sandboxbox 1.2.0 → 1.2.2

package/Dockerfile

@@ -1,39 +1,95 @@
-FROM ubuntu:24.04
+FROM node:20
 
-# Set up code user
-RUN useradd code
+ARG TZ
+ENV TZ="$TZ"
 
-RUN chsh -s /bin/bash code
+ARG CLAUDE_CODE_VERSION=latest
 
-RUN mkdir /home/code
-RUN chown code:code /home/code
+# Install basic development tools and iptables/ipset
+RUN apt-get update && apt-get install -y --no-install-recommends \
+  less \
+  git \
+  procps \
+  sudo \
+  fzf \
+  zsh \
+  man-db \
+  unzip \
+  gnupg2 \
+  gh \
+  iptables \
+  ipset \
+  iproute2 \
+  dnsutils \
+  aggregate \
+  jq \
+  nano \
+  vim \
+  && apt-get clean && rm -rf /var/lib/apt/lists/*
 
-# Install deps
+# Ensure default node user has access to /usr/local/share
+RUN mkdir -p /usr/local/share/npm-global && \
+  chown -R node:node /usr/local/share
 
-ENV USE_BUILTIN_RIPGREP=0
-RUN apt-get update && apt-get install -y \
-    postgresql-client nodejs npm curl sudo neovim direnv supervisor
+ARG USERNAME=node
 
-# Install playwright deps
-RUN npx --yes playwright install-deps
+# Persist bash history.
+RUN SNIPPET="export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history" \
+  && mkdir -p /commandhistory \
+  && touch /commandhistory/.bash_history \
+  && chown -R $USERNAME /commandhistory
 
-RUN npm i -g @playwright/mcp
+# Set `DEVCONTAINER` environment variable to help with orientation
+ENV DEVCONTAINER=true
+
+# Create workspace and config directories and set permissions
+RUN mkdir -p /workspace /home/node/.claude && \
+  chown -R node:node /workspace /home/node/.claude
+
+WORKDIR /workspace
 
-# Install pnpm and configure it to be global
+ARG GIT_DELTA_VERSION=0.18.2
+RUN ARCH=$(dpkg --print-architecture) && \
+  wget "https://github.com/dandavison/delta/releases/download/${GIT_DELTA_VERSION}/git-delta_${GIT_DELTA_VERSION}_${ARCH}.deb" && \
+  sudo dpkg -i "git-delta_${GIT_DELTA_VERSION}_${ARCH}.deb" && \
+  rm "git-delta_${GIT_DELTA_VERSION}_${ARCH}.deb"
 
-RUN npm i -g pnpm
+# Set up non-root user
+USER node
 
-RUN mkdir -p /usr/local/share/pnpm/global/bin
+# Install global packages
+ENV NPM_CONFIG_PREFIX=/usr/local/share/npm-global
+ENV PATH=$PATH:/usr/local/share/npm-global/bin
 
-RUN pnpm config set global-bin-dir /usr/local/share/pnpm/global/bin
-RUN pnpm config set global-dir /usr/local/share/pnpm
-RUN echo 'export PATH="/usr/local/share/pnpm/global/bin:$PATH"' | tee -a /etc/bash.bashrc
+# Set the default shell to zsh rather than sh
+ENV SHELL=/bin/zsh
 
-RUN bash -c 'PATH="/usr/local/share/pnpm/global/bin:$PATH" && pnpm i -g @anthropic-ai/claude-code'
+# Set the default editor and visual
+ENV EDITOR=nano
+ENV VISUAL=nano
 
-USER code
+# Default powerline10k theme
+ARG ZSH_IN_DOCKER_VERSION=1.2.0
+RUN sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v${ZSH_IN_DOCKER_VERSION}/zsh-in-docker.sh)" -- \
+  -p git \
+  -p fzf \
+  -a "source /usr/share/doc/fzf/examples/key-bindings.zsh" \
+  -a "source /usr/share/doc/fzf/examples/completion.zsh" \
+  -a "export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history" \
+  -x
 
-# Install chromium. Has to be done using the playwright MCP version for proper pathing etc
-RUN node /usr/local/lib/node_modules/@playwright/mcp/node_modules/playwright/cli.js install chromium
+# Install Claude
+RUN npm install -g @anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}
+
+# Install playwright deps
+RUN npx --yes playwright install-deps
+
+RUN npm i -g @playwright/mcp
 
-CMD ["/bin/bash"]
+# Copy and set up firewall script
+COPY init-firewall.sh /usr/local/bin/
+USER root
+RUN chmod +x /usr/local/bin/init-firewall.sh && \
+  echo "node ALL=(root) NOPASSWD: /usr/local/bin/init-firewall.sh" > /etc/sudoers.d/node-firewall && \
+  chmod 0440 /etc/sudoers.d/node-firewall
+USER node

package/Dockerfile.test

@@ -0,0 +1,16 @@
+FROM ubuntu:24.04
+
+# Set environment variables
+ENV NODE_ENV=production
+ENV APP_DIR=/app
+
+# Create a simple test directory
+WORKDIR /app
+
+# Simple commands that don't require root
+RUN echo "Building container..."
+RUN echo "Node environment: $NODE_ENV"
+RUN mkdir -p data logs
+
+# Default command
+CMD ["/bin/bash"]