Algis DumbrisandClaude Opus 4.6
121d05f875
The docker harness now detects and stages host CLI auth files (~/.gemini/oauth_creds.json, ~/.claude/.credentials.json) into a writable agent-home directory mounted at /home/agent. This lets containerized agents reuse the host's Gemini Pro / Claude Pro OAuth sessions without manual secret management or API keys. Only auth files are copied — not the host's settings.json or MCP configs (which contain stale localhost URLs that would hang Gemini CLI inside containers). The staged dir is writable so CLIs can create projects.json, history, etc. alongside the auth files. Also sets GEMINI_DEFAULT_AUTH_TYPE=oauth-personal and GEMINI_CLI_NO_RELAUNCH=true when OAuth creds are detected, writes Claude's hasCompletedOnboarding flag, and simplifies the doc-gardener example to use the harness-level credential staging instead of manual HOME directory seeding. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
106 lines
4.6 KiB
Docker
106 lines
4.6 KiB
Docker
# synapbus-agent: the canonical container image for SynapBus's docker
|
|
# harness backend. One image, all the agent CLIs the bundled examples
|
|
# invoke (gemini, claude — add codex/opencode here when needed). No
|
|
# SynapBus binary inside — agents reach the host's MCP server over the
|
|
# network at host.docker.internal:<port>.
|
|
#
|
|
# Build with multi-arch buildx:
|
|
# docker buildx build \
|
|
# --platform linux/amd64,linux/arm64 \
|
|
# -t synapbus-agent:latest \
|
|
# --load image-build/synapbus-agent
|
|
#
|
|
# Or for local dev (single-arch matching your host):
|
|
# docker build -t synapbus-agent:latest image-build/synapbus-agent
|
|
|
|
FROM debian:bookworm-slim
|
|
|
|
ARG NODE_MAJOR=22
|
|
ARG GEMINI_CLI_VERSION=latest
|
|
ARG CLAUDE_CODE_VERSION=latest
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive \
|
|
LANG=C.UTF-8 \
|
|
LC_ALL=C.UTF-8
|
|
|
|
# Base tooling. Most demos shell out to one of these from wrapper.sh.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
curl \
|
|
git \
|
|
gnupg \
|
|
jq \
|
|
sqlite3 \
|
|
python3 \
|
|
python3-pip \
|
|
tini \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Node.js for the agent CLIs (gemini, claude). NodeSource keeps a
|
|
# pinned major version so the image is reproducible-ish across builds.
|
|
RUN curl -fsSL https://deb.nodesource.com/setup_${NODE_MAJOR}.x | bash - \
|
|
&& apt-get update && apt-get install -y --no-install-recommends nodejs \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& npm config set update-notifier false
|
|
|
|
# Agent CLIs. Install globally so any user inside the container can
|
|
# call them. Pinned versions are accepted via build args above. Any
|
|
# domain-specific CLIs (mcpproxy, terraform, aws, ...) are NOT baked
|
|
# in — the agent downloads and runs them on demand inside the sandbox.
|
|
# That's the whole point of the "universal gardener" design: the image
|
|
# is a blank Linux shell with enough language runtimes to install
|
|
# anything else, and every example is self-contained in its prompt.
|
|
RUN npm install -g \
|
|
@google/gemini-cli@${GEMINI_CLI_VERSION} \
|
|
@anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}
|
|
|
|
# Non-root user with UID/GID 1000 — matches the typical host user on
|
|
# Linux dev machines and lets `docker run --user 1000:1000` (which the
|
|
# harness sets by default) write into bind-mounted workdirs without
|
|
# permission errors.
|
|
RUN groupadd -g 1000 agent && useradd -u 1000 -g 1000 -m -s /bin/bash agent
|
|
|
|
# Pre-create credential mount points so --read-only + bind mounts work.
|
|
# The docker harness mounts individual auth files (not entire dirs) to
|
|
# avoid carrying the host's settings.json / MCP configs into containers.
|
|
# Placeholder files are needed because Docker file bind mounts require
|
|
# the target to exist (especially with --read-only root).
|
|
# The .claude.json onboarding file prevents Claude Code from prompting
|
|
# for theme/auth setup in headless mode (required even with OAuth token).
|
|
# The settings.json pre-selects oauth-personal auth so Gemini CLI uses
|
|
# the mounted OAuth tokens without interactive prompts.
|
|
RUN mkdir -p /home/agent/.gemini /home/agent/.claude \
|
|
&& touch /home/agent/.gemini/oauth_creds.json \
|
|
/home/agent/.gemini/google_accounts.json \
|
|
/home/agent/.claude/.credentials.json \
|
|
&& echo '{"hasCompletedOnboarding":true}' > /home/agent/.claude.json \
|
|
&& printf '{"security":{"auth":{"selectedType":"oauth-personal"}}}\n' > /home/agent/.gemini/settings.json \
|
|
&& chown -R agent:agent /home/agent/.gemini /home/agent/.claude /home/agent/.claude.json
|
|
|
|
# Standard wrapper script, baked into the image at a stable path. Every
|
|
# bundled example uses this same wrapper:
|
|
# 1. read message.json from the bind-mounted /workspace
|
|
# 2. read GEMINI.md (or CLAUDE.md if AGENT_CLI=claude)
|
|
# 3. invoke the agent CLI in --approval-mode yolo with the prompt
|
|
# 4. exit
|
|
#
|
|
# All side effects (sending DMs, creating goals, propose_task_tree)
|
|
# are performed by the agent CLI through MCP tool calls — the wrapper
|
|
# itself never shells out to the SynapBus admin socket. This keeps
|
|
# isolation strict: the container only sees the host through MCP HTTP.
|
|
#
|
|
# Examples that need different dispatch logic override CMD via
|
|
# harness_config_json.docker.command.
|
|
COPY synapbus-agent-wrapper.sh /usr/local/bin/synapbus-agent-wrapper.sh
|
|
RUN chmod +x /usr/local/bin/synapbus-agent-wrapper.sh
|
|
|
|
# Use tini as PID 1 so:
|
|
# * SIGTERM from `docker stop` reaches our wrapper
|
|
# * Zombie node/python child processes get reaped properly
|
|
# Wrappers can override the entrypoint via harness_config_json.docker.
|
|
ENTRYPOINT ["/usr/bin/tini", "--"]
|
|
|
|
WORKDIR /workspace
|
|
USER 1000:1000
|
|
CMD ["/usr/local/bin/synapbus-agent-wrapper.sh"]
|