egbe-openclaw (verified)

Published 2026-07-24 17:44:27 +00:00 by forgejo-admin

Pull the image from the command line:

docker pull forgejo.gcp.egbe.dev/forgejo-admin/egbe-openclaw:verified

Digest

sha256:e4404ca552d4354cfe8aa5790075d55da9dc5962fb2d76d7637fbdb4a1ab7009

For more information on the Container registry, see the documentation.

# debian.sh --arch 'amd64' out/ 'bookworm' '@1783900800'

RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates curl gnupg netbase sq wget ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends git mercurial openssh-client subversion procps ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c set -ex; apt-get update; apt-get install -y --no-install-recommends autoconf automake bzip2 default-libmysqlclient-dev dpkg-dev file g++ gcc imagemagick libbz2-dev libc6-dev libcurl4-openssl-dev libdb-dev libevent-dev libffi-dev libgdbm-dev libglib2.0-dev libgmp-dev libjpeg-dev libkrb5-dev liblzma-dev libmagickcore-dev libmagickwand-dev libmaxminddb-dev libncurses5-dev libncursesw5-dev libpng-dev libpq-dev libreadline-dev libsqlite3-dev libssl-dev libtool libwebp-dev libxml2-dev libxslt-dev libyaml-dev make patch unzip xz-utils zlib1g-dev ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c groupadd --gid 1000 node && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit

ENV NODE_VERSION=24.18.0

RUN /bin/sh -c ARCH= && dpkgArch="$(dpkg --print-architecture)" && case "${dpkgArch##*-}" in amd64) ARCH='x64';; ppc64el) ARCH='ppc64le';; s390x) ARCH='s390x';; arm64) ARCH='arm64';; armhf) ARCH='armv7l';; *) echo "unsupported architecture"; exit 1 ;; esac && export GNUPGHOME="$(mktemp -d)" && set -ex && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt && ln -s /usr/local/bin/node /usr/local/bin/nodejs && node --version && npm --version && rm -rf /tmp/* # buildkit

ENV YARN_VERSION=1.22.22

RUN /bin/sh -c set -ex && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && yarn --version && rm -rf /tmp/* # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["node"]

ARG AGENT_BROWSER_VERSION=0.21.0

ARG FORGEJO_TEA_VERSION=0.12.0

ARG ACPX_VERSION=0.3.1

ARG SKILLS_CLI_VERSION=1.5.6

ARG IMPECCABLE_VERSION=3.1.0

ARG PI_CODING_AGENT_VERSION=0.80.2

ARG TARGETARCH=amd64

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends git cron curl wget jq ripgrep build-essential python3 python3-pip postgresql-client openssh-client ca-certificates openssl rsync socat ffmpeg python3-requests sudo util-linux procps unzip tmux libnss3 libnspr4 libatk1.0-0 libatk-bridge2.0-0 libcups2 libdrm2 libxkbcommon0 libatspi2.0-0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 libgbm1 libpango-1.0-0 libcairo2 libasound2 libxshmfence1 && rm -rf /var/lib/apt/lists/* # buildkit

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c pip3 install --no-cache-dir --break-system-packages "pydantic>=2.0" "sqlmodel>=0.0.16" "fastapi>=0.110" "uvicorn>=0.29" "pyyaml>=6.0" "typer>=0.12" "markdown>=3.5" # buildkit

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c npm install -g "agent-browser@${AGENT_BROWSER_VERSION}" "acpx@${ACPX_VERSION}" && if [ "${TARGETARCH}" = "amd64" ]; then agent-browser install --with-deps && mv /root/.agent-browser /opt/agent-browser && chmod -R a+rX /opt/agent-browser && CHROME_BIN="$(find /opt/agent-browser -name chrome -type f | head -1)" && ln -sf "${CHROME_BIN}" /usr/bin/google-chrome-stable && ln -sf "${CHROME_BIN}" /usr/bin/google-chrome; else apt-get update && apt-get install -y --no-install-recommends chromium && rm -rf /var/lib/apt/lists/*; fi && npm cache clean --force # buildkit

COPY bin/agent-browser /tmp/agent-browser # buildkit

COPY bin/browser-probe /tmp/browser-probe # buildkit

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c mv /usr/local/bin/agent-browser /usr/local/bin/agent-browser-real && install -m 755 /tmp/agent-browser /usr/local/bin/agent-browser && install -m 755 /tmp/browser-probe /usr/local/bin/browser-probe && rm -f /tmp/agent-browser /tmp/browser-probe # buildkit

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c case "${TARGETARCH}" in amd64) tea_arch="amd64" ;; arm64) tea_arch="arm64" ;; *) echo "Unsupported TARGETARCH for tea: ${TARGETARCH}" >&2; exit 1 ;; esac && curl -fsSL "https://dl.gitea.com/tea/${FORGEJO_TEA_VERSION}/tea-${FORGEJO_TEA_VERSION}-linux-${tea_arch}" -o /usr/local/bin/tea && chmod 755 /usr/local/bin/tea # buildkit

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c curl -fsSL https://opencode.ai/install | bash && cp /root/.opencode/bin/opencode /usr/local/bin/opencode && chmod +x /usr/local/bin/opencode && npm install -g "skills@${SKILLS_CLI_VERSION}" && PUPPETEER_SKIP_DOWNLOAD=true PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true npm install -g "impeccable@${IMPECCABLE_VERSION}" && npm install -g --ignore-scripts "@earendil-works/pi-coding-agent@${PI_CODING_AGENT_VERSION}" && test -x "$(command -v pi)" && printf '#!/bin/sh\nexec /usr/bin/google-chrome-stable --no-sandbox "$@"\n' > /usr/local/bin/chrome-no-sandbox && chmod +x /usr/local/bin/chrome-no-sandbox && npm cache clean --force && ln -sf /bin/bash /bin/sh && printf '%s\n' 'case $- in *i*) [ -z "$_BASH_PROMOTED" ] && export _BASH_PROMOTED=1 && exec /bin/bash -i ;; esac' > /etc/sh.bash-promote && [ -e /usr/bin/google-chrome-stable ] || ln -sf /usr/bin/chromium /usr/bin/google-chrome-stable && mkdir -p /home/node/.local/share/opencode /home/node/.config/opencode /home/node/.cache /root/.config/opencode /home/node/workspace/projects /home/node/workspace/.egbe-dev && chown -R node:node /home/node/.local /home/node/.config /home/node/.cache /home/node/workspace # buildkit

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c HOME=/home/node bash -c 'curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash -s -- --skip-browser' && mkdir -p /home/node/.npm /home/node/.cache && chown -R node:node /home/node/.hermes /home/node/.npm /home/node/.cache && test -x /usr/local/bin/hermes # buildkit

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c chmod u+s /usr/sbin/cron && touch /var/run/crond.pid && chown node:node /var/run/crond.pid # buildkit

RUN |7 AGENT_BROWSER_VERSION=0.21.0 FORGEJO_TEA_VERSION=0.12.0 ACPX_VERSION=0.3.1 SKILLS_CLI_VERSION=1.5.6 IMPECCABLE_VERSION=3.1.0 PI_CODING_AGENT_VERSION=0.80.2 TARGETARCH=amd64 /bin/sh -c mkdir -p /home/node/.openclaw /home/node/workspace-seed /home/node/.agent-browser && chown -R node:node /home/node/.openclaw /home/node/workspace-seed /home/node/.agent-browser # buildkit

USER root

COPY heartbeat/requirements.txt /tmp/heartbeat-requirements.txt # buildkit

RUN /bin/sh -c pip3 install --no-cache-dir --break-system-packages -r /tmp/heartbeat-requirements.txt && rm -f /tmp/heartbeat-requirements.txt # buildkit

COPY heartbeat/package.json heartbeat/package-lock.json /tmp/heartbeat-node/ # buildkit

RUN /bin/sh -c npm ci --omit=dev --prefix /tmp/heartbeat-node && mkdir -p /usr/local/lib/heartbeat && mv /tmp/heartbeat-node/node_modules /usr/local/lib/heartbeat/node_modules && rm -rf /tmp/heartbeat-node && npm cache clean --force # buildkit

COPY --chown=node:node workspace/ /home/node/workspace-seed/ # buildkit

COPY --chown=root:root bin/install-skill-cli-links.sh /usr/local/bin/install-skill-cli-links.sh # buildkit

RUN /bin/sh -c mkdir -p /usr/local/share/egbe # buildkit

COPY --chown=root:root skill-cli-links.txt /usr/local/share/egbe/skill-cli-links.txt # buildkit

RUN /bin/sh -c chmod 755 /usr/local/bin/install-skill-cli-links.sh && /usr/local/bin/install-skill-cli-links.sh /home/node/workspace-seed /usr/local/share/egbe/skill-cli-links.txt # buildkit

COPY cleanup-idle-browsers.sh /usr/local/bin/cleanup-idle-browsers.sh # buildkit

RUN /bin/sh -c chmod +x /usr/local/bin/cleanup-idle-browsers.sh # buildkit

COPY bin/auth-billing-probe-smoke /usr/local/bin/auth-billing-probe-smoke # buildkit

RUN /bin/sh -c chmod +x /usr/local/bin/auth-billing-probe-smoke # buildkit

COPY bin/hermes-chat-runtime-context-hook.py /usr/local/bin/hermes-chat-runtime-context-hook # buildkit

RUN /bin/sh -c chmod +x /usr/local/bin/hermes-chat-runtime-context-hook # buildkit

COPY entrypoint.sh /usr/local/bin/entrypoint.sh # buildkit

COPY lib/ /usr/local/bin/lib/ # buildkit

RUN /bin/sh -c mkdir -p /usr/local/lib/egbe-runtime # buildkit

COPY runtime-models/model_definitions.py runtime-models/runtime_models.py runtime-models/definitions.v1.json runtime-models/surfaces.v1.json runtime-models/runtime-policy.v1.json runtime-models/chat-policy.v1.json /usr/local/lib/egbe-runtime/ # buildkit

RUN /bin/sh -c chmod +x /usr/local/bin/entrypoint.sh # buildkit

COPY --chown=node:node tmux.conf /home/node/.tmux.conf # buildkit

ENV SHELL=/bin/bash ENV=/etc/sh.bash-promote AGENT_BROWSER_EXECUTABLE_PATH=/usr/bin/google-chrome-stable PUPPETEER_EXECUTABLE_PATH=/usr/local/bin/chrome-no-sandbox IMPECCABLE_CMD=impeccable detect PYTHONPATH=/usr/local/lib/egbe-runtime EGBE_RUNTIME_MODEL_DEFINITIONS=/usr/local/lib/egbe-runtime/definitions.v1.json EGBE_RUNTIME_MODEL_SURFACES=/usr/local/lib/egbe-runtime/surfaces.v1.json EGBE_RUNTIME_MODEL_POLICY=/usr/local/lib/egbe-runtime/runtime-policy.v1.json LANG=C.UTF-8 LC_ALL=C.UTF-8

COPY --chown=node:node workspace/CODER.md /opt/template/CODER.md # buildkit

COPY --chown=node:node workspace/memory/ /opt/template/memory/ # buildkit

RUN /bin/sh -c mkdir -p /root/.config/opencode && ln -sfn /home/node/workspace/skills /root/.config/opencode/skills # buildkit

COPY --chown=node:node workspace/opencode.json /home/node/.config/opencode/opencode.json # buildkit

COPY --chown=root:root workspace/opencode.json /root/.config/opencode/opencode.json # buildkit

COPY --chown=root:root bin/egbe-dev-init.sh /usr/local/bin/egbe-dev-init.sh # buildkit

COPY --chown=root:root bin/ensure-docs-repo.sh /usr/local/bin/ensure-docs-repo.sh # buildkit

RUN /bin/sh -c chmod +x /usr/local/bin/egbe-dev-init.sh /usr/local/bin/ensure-docs-repo.sh # buildkit

COPY --chown=node:node heartbeat/ /usr/local/lib/heartbeat/ # buildkit

RUN /bin/sh -c chmod +x /usr/local/lib/heartbeat/cli.py /usr/local/lib/heartbeat/api.py /usr/local/lib/heartbeat/worker.py /usr/local/lib/heartbeat/enqueue.py /usr/local/lib/heartbeat/pollers/poll-forgejo.py 2>/dev/null || true # buildkit

RUN /bin/sh -c rm -rf /home/node/.hermes/skills # buildkit

COPY --chown=node:node hermes-base/ /home/node/.hermes/ # buildkit

RUN /bin/sh -c rm -rf /home/node/.hermes/egbe-skills # buildkit

RUN /bin/sh -c find /home/node/.hermes/skills -type f -path '*/scripts/*.sh' -exec chmod 755 {} + 2>/dev/null || true # buildkit

COPY --chown=root:root healthcheck.sh /usr/local/bin/openclaw-healthcheck.sh # buildkit

RUN /bin/sh -c chmod +x /usr/local/bin/openclaw-healthcheck.sh # buildkit

ARG BUILD_COMMIT=039c706

ARG BUILD_BRANCH=main

ENV BUILD_COMMIT=039c706

ENV BUILD_BRANCH=main

USER node

WORKDIR /home/node

EXPOSE [18900/tcp]

HEALTHCHECK &{["CMD-SHELL" "/usr/local/bin/openclaw-healthcheck.sh"] "30s" "15s" "3m0s" "0s" '\x05'}

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]

Details

Container

2026-07-24 17:44:27 +00:00

116

OCI / Docker

linux/amd64

1.8 GiB

Versions (50) View all

verified

2026-07-24

latest

2026-07-24

039c706

2026-07-24

main-039c706

2026-07-24

main

2026-07-24

egbe-openclaw (verified)

Installation

Image layers