@hybridlabor-api/aos 4.8.0 → 4.9.0

package/skills/global_config/dockerfile-generator/examples/example.dockerignore

@@ -0,0 +1,95 @@
+# Git
+.git
+.gitignore
+.gitattributes
+
+# CI/CD
+.github
+.gitlab-ci.yml
+.travis.yml
+.circleci
+Jenkinsfile
+
+# Documentation
+README.md
+CHANGELOG.md
+CONTRIBUTING.md
+LICENSE
+*.md
+docs/
+
+# Docker
+Dockerfile*
+docker-compose*.yml
+.dockerignore
+
+# Environment
+.env
+.env.*
+*.local
+.envrc
+
+# Logs
+logs/
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+.DS_Store
+*.iml
+
+# Testing
+coverage/
+.coverage
+test-results/
+*.test
+.pytest_cache/
+.tox/
+
+# Node.js
+node_modules/
+.npm
+.yarn
+.pnp.*
+
+# Python
+__pycache__/
+*.py[cod]
+*$py.class
+*.so
+.Python
+venv/
+.venv/
+env/
+ENV/
+pip-log.txt
+*.egg-info/
+
+# Go
+vendor/
+*.exe
+*.out
+go.work
+go.work.sum
+
+# Java
+*.class
+*.jar
+*.war
+*.ear
+.gradle/
+.mvn/
+!.mvn/wrapper/maven-wrapper.jar
+
+# Build artifacts (covers all languages)
+dist/
+build/
+target/
+out/

package/skills/global_config/dockerfile-generator/examples/golang-distroless.Dockerfile

@@ -0,0 +1,34 @@
+# syntax=docker/dockerfile:1
+
+# Build stage
+FROM golang:1.21-alpine AS builder
+WORKDIR /app
+
+# Copy go mod files
+COPY go.mod go.sum ./
+RUN go mod download
+
+# Copy source code
+COPY . .
+
+# Build the application with optimizations
+RUN CGO_ENABLED=0 GOOS=linux go build -a -ldflags="-s -w" -o /app/main .
+
+# Production stage (using distroless for minimal image)
+# gcr.io/distroless/static-debian12 IS a specific tag; hadolint DL3006 is a
+# false positive for non-Docker-Hub registries.
+# hadolint ignore=DL3006
+FROM gcr.io/distroless/static-debian12 AS production
+WORKDIR /
+
+# Copy binary from builder
+COPY --from=builder /app/main /main
+
+# Expose port
+EXPOSE 8080
+
+# Switch to non-root user (distroless runs as nonroot by default)
+USER nonroot:nonroot
+
+# Start application
+ENTRYPOINT ["/main"]

package/skills/global_config/dockerfile-generator/examples/java-springboot.Dockerfile

@@ -0,0 +1,45 @@
+# syntax=docker/dockerfile:1
+
+# Build stage
+FROM eclipse-temurin:21-jdk-jammy AS builder
+WORKDIR /app
+
+# Copy Maven wrapper and pom.xml
+COPY mvnw pom.xml ./
+COPY .mvn .mvn
+
+# Download dependencies (cached layer)
+RUN ./mvnw dependency:go-offline
+
+# Copy source code
+COPY src ./src
+
+# Build application
+RUN ./mvnw clean package -DskipTests && \
+    mv target/*.jar target/app.jar
+
+# Production stage (using JRE instead of JDK)
+FROM eclipse-temurin:21-jre-jammy AS production
+WORKDIR /app
+
+# Install healthcheck dependency and create non-root user
+# hadolint ignore=DL3008
+RUN apt-get update && apt-get install -y --no-install-recommends curl && \
+    rm -rf /var/lib/apt/lists/* && \
+    useradd -m -u 1001 app
+
+# Copy JAR from builder
+COPY --from=builder --chown=app:app /app/target/app.jar ./app.jar
+
+# Switch to non-root user
+USER app
+
+# Expose port
+EXPOSE 8080
+
+# Health check (Spring Boot Actuator)
+HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
+    CMD curl -f http://localhost:8080/actuator/health || exit 1
+
+# Start application
+ENTRYPOINT ["java", "-jar", "app.jar"]

package/skills/global_config/dockerfile-generator/examples/nextjs-production.Dockerfile

@@ -0,0 +1,49 @@
+# syntax=docker/dockerfile:1
+
+# Dependencies stage
+FROM node:20-alpine AS deps
+WORKDIR /app
+
+# Copy dependency files
+COPY package*.json ./
+RUN npm ci
+
+# Builder stage
+FROM node:20-alpine AS builder
+WORKDIR /app
+
+# Copy dependencies and application code
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+# Build Next.js application
+RUN npm run build
+
+# Production stage
+FROM node:20-alpine AS runner
+WORKDIR /app
+
+ENV NODE_ENV=production
+
+# Create non-root user
+RUN addgroup -g 1001 -S nodejs && \
+    adduser -S nextjs -u 1001
+
+# Copy built application
+COPY --from=builder --chown=nextjs:nodejs /app/.next ./.next
+COPY --from=builder --chown=nextjs:nodejs /app/public ./public
+COPY --from=builder /app/node_modules ./node_modules
+COPY --from=builder /app/package.json ./package.json
+
+# Switch to non-root user
+USER nextjs
+
+# Expose port
+EXPOSE 3000
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=3s --start-period=10s --retries=3 \
+    CMD node -e "require('http').get('http://localhost:3000', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"
+
+# Start application
+CMD ["npm", "start"]

package/skills/global_config/dockerfile-generator/examples/nodejs-multistage.Dockerfile

@@ -0,0 +1,55 @@
+# syntax=docker/dockerfile:1
+
+# Build stage (for apps that compile assets, e.g. TypeScript/Vite/Webpack)
+FROM node:20-alpine AS builder
+WORKDIR /app
+
+# Copy dependency files for caching
+COPY package*.json ./
+
+# Install full dependency tree so build tooling is available
+RUN npm ci && \
+    npm cache clean --force
+
+# Copy application code
+COPY . .
+
+# Build application and prune devDependencies afterward
+RUN npm run build && \
+    npm prune --omit=dev
+
+# Production stage
+FROM node:20-alpine AS production
+WORKDIR /app
+
+# Set production environment
+ENV NODE_ENV=production
+
+# Create non-root user
+RUN addgroup -g 1001 -S nodejs && \
+    adduser -S nodejs -u 1001
+
+# Copy runtime dependencies and built output
+COPY --from=builder --chown=nodejs:nodejs /app/node_modules ./node_modules
+COPY --from=builder --chown=nodejs:nodejs /app/dist ./dist
+COPY --from=builder --chown=nodejs:nodejs /app/package*.json ./
+
+# Switch to non-root user
+USER nodejs
+
+# Expose port
+EXPOSE 3000
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD node -e "require('http').get('http://localhost:3000/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})" || exit 1
+
+# Start application
+CMD ["node", "dist/index.js"]
+
+# No-build variant (apps that run source directly):
+# 1) In builder stage, replace install/build lines with:
+#    RUN npm ci --omit=dev && npm cache clean --force
+# 2) In production stage, replace COPY/CMD with:
+#    COPY --from=builder --chown=nodejs:nodejs /app ./
+#    CMD ["node", "src/index.js"]

package/skills/global_config/dockerfile-generator/examples/python-fastapi.Dockerfile

@@ -0,0 +1,48 @@
+# syntax=docker/dockerfile:1
+
+# Build stage
+FROM python:3.12-slim AS builder
+WORKDIR /app
+
+# Install build dependencies
+# hadolint ignore=DL3008
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    gcc \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy dependency files
+COPY requirements.txt .
+
+# Install Python dependencies
+RUN pip install --no-cache-dir --user -r requirements.txt
+
+# Production stage
+FROM python:3.12-slim AS production
+WORKDIR /app
+
+# Create non-root user
+RUN useradd -m -u 1001 app
+
+# Copy dependencies from builder
+COPY --from=builder /root/.local /home/app/.local
+
+# Copy application code
+COPY --chown=app:app . .
+
+# Update PATH and set Python production env vars
+ENV PATH=/home/app/.local/bin:$PATH \
+    PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1
+
+# Switch to non-root user
+USER app
+
+# Expose port
+EXPOSE 8000
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8000/health').read()" || exit 1
+
+# Start application with uvicorn
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "8000"]