50b5cea2cb
- tea_relabel: use `tea issues edit` instead of `tea issues labels` (the latter is the list subcommand and ignores --labels) - Dockerfile: verify tea binary sha256 after download Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
26 lines
1,013 B
Docker
26 lines
1,013 B
Docker
FROM debian:bookworm-slim
|
|
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
bash curl git jq tmux cron python3 openssh-client ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# tea CLI — official Gitea/Forgejo CLI for issue/label/comment operations
|
|
# Checksum from https://dl.gitea.com/tea/0.9.2/tea-0.9.2-linux-amd64.sha256
|
|
RUN curl -sL https://dl.gitea.com/tea/0.9.2/tea-0.9.2-linux-amd64 -o /usr/local/bin/tea \
|
|
&& echo "be10cdf9a619e3c0f121df874960ed19b53e62d1c7036cf60313a28b5227d54d /usr/local/bin/tea" | sha256sum -c - \
|
|
&& chmod +x /usr/local/bin/tea
|
|
|
|
# Claude CLI is mounted from the host via docker-compose volume.
|
|
# No internet access to cli.anthropic.com required at build time.
|
|
|
|
# Non-root user
|
|
RUN useradd -m -u 1000 -s /bin/bash agent
|
|
|
|
COPY entrypoint.sh /entrypoint.sh
|
|
RUN chmod +x /entrypoint.sh
|
|
|
|
# Entrypoint runs as root to start the cron daemon;
|
|
# cron jobs execute as the agent user (crontab -u agent).
|
|
WORKDIR /home/agent
|
|
|
|
ENTRYPOINT ["/entrypoint.sh"]
|