mirror of
https://github.com/nearai/ironclaw.git
synced 2026-09-02 23:56:24 +08:00
Docker file for sandbox
This commit is contained in:
25
docker/sandbox.Dockerfile
Normal file
25
docker/sandbox.Dockerfile
Normal file
@@ -0,0 +1,25 @@
|
|||||||
|
FROM rust:1.86-slim-bookworm
|
||||||
|
|
||||||
|
# Install build dependencies
|
||||||
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
||||||
|
bash \
|
||||||
|
ca-certificates \
|
||||||
|
curl \
|
||||||
|
git \
|
||||||
|
pkg-config \
|
||||||
|
&& rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
|
# Install WASM targets
|
||||||
|
RUN rustup target add wasm32-wasip2 wasm32-unknown-unknown
|
||||||
|
|
||||||
|
# Install wasm-tools for component manipulation
|
||||||
|
RUN cargo install wasm-tools --locked
|
||||||
|
|
||||||
|
# Create non-root user for sandbox
|
||||||
|
RUN useradd -m -u 1000 sandbox
|
||||||
|
USER sandbox
|
||||||
|
|
||||||
|
WORKDIR /workspace
|
||||||
|
|
||||||
|
# Default command
|
||||||
|
CMD ["bash"]
|
||||||
Reference in New Issue
Block a user