mirror of
https://github.com/outbackdingo/optimclaw.git
synced 2026-08-27 08:00:17 +00:00
ZakiandClaude
ac8083bd85
- Fix WASM tool_invoke production wiring: change tool_executor to a shared Arc<std::sync::RwLock> slot with lazy resolution so WASM tools registered during build_all() can access the executor set afterward - Add nesting_depth field to ToolCallRequest and propagate it through the orchestrator's tool_call_handler into JobContext - Add ptc_script built-in tool: runs Python scripts with ironclaw_tools SDK pre-imported, env-scrubbed subprocess, structured output support - Copy Python SDK into Docker worker image at dist-packages path Co-Authored-By: Claude Opus 4.6 <[email protected]>
73 lines
2.5 KiB
Docker
73 lines
2.5 KiB
Docker
# Multi-stage Dockerfile for the IronClaw worker container.
|
|
#
|
|
# This image runs the ironclaw binary in worker mode inside Docker containers.
|
|
# The orchestrator creates instances of this image for sandboxed job execution.
|
|
#
|
|
# Build:
|
|
# docker build -f Dockerfile.worker -t ironclaw-worker .
|
|
#
|
|
# The image includes common development tools so workers can build software,
|
|
# run tests, and execute shell commands.
|
|
|
|
FROM rust:1.92-bookworm AS builder
|
|
|
|
WORKDIR /build
|
|
COPY . .
|
|
|
|
# Build only the ironclaw binary (release mode)
|
|
RUN cargo build --release --bin ironclaw
|
|
|
|
# ---
|
|
|
|
FROM debian:bookworm-slim
|
|
|
|
# Install curl first (needed to fetch the GitHub CLI GPG key), then add the
|
|
# gh CLI apt repository, then install all remaining dev tools in one layer.
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends ca-certificates curl \
|
|
&& curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
|
|
| dd of=/usr/share/keyrings/githubcli-archive-keyring.gpg \
|
|
&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
|
|
> /etc/apt/sources.list.d/github-cli.list \
|
|
&& apt-get update && apt-get install -y --no-install-recommends \
|
|
git \
|
|
build-essential \
|
|
pkg-config \
|
|
libssl-dev \
|
|
nodejs \
|
|
npm \
|
|
python3 \
|
|
python3-pip \
|
|
python3-venv \
|
|
gh \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Rust toolchain for the sandbox user
|
|
ENV RUSTUP_HOME=/usr/local/rustup \
|
|
CARGO_HOME=/usr/local/cargo \
|
|
PATH=/usr/local/cargo/bin:$PATH
|
|
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain 1.92.0 \
|
|
&& chmod -R a+r /usr/local/rustup /usr/local/cargo
|
|
|
|
# Install Claude Code CLI (for claude-bridge mode)
|
|
RUN npm install -g @anthropic-ai/claude-code@latest
|
|
|
|
# Copy the binary
|
|
COPY --from=builder /build/target/release/ironclaw /usr/local/bin/ironclaw
|
|
|
|
# Install IronClaw Python SDK for programmatic tool calling (PTC)
|
|
COPY sdk/python/ironclaw_tools.py /usr/lib/python3/dist-packages/ironclaw_tools.py
|
|
|
|
# Create non-root user (UID 1000 matches the orchestrator's container config)
|
|
RUN useradd -m -u 1000 -s /bin/bash sandbox \
|
|
&& mkdir -p /workspace \
|
|
&& chown sandbox:sandbox /workspace \
|
|
&& mkdir -p /home/sandbox/.claude \
|
|
&& chown sandbox:sandbox /home/sandbox/.claude
|
|
|
|
USER sandbox
|
|
WORKDIR /workspace
|
|
|
|
# The orchestrator passes the full command via Docker cmd.
|
|
ENTRYPOINT ["ironclaw"]
|