mirror of
https://github.com/profullstack/agentbbs.git
synced 2026-08-13 22:37:28 +00:00
Anthony Ettinger
94ce79374c
Code in your pod and push to git.profullstack.com using the SAME SSH key you signed in with — nothing is copied into the pod. When a member attaches with agent forwarding (ssh -A), agentbbs listens on a fresh unix socket in a per-user agent dir bind-mounted at /run/agentbbs-agent and proxies it back over the session; the pod shell gets SSH_AUTH_SOCK pointed at it. The pod image's ssh_config sends git@git.profullstack.com to Forgejo's SSH server (:2222), so `git clone git@git.profullstack.com:you/repo.git` just works. - pods.go: agentDir + startAgent (per-session socket, cleaned up on exit); Attach injects SSH_AUTH_SOCK when ssh.AgentRequested; ensure() bind-mounts the agent dir and self-heals idle pods missing it. No main.go change needed — charmbracelet/ssh sets AgentRequested from the session request loop. - pods/Containerfile: /etc/ssh/ssh_config.d entry (port 2222, user git, accept-new) so the conventional git@ URL reaches Forgejo. - setup.sh: keep using an already-built pod image if a later rebuild transient-fails, so a flaky deploy never downgrades pods to the base image. Build/vet/test/gofmt clean. Image rebuilt on the host; `ssh -G git.profullstack.com` resolves to port 2222 / user git. End-to-end push needs a live `ssh -A` session (validate after deploy). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
57 lines
2.6 KiB
Docker
57 lines
2.6 KiB
Docker
# AgentBBS member pod image. Built on the host by setup.sh (rootless podman),
|
|
# tagged localhost/agentbbs-pod:latest, and used for every member pod via
|
|
# AGENTBBS_POD_IMAGE. Members get a full shell here (HOME=/home/dev, persisted
|
|
# in a named volume; ~/public_html is bind-mounted to their website).
|
|
#
|
|
# Beyond a base Ubuntu it ships:
|
|
# - git + openssh-client → push to git.profullstack.com (SSH-key auth)
|
|
# - Node.js (LTS) → runtime for the AI coding CLIs
|
|
# - Claude Code + Codex CLIs → `claude` and `codex`, BYO API key per user
|
|
#
|
|
# BYO key: nothing here carries credentials. A member exports their own
|
|
# ANTHROPIC_API_KEY / OPENAI_API_KEY (or runs the tools' login flow); the keys
|
|
# live in their persisted home, never in the image.
|
|
FROM docker.io/library/ubuntu:24.04
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
ca-certificates curl gnupg \
|
|
git openssh-client \
|
|
vim nano less ripgrep jq \
|
|
&& install -d -m 0755 /usr/share/keyrings \
|
|
&& curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
|
|
| gpg --dearmor -o /usr/share/keyrings/nodesource.gpg \
|
|
&& echo "deb [signed-by=/usr/share/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" \
|
|
> /etc/apt/sources.list.d/nodesource.list \
|
|
&& apt-get update \
|
|
&& apt-get install -y --no-install-recommends nodejs \
|
|
&& npm install -g @anthropic-ai/claude-code @openai/codex \
|
|
&& npm cache clean --force \
|
|
&& apt-get clean \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# A login hint so members know the AI tools are present and BYO-key.
|
|
RUN printf '%s\n' \
|
|
'AgentBBS pod — coding tools ready:' \
|
|
' claude (Claude Code) — export ANTHROPIC_API_KEY=... or run: claude' \
|
|
' codex (OpenAI Codex) — export OPENAI_API_KEY=... or run: codex' \
|
|
' git push → git@git.profullstack.com (your BBS SSH key is your git key)' \
|
|
> /etc/motd \
|
|
&& printf '[ -n "$PS1" ] && [ -r /etc/motd ] && cat /etc/motd\n' \
|
|
> /etc/profile.d/10-agentbbs-motd.sh
|
|
|
|
# Make `git@git.profullstack.com:...` reach Forgejo's SSH server (port 2222) and
|
|
# trust it on first use, so clones/pushes just work with a forwarded agent key.
|
|
RUN install -d -m 0755 /etc/ssh/ssh_config.d \
|
|
&& printf '%s\n' \
|
|
'Host git.profullstack.com' \
|
|
' Port 2222' \
|
|
' User git' \
|
|
' StrictHostKeyChecking accept-new' \
|
|
> /etc/ssh/ssh_config.d/10-agentgit.conf \
|
|
&& grep -q 'ssh_config.d/\*.conf' /etc/ssh/ssh_config 2>/dev/null \
|
|
|| printf '\nInclude /etc/ssh/ssh_config.d/*.conf\n' >> /etc/ssh/ssh_config
|
|
|
|
CMD ["sleep", "infinity"]
|