| # debian.sh --arch 'amd64' out/ 'trixie' '@1777939200' |
| RUN /bin/sh -c apt-get update && apt-get install -y --no-install-recommends bash bubblewrap build-essential ca-certificates curl git iproute2 nodejs npm ripgrep unzip wget && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/sh -c dpkg-statoverride --update --add root root 4755 /usr/bin/bwrap # needed to run bubblewrap in docker. Less secure than default bubblewrap setup. Might break in future debian versions # buildkit |
| RUN /bin/sh -c npm install -g @openai/codex@${CODEX_VERSION} # buildkit |
| RUN /bin/sh -c npm install -g opencode-ai@${OPENCODE_VERSION} # buildkit |
| RUN /bin/sh -c useradd -m -s /bin/bash developer # buildkit |
| RUN /bin/sh -c mkdir -p /home/developer/.codex && chown -R developer:developer /home/developer # buildkit |
| USER developer |
| WORKDIR /home/developer/workspace |
| CMD ["bash" "-c" "sleep infinity"] |