker Sandbox Template
|
|
# Base: docker/sandbox-templates:shell
|
|
# Purpose: Isolated environment for SF auto mode
|
|
# Usage: docker sandbox create --template ./docker
|
|
# ──────────────────────────────────────────────
|
|
FROM node:24-bookworm-slim
|
|
|
|
# System dependencies required by SF
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
git \
|
|
curl \
|
|
ca-certificates \
|
|
openssh-client \
|
|
gosu \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install SF globally — version controlled via build arg
|
|
ARG SF_VERSION=latest
|
|
RUN npm install -g sf-run@${SF_VERSION}
|
|
|
|
# Create non-root user for sandbox isolation
|
|
RUN groupadd --gid 1000 gsd \
|
|
&& useradd --uid 1000 --gid gsd --shell /bin/bash --create-home gsd
|
|
|
|
# Persistent SF state directory
|
|
RUN mkdir -p /home/gsd/.gsd && chown -R gsd:gsd /home/gsd/.gsd
|
|
|
|
# Workspace directory — synced from host via Docker sandbox
|
|
WORKDIR /workspace
|
|
RUN chown gsd:gsd /workspace
|
|
|
|
# Entrypoint handles UID/GID remapping, bootstrap, and drops to gsd user
|
|
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
COPY bootstrap.sh /usr/local/bin/bootstrap.sh
|
|
RUN chmod +x /usr/local/bin/entrypoint.sh /usr/local/bin/bootstrap.sh
|
|
|
|
# Expose default SF web UI port
|
|
EXPOSE 3000
|
|
|
|
ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
|
|
CMD ["gsd", "--help"]
|