lifsys-qm-sandbox (latest)
Published 2026-08-14 09:29:34 +00:00 by ember
Installation
docker pull repo.lifsys.one/lifsys/lifsys-qm-sandbox:latestsha256:d6f6b949099e44173f4314ee3c3b602d4b07619c2796d88377a53f705f323e40Image layers
| # debian.sh --arch 'amd64' out/ 'bookworm' '@1783900800' |
| ARG DEBIAN_FRONTEND=noninteractive |
| RUN |1 DEBIAN_FRONTEND=noninteractive /bin/sh -c apt-get update && apt-get install -y --no-install-recommends bash coreutils findutils grep sed gawk git curl wget jq unzip nftables python3 python3-venv python3-pip ca-certificates gnupg && rm -rf /var/lib/apt/lists/* # buildkit |
| COPY /usr/local/ /usr/local/ # buildkit |
| ARG TARGETARCH=amd64 |
| ARG GH_VERSION=2.93.0 |
| RUN |3 DEBIAN_FRONTEND=noninteractive TARGETARCH=amd64 GH_VERSION=2.93.0 /bin/sh -c case "$TARGETARCH" in amd64) GH_SHA=02d1290eba130e0b896f3709ffff22e1c75a51475ddb70476a85abc6b5807af0 ;; arm64) GH_SHA=c55feb33684abba57e9909737340d5b39282257c0363e1edde6785ac4a413be7 ;; *) exit 1 ;; esac && curl -fsSL "https://github.com/cli/cli/releases/download/v${GH_VERSION}/gh_${GH_VERSION}_linux_${TARGETARCH}.tar.gz" -o /tmp/gh.tgz && echo "$GH_SHA /tmp/gh.tgz" | sha256sum -c - && tar xzf /tmp/gh.tgz -C /tmp && install "/tmp/gh_${GH_VERSION}_linux_${TARGETARCH}/bin/gh" /usr/local/bin/gh && rm -rf /tmp/gh* && gh --version && rm -rf /root/.local/state/gh # buildkit |
| RUN |3 DEBIAN_FRONTEND=noninteractive TARGETARCH=amd64 GH_VERSION=2.93.0 /bin/sh -c claude --version && codex --version # buildkit |
| ARG AWSCLI_VERSION=2.34.54 |
| RUN |4 DEBIAN_FRONTEND=noninteractive TARGETARCH=amd64 GH_VERSION=2.93.0 AWSCLI_VERSION=2.34.54 /bin/sh -c case "$TARGETARCH" in amd64) AWS_ARCH=x86_64; AWS_SHA=de278754dec97e0f6e9b4e8167d4bd1a27004c3e56e9c2da10002597f76ca35a ;; arm64) AWS_ARCH=aarch64; AWS_SHA=f381be152a868ccfdd0cb7cb235916b1dd8024e388bdeef0c385fb33af131a60 ;; *) exit 1 ;; esac && curl -fsSL "https://awscli.amazonaws.com/awscli-exe-linux-${AWS_ARCH}-${AWSCLI_VERSION}.zip" -o /tmp/awscliv2.zip && echo "$AWS_SHA /tmp/awscliv2.zip" | sha256sum -c - && unzip -q /tmp/awscliv2.zip -d /tmp && /tmp/aws/install && rm -rf /tmp/aws /tmp/awscliv2.zip && aws --version # buildkit |
| RUN |4 DEBIAN_FRONTEND=noninteractive TARGETARCH=amd64 GH_VERSION=2.93.0 AWSCLI_VERSION=2.34.54 /bin/sh -c python3 -m venv /opt/agent-venv && /opt/agent-venv/bin/pip install --no-cache-dir --upgrade pip # buildkit |
| ENV PATH=/opt/agent-venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| ENV VIRTUAL_ENV=/opt/agent-venv |
| COPY fly/tools/x-api /usr/local/bin/x-api # buildkit |
| RUN |4 DEBIAN_FRONTEND=noninteractive TARGETARCH=amd64 GH_VERSION=2.93.0 AWSCLI_VERSION=2.34.54 /bin/sh -c chmod +x /usr/local/bin/x-api # buildkit |
| ARG INSTALL_BROWSER_ENGINE=1 |
| ARG BROWSER_USE_VERSION=0.12.9 |
| RUN |6 DEBIAN_FRONTEND=noninteractive TARGETARCH=amd64 GH_VERSION=2.93.0 AWSCLI_VERSION=2.34.54 INSTALL_BROWSER_ENGINE=1 BROWSER_USE_VERSION=0.12.9 /bin/sh -c if [ "$INSTALL_BROWSER_ENGINE" = "1" ]; then set -eux; apt-get update && apt-get install -y --no-install-recommends chromium ca-certificates fontconfig fonts-liberation fonts-noto-color-emoji fonts-noto-cjk fonts-freefont-ttf && rm -rf /var/lib/apt/lists/*; python3 -m venv /opt/browser-engine/venv; /opt/browser-engine/venv/bin/pip install --no-cache-dir --upgrade pip; /opt/browser-engine/venv/bin/pip install --no-cache-dir "browser-use==${BROWSER_USE_VERSION}"; /opt/browser-engine/venv/bin/python -c "import browser_use; print('browser-use ok')"; /usr/bin/chromium --version; : > /etc/machine-id; : > /var/lib/dbus/machine-id; fi # buildkit |
| ENV ANONYMIZED_TELEMETRY=false |
| ENV BROWSER_USE_CLOUD_SYNC=false |
| WORKDIR /workspace |
| CMD ["sh" "-c" "while true; do sleep 3600; done"] |
| COPY tools/example-tool/example-tool /usr/local/bin/example-tool # buildkit |
| RUN /bin/sh -c chmod -R a+rx /usr/local/bin # buildkit |
| RUN /bin/sh -c for b in 'example-tool'; do command -v "$b" >/dev/null 2>&1 || { echo "sandbox build: tool binary $b is not on PATH" >&2; exit 1; }; done # buildkit |