fix(image): build platform-agent FROM live platform-tenant base (unblocks concierge identity) #2982

Merged

core-devops merged 1 commits from fix/platform-agent-base-on-tenant into main 2026-06-16 02:22:30 +00:00

Conversation 0 Commits 1 Files Changed 1

+56 -38

core-devops commented 2026-06-16 02:18:03 +00:00

Member

Copy Link

Copy Source

Fixes the last blocker: the concierge identity image never built because Dockerfile.platform-agent built FROM molecule-ai/platform, dead since 2026-05-15. Repoints the build to FROM platform-tenant (the LIVE workspace-server image concierges already run; it has /entrypoint.sh that the platform-agent wrapper chains to), ordered after the tenant build, and marks the orphaned molecule-ai/platform base build continue-on-error. After merge: build produces molecule-platform-agent → #2979 auto-promotes the pin → concierges roll → identity live. Verified by template-delivery-e2e (#2971).

Fixes the last blocker: the concierge identity image never built because Dockerfile.platform-agent built FROM molecule-ai/platform, dead since 2026-05-15. Repoints the build to FROM platform-tenant (the LIVE workspace-server image concierges already run; it has /entrypoint.sh that the platform-agent wrapper chains to), ordered after the tenant build, and marks the orphaned molecule-ai/platform base build continue-on-error. After merge: build produces molecule-platform-agent → #2979 auto-promotes the pin → concierges roll → identity live. Verified by template-delivery-e2e (#2971).

core-devops added 1 commit 2026-06-16 02:18:03 +00:00

fix(image): build platform-agent FROM the live platform-tenant base (concierge identity image was failing on a dead base) ... 24dd2779d9

Root cause the concierge identity image never built: Dockerfile.platform-agent
built FROM molecule-ai/platform, but that base image has not built since
2026-05-15 (orphaned) — so BASE_IMAGE=molecule-ai/platform:staging-<sha> never
existed and the platform-agent build failed. Meanwhile the LIVE image concierges
actually run is platform-tenant (Dockerfile.tenant), which has /entrypoint.sh
(entrypoint-tenant.sh) — exactly what the platform-agent wrapper chains to.

Changes (publish-workspace-server-image.yml):
- Build the platform-agent image AFTER the tenant build, FROM
  ${TENANT_IMAGE_NAME}:${TAG_SHA} (the live workspace-server image) — NOT the
  dead molecule-ai/platform. Fresh builder + clean failure.
- Mark the orphaned molecule-ai/platform base build continue-on-error so its
  failure can never block the tenant + platform-agent builds (it has no
  consumers left after this repoint).

Net: a main publish now builds the concierge image on the current code (incl.
#2966 model + #2955 identity), so #2979's auto-promote can roll it to concierges.
Verified end-to-end by template-delivery-e2e (#2971).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

core-devops merged commit f82504c5f4 into main 2026-06-16 02:22:30 +00:00

core-devops referenced this pull request 2026-06-16 02:22:34 +00:00

fix(image): auto-bump the platform-agent concierge image pin (true auto-bump) #2979

core-devops referenced this pull request 2026-06-16 03:07:51 +00:00

fix(image): COPY --chmod in Dockerfile.platform-agent (build failed on non-root tenant base) #2984

core-devops referenced this issue from a commit 2026-06-16 03:07:52 +00:00

fix(image): COPY --chmod instead of RUN chmod in Dockerfile.platform-agent (build failed on non-root tenant base)

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

area/ci

CI/CD pipeline issues

do-not-auto-merge

Opt out of autonomous merge-queue merging

kind/infrastructure

Infrastructure-related issues

merge-queue

Ready for serialized Gitea merge queue

merge-queue-hold

Temporarily hold PR in merge queue

platform/go

Go platform test issues

release-blocker

Blocks the staging→main promotion / a release

release-test

security

test-label-sre

tier:high

High risk per dev-sop §SOP-6 — ceo only, 24h cooldown

tier:low

Low risk per dev-sop §SOP-6 — engineers/managers/ceo can approve

tier:medium

Medium risk per dev-sop §SOP-6 — managers/ceo can approve

triage-test

test

wip

Work in progress — do not auto-merge

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

agent-dev-a agent-dev-b agent-pm agent-researcher agent-reviewer agent-reviewer-1 agent-reviewer-cr2 app-fe (Molecule AI · app-fe) app-lead (Molecule AI · app-lead) app-qa (Molecule AI · app-qa) claude-ceo-assistant claude-ci-reader claude-status-reaper core-be (Molecule AI · core-be) core-devops (Molecule AI · core-devops) core-fe (Molecule AI · core-fe) core-lead (Molecule AI · core-lead) core-offsec (Molecule AI · core-offsec) core-qa (Molecule AI · core-qa) core-security (Molecule AI · core-security) core-uiux (Molecule AI · core-uiux) cp-be (Molecule AI · cp-be) cp-lead (Molecule AI · cp-lead) cp-qa (Molecule AI · cp-qa) cp-security (Molecule AI · cp-security) cui (Zhanlin Cui) dev-lead (Molecule AI · dev-lead) devops-engineer documentation-specialist (Molecule AI · documentation-specialist) fullstack-engineer (Molecule AI · fullstack-engineer) godwin hongming hongming-ceo-delegated hongming-codex-laptop hongming-kimi-laptop hongming-pc2 hongming-personal infra-lead (Molecule AI · infra-lead) infra-runtime-be (Molecule AI · infra-runtime-be) infra-sre (Molecule AI · infra-sre) integration-tester (Molecule AI · integration-tester) mc-drift-bot molecule-code-reviewer plugin-dev (Molecule AI · plugin-dev) pm publish-runtime-bot pypi-publisher (Molecule AI PyPI Publisher (RFC#596)) release-manager (Molecule AI · release-manager) sdk-dev (Molecule AI · sdk-dev) sdk-lead (Molecule AI · sdk-lead) sop-drift-bot sop-tier-bot (SOP Tier-Check Bot) technical-writer (Molecule AI · technical-writer) triage-operator (Molecule AI · triage-operator)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-core#2982