mirror of
https://github.com/0xMassi/webclaw.git
synced 2026-06-10 22:45:13 +02:00
8015de7db5
The per-arch build + 'imagetools create' combine failed at the manifest step with 'v0.6.9-arm64: not found' — buildx's default provenance/SBOM attestations turn each per-arch tag into an index, and assembling them races GHCR's read-after-write. Replace it with a single 'docker buildx build --platform linux/amd64,linux/arm64 --push' (attestations off) so one manifest list is pushed atomically. Dockerfile.ci now selects binaries by TARGETARCH. Adds a workflow_dispatch path to re-publish an existing tag's image without rebuilding binaries or bumping the version.
35 lines
1.7 KiB
Text
35 lines
1.7 KiB
Text
# Slim runtime image — uses pre-built binaries from the release.
|
|
# The full Dockerfile (multi-stage Rust build) is for local development.
|
|
# CI uses this to avoid 60+ min QEMU cross-compilation.
|
|
|
|
FROM ubuntu:24.04
|
|
|
|
# CA bundle copied from a reliable multi-arch image instead of apt-installing
|
|
# from ports.ubuntu.com — Canonical's arm64 ports mirror is unreachable from
|
|
# CI runners and breaks the multi-arch release build. No build-time network.
|
|
COPY --from=gcr.io/distroless/static-debian12 /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
|
|
|
# TARGETARCH (amd64 / arm64) is provided automatically by buildx for each
|
|
# target platform, so one multi-platform build copies the matching binaries.
|
|
# The release workflow stages them in binaries-amd64 / binaries-arm64.
|
|
ARG TARGETARCH
|
|
COPY binaries-${TARGETARCH}/webclaw /usr/local/bin/webclaw
|
|
COPY binaries-${TARGETARCH}/webclaw-mcp /usr/local/bin/webclaw-mcp
|
|
COPY binaries-${TARGETARCH}/webclaw-server /usr/local/bin/webclaw-server
|
|
|
|
# Default REST API port when running `webclaw-server` inside the container.
|
|
EXPOSE 3000
|
|
|
|
# Container default: bind all interfaces so `-p 3000:3000` works. The
|
|
# binary itself defaults to 127.0.0.1; flipping here keeps the CLI safe on
|
|
# a laptop but makes the container reachable out of the box.
|
|
ENV WEBCLAW_HOST=0.0.0.0
|
|
|
|
# Entrypoint shim: forwards webclaw args/URL to the binary, but exec's other
|
|
# commands directly so this image can be used as a FROM base with custom CMD.
|
|
# `--chmod` sets the bit at copy time so the build needs no in-container `RUN`
|
|
# (and thus no QEMU emulation for the arm64 platform).
|
|
COPY --chmod=755 docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
|
|
|
|
ENTRYPOINT ["docker-entrypoint.sh"]
|
|
CMD ["webclaw", "--help"]
|