382201744a
Previous commit's regex substitution dropped `COPY requirements.txt .` and the initial `RUN pip install --no-cache-dir -r requirements.txt` because of a bash-heredoc escape interaction (the \1 backref was consumed before the python regex saw it, leaving a SOH char). This restores both lines with the conditional version-pin upgrade after. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
32 lines
981 B
Docker
32 lines
981 B
Docker
FROM python:3.11-slim
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
curl gosu ca-certificates nodejs npm \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install OpenClaw CLI
|
|
RUN npm install -g openclaw 2>/dev/null || true
|
|
|
|
RUN useradd -u 1000 -m -s /bin/bash agent
|
|
WORKDIR /app
|
|
|
|
# RUNTIME_VERSION is forwarded from molecule-ci's reusable publish
|
|
# workflow as a docker build-arg. Cascade-triggered builds set it to
|
|
# the exact runtime version PyPI just published. Including it as an
|
|
# ARG changes the cache key for the pip install layer below — the
|
|
# fix for the cascade cache trap that bit us 5x on 2026-04-27.
|
|
ARG RUNTIME_VERSION=
|
|
|
|
COPY requirements.txt .
|
|
RUN pip install --no-cache-dir -r requirements.txt && \
|
|
if [ -n "${RUNTIME_VERSION}" ]; then \
|
|
pip install --no-cache-dir --upgrade "molecule-ai-workspace-runtime==${RUNTIME_VERSION}"; \
|
|
fi
|
|
|
|
COPY adapter.py .
|
|
COPY __init__.py .
|
|
|
|
ENV ADAPTER_MODULE=adapter
|
|
|
|
ENTRYPOINT ["molecule-runtime"]
|