Initial commit

Author: joshma-openai

.github/workflows/build-image.yml

@@ -0,0 +1,33 @@
+name: Build image
+
+on:
+  push:
+    branches: [ "main" ]
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
+    steps:
+    - uses: actions/checkout@v4
+    - name: Log in to ghcr.io
+      uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+      with:
+        registry: ${{ env.REGISTRY }}
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+    - name: Build and push
+      uses: docker/build-push-action@v6
+      with:
+        push: true
+        tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest

Dockerfile

@@ -0,0 +1,220 @@
+FROM ubuntu:24.04
+
+ENV LANG="C.UTF-8"
+ENV HOME=/root
+
+### BASE ###
+
+RUN apt-get update \
+    && apt-get upgrade -y \
+    && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+        binutils \
+        sudo \
+        build-essential \
+        bzr \
+        curl \
+        default-libmysqlclient-dev \
+        dnsutils \
+        gettext \
+        git \
+        git-lfs \
+        gnupg2 \
+        inotify-tools \
+        iputils-ping \
+        jq \
+        libbz2-dev \
+        libc6 \
+        libc6-dev \
+        libcurl4-openssl-dev \
+        libdb-dev \
+        libedit2 \
+        libffi-dev \
+        libgcc-13-dev \
+        libgcc1 \
+        libgdbm-compat-dev \
+        libgdbm-dev \
+        libgdiplus \
+        libgssapi-krb5-2 \
+        liblzma-dev \
+        libncurses-dev \
+        libncursesw5-dev \
+        libnss3-dev \
+        libpq-dev \
+        libpsl-dev \
+        libpython3-dev \
+        libreadline-dev \
+        libsqlite3-dev \
+        libssl-dev \
+        libstdc++-13-dev \
+        libunwind8 \
+        libuuid1 \
+        libxml2-dev \
+        libz3-dev \
+        make \
+        moreutils \
+        netcat-openbsd \
+        openssh-client \
+        pkg-config \
+        protobuf-compiler \
+        python3-pip \
+        ripgrep \
+        rsync \
+        software-properties-common \
+        sqlite3 \
+        swig3.0 \
+        tk-dev \
+        tzdata \
+        unixodbc-dev \
+        unzip \
+        uuid-dev \
+        xz-utils \
+        zip \
+        zlib1g \
+        zlib1g-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+### PYTHON ###
+
+ARG PYENV_VERSION=v2.5.5
+# pyenv commands require the full version, so we specify e.g. 3.11.12 rather than 3.11
+ARG PYTHON_VERSION=3.11.12
+
+# Install pyenv
+ENV PYENV_ROOT=/root/.pyenv
+ENV PATH=$PYENV_ROOT/bin:$PATH
+RUN git -c advice.detachedHead=0 clone --branch ${PYENV_VERSION} --depth 1 https://github.com/pyenv/pyenv.git "${PYENV_ROOT}" \
+    && echo 'export PYENV_ROOT="$HOME/.pyenv"' >> /etc/profile \
+    && echo 'export PATH="$$PYENV_ROOT/shims:$PYENV_ROOT/bin:$PATH"' >> /etc/profile \
+    && echo 'eval "$(pyenv init - bash)"' >> /etc/profile \
+    && cd ${PYENV_ROOT} && src/configure && make -C src \
+    && pyenv install 3.10 3.11.12 3.12 3.13 \
+    && pyenv global ${PYTHON_VERSION}
+# Install pipx for common global package managers (e.g. poetry)
+ENV PIPX_BIN_DIR=/root/.local/bin
+ENV PATH=$PIPX_BIN_DIR:$PATH
+RUN apt-get update && apt-get install -y pipx \
+    && pipx install poetry uv
+
+### NODE ###
+
+ARG NVM_VERSION=v0.40.2
+ARG NODE_VERSION=22
+
+ENV NVM_DIR=/root/.nvm
+# Suppress interactive download prompt
+ENV COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+RUN git -c advice.detachedHead=0 clone --branch ${NVM_VERSION} --depth 1 https://github.com/nvm-sh/nvm.git "${NVM_DIR}" \
+    && echo 'source $NVM_DIR/nvm.sh' >> /etc/profile \
+    && . $NVM_DIR/nvm.sh \
+    && nvm install 18 \
+    && nvm install 20 \
+    && nvm install 22 \
+    && nvm alias default $NODE_VERSION \
+    && corepack enable
+
+### BUN ###
+
+ARG BUN_VERSION=1.2.10
+
+ENV BUN_INSTALL=/root/.bun
+ENV PATH="$BUN_INSTALL/bin:$PATH"
+
+RUN mkdir -p "$BUN_INSTALL/bin" \
+    && curl -L --fail "https://github.com/oven-sh/bun/releases/download/bun-v${BUN_VERSION}/bun-linux-x64-baseline.zip" \
+        -o /tmp/bun.zip \
+    && unzip -q /tmp/bun.zip -d "$BUN_INSTALL/bin" \
+    && mv "$BUN_INSTALL/bin/bun-linux-x64-baseline/bun" "$BUN_INSTALL/bin/bun" \
+    && chmod +x "$BUN_INSTALL/bin/bun" \
+    && rm -rf "$BUN_INSTALL/bin/bun-linux-x64-baseline" /tmp/bun.zip \
+    && echo 'export BUN_INSTALL=/root/.bun' >> /etc/profile \
+    && echo 'export PATH="$BUN_INSTALL/bin:$PATH"' >> /etc/profile
+
+### JAVA ###
+
+ARG JAVA_VERSION=21
+ARG GRADLE_VERSION=8.14
+ARG GRADLE_DOWNLOAD_SHA256=61ad310d3c7d3e5da131b76bbf22b5a4c0786e9d892dae8c1658d4b484de3caa
+
+ENV GRADLE_HOME=/opt/gradle
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        openjdk-${JAVA_VERSION}-jdk \
+    && rm -rf /var/lib/apt/lists/* \
+    && curl -LO "https://services.gradle.org/distributions/gradle-${GRADLE_VERSION}-bin.zip" \
+    && echo "${GRADLE_DOWNLOAD_SHA256} *gradle-${GRADLE_VERSION}-bin.zip" | sha256sum --check - \
+    && unzip gradle-${GRADLE_VERSION}-bin.zip \
+    && rm gradle-${GRADLE_VERSION}-bin.zip \
+    && mv "gradle-${GRADLE_VERSION}" "${GRADLE_HOME}/" \
+    && ln -s "${GRADLE_HOME}/bin/gradle" /usr/bin/gradle
+
+### SWIFT ###
+
+ARG SWIFT_VERSION=6.1
+
+# Install swift.
+RUN mkdir /tmp/swiftly \
+    && cd /tmp/swiftly \
+    && curl -O https://download.swift.org/swiftly/linux/swiftly-$(uname -m).tar.gz \
+    && tar zxf swiftly-$(uname -m).tar.gz \
+    && ./swiftly init --quiet-shell-followup -y \
+    && echo '. ~/.local/share/swiftly/env.sh' >> /etc/profile \
+    && bash -lc "swiftly install --use ${SWIFT_VERSION}" \
+    && rm -rf /tmp/swiftly
+
+### RUBY ###
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        ruby-full
+
+### RUST ###
+
+RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
+        sh -s -- -y --profile minimal \
+    && . "$HOME/.cargo/env" \
+    && rustup show
+
+### GO ###
+
+ARG GO_VERSION=1.23.8
+ARG GO_DOWNLOAD_SHA256=45b87381172a58d62c977f27c4683c8681ef36580abecd14fd124d24ca306d3f
+
+# Go defaults GOROOT to /usr/local/go - we just need to update PATH
+ENV PATH=/usr/local/go/bin:$HOME/go/bin:$PATH
+RUN mkdir /tmp/go \
+    && cd /tmp/go \
+    && curl -O https://dl.google.com/go/go${GO_VERSION}.linux-amd64.tar.gz \
+    && echo "${GO_DOWNLOAD_SHA256} *go${GO_VERSION}.linux-amd64.tar.gz" | sha256sum --check - \
+    && tar -C /usr/local -xzf go${GO_VERSION}.linux-amd64.tar.gz \
+    && rm -rf /tmp/go
+
+### BAZEL ###
+
+RUN curl -L --fail https://github.com/bazelbuild/bazelisk/releases/download/v1.26.0/bazelisk-linux-amd64 -o /usr/local/bin/bazelisk \
+    && chmod +x /usr/local/bin/bazelisk \
+    && ln -s /usr/local/bin/bazelisk /usr/local/bin/bazel
+
+### LLVM ###
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        git \
+        cmake \
+        ccache \
+        python3 \
+        ninja-build \
+        nasm \
+        yasm \
+        gawk \
+        lsb-release \
+        wget \
+        software-properties-common \
+        gnupg \
+    && rm -rf /var/lib/apt/lists/* \
+    && bash -c "$(wget -O - https://apt.llvm.org/llvm.sh)"
+
+### SETUP SCRIPTS ###
+
+COPY setup_universal.sh /opt/codex/setup_universal.sh
+RUN chmod +x /opt/codex/setup_universal.sh
+
+COPY entrypoint.sh /opt/entrypoint.sh
+RUN chmod +x /opt/entrypoint.sh
+
+ENTRYPOINT  ["/opt/entrypoint.sh"]

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 OpenAI
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,51 @@
+# codex-universal
+
+`codex-universal` is a development implementation of the base Docker image available in [OpenAI Codex](https://github.com/openai/codex).
+
+This repository is intended to help developers customizing environments in Codex by providing a similar image that can be pulled and run locally. This is not an identical environment but should help for debugging and development.
+
+For docs on environment setup, see [OpenAI Codex](https://github.com/openai/codex).
+
+## Usage
+
+The below script shows how can you approximate the `setup` environment in Codex.
+
+```
+docker pull ghcr.io/openai/codex-universal:latest
+```
+
+```
+docker run --rm -it \
+    # See below for environment variable options.
+    -e CODEX_ENV_PYTHON_VERSION=3.12 \
+    -e CODEX_ENV_NODE_VERSION=20 \
+    -e CODEX_ENV_RUST_VERSION=1.86.0 \
+    -e CODEX_ENV_GO_VERSION=1.23.8 \
+    -e CODEX_ENV_SWIFT_VERSION=6.1 \
+    # Mount the current directory similar to how it would get cloned in.
+    -v $(pwd):/workspace/$(basename $(pwd)) -w /workspace/$(basename $(pwd)) \
+    ghcr.io/openai/codex-universal:latest
+```
+
+### Configuring language runtimes
+
+The following env vars can be set to configure runtime installation. Note that a limited subset of versions are supported in the product (indicated in the table below)
+
+| Environment variable       | Description                | Supported versions                     | Additional packages                                                  |
+| -------------------------- | -------------------------- | -------------------------------------- | -------------------------------------------------------------------- |
+| `CODEX_ENV_PYTHON_VERSION` | Python version to install  | `3.10`, `3.11.12`, `3.12`, `3.13`      | `pyenv`, `poetry`, `uv`, `ruff`, `black`, `mypy`, `pyright`, `isort` |
+| `CODEX_ENV_NODE_VERSION`   | Node.js version to install | `18`, `20`, `22`                       | `corepack`, `yarn`, `pnpm`, `npm`                                    |
+| `CODEX_ENV_RUST_VERSION`   | Rust version to install    | `1.83.0`, `1.84.1`, `1.85.1`, `1.86.0` |                                                                      |
+| `CODEX_ENV_GO_VERSION`     | Go version to install      | `1.22.12`, `1.23.8`, `1.24.3`          |                                                                      |
+| `CODEX_ENV_SWIFT_VERSION`  | Swift version to install   | `5.10`, `6.1`                          |                                                                      |
+
+## What's included
+
+In addition to the packages specified in the table above, the following packages are also installed:
+
+- `ruby`: 3.2.3
+- `bun`: 1.2.10
+- `java`: 21
+- `bazelisk` / `bazel`
+
+See [Dockerfile](Dockerfile) for the full details of installed packages.

entrypoint.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+echo "=================================="
+echo "Welcome to openai/codex-universal!"
+echo "=================================="
+
+/opt/codex/setup_universal.sh
+
+echo "Environment ready. Dropping you into a bash shell."
+exec bash --login "$@"