Add image

Author: joshma-openai

.github/workflows/build-image.yml

@@ -0,0 +1,33 @@
+name: Build image
+
+on:
+  push:
+    branches: [ "main" ]
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: ${{ github.repository }}
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      attestations: write
+      id-token: write
+    steps:
+    - uses: actions/checkout@v4
+    - name: Log in to ghcr.io
+      uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+      with:
+        registry: ${{ env.REGISTRY }}
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+    - name: Build and push
+      uses: docker/build-push-action@v6
+      with:
+        push: true
+        tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest

Dockerfile

@@ -0,0 +1,211 @@
+FROM ubuntu:24.04
+
+ENV LANG="C.UTF-8"
+
+### BASE ###
+
+RUN apt-get update \
+    && apt-get upgrade -y \
+    && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+        binutils \
+        sudo \
+        build-essential \
+        bzr \
+        curl \
+        default-libmysqlclient-dev \
+        dnsutils \
+        gettext \
+        git \
+        git-lfs \
+        gnupg2 \
+        inotify-tools \
+        iputils-ping \
+        jq \
+        libbz2-dev \
+        libc6 \
+        libc6-dev \
+        libcurl4-openssl-dev \
+        libdb-dev \
+        libedit2 \
+        libffi-dev \
+        libgcc-13-dev \
+        libgcc1 \
+        libgdbm-compat-dev \
+        libgdbm-dev \
+        libgdiplus \
+        libgssapi-krb5-2 \
+        liblzma-dev \
+        libncurses-dev \
+        libncursesw5-dev \
+        libnss3-dev \
+        libpq-dev \
+        libpsl-dev \
+        libpython3-dev \
+        libreadline-dev \
+        libsqlite3-dev \
+        libssl-dev \
+        libstdc++-13-dev \
+        libunwind8 \
+        libuuid1 \
+        libxml2-dev \
+        libz3-dev \
+        make \
+        moreutils \
+        netcat-openbsd \
+        openssh-client \
+        pkg-config \
+        protobuf-compiler \
+        python3-pip \
+        ripgrep \
+        rsync \
+        software-properties-common \
+        sqlite3 \
+        swig3.0 \
+        tk-dev \
+        tzdata \
+        unixodbc-dev \
+        unzip \
+        uuid-dev \
+        xz-utils \
+        zip \
+        zlib1g \
+        zlib1g-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+### PYTHON ###
+
+ARG PYENV_VERSION=v2.5.5
+# pyenv commands require the full version, so we specify e.g. 3.11.12 rather than 3.11
+ARG PYTHON_VERSION=3.11.12
+
+# Install pyenv
+ENV PYENV_ROOT=/root/.pyenv
+ENV PATH=$PYENV_ROOT/bin:$PATH
+RUN git -c advice.detachedHead=0 clone --branch ${PYENV_VERSION} --depth 1 https://github.com/pyenv/pyenv.git "${PYENV_ROOT}" \
+    && echo 'export PYENV_ROOT="$HOME/.pyenv"' >> /etc/profile \
+    && echo 'export PATH="$$PYENV_ROOT/shims:$PYENV_ROOT/bin:$PATH"' >> /etc/profile \
+    && echo 'eval "$(pyenv init - bash)"' >> /etc/profile \
+    && cd ${PYENV_ROOT} && src/configure && make -C src \
+    && pyenv install 3.10 3.11.12 3.12 3.13 \
+    && pyenv global ${PYTHON_VERSION}
+# Install pipx for common global package managers (e.g. poetry)
+ENV PIPX_BIN_DIR=/root/.local/bin
+ENV PATH=$PIPX_BIN_DIR:$PATH
+RUN apt-get update && apt-get install -y pipx \
+    && pipx install poetry uv
+
+### NODE ###
+
+ARG NVM_VERSION=v0.40.2
+ARG NODE_VERSION=22
+
+ENV NVM_DIR=/root/.nvm
+# Suppress interactive download prompt
+ENV COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+RUN git -c advice.detachedHead=0 clone --branch ${NVM_VERSION} --depth 1 https://github.com/nvm-sh/nvm.git "${NVM_DIR}" \
+    && echo 'source $NVM_DIR/nvm.sh' >> /etc/profile \
+    && . $NVM_DIR/nvm.sh \
+    && nvm install 18 \
+    && nvm install 20 \
+    && nvm install 22 \
+    && nvm alias default $NODE_VERSION \
+    && corepack enable
+
+### BUN ###
+
+ARG BUN_VERSION=1.2.10
+
+ENV BUN_INSTALL=/root/.bun
+ENV PATH="$BUN_INSTALL/bin:$PATH"
+
+RUN mkdir -p "$BUN_INSTALL/bin" \
+    && curl -L --fail "https://github.com/oven-sh/bun/releases/download/bun-v${BUN_VERSION}/bun-linux-x64-baseline.zip" \
+        -o /tmp/bun.zip \
+    && unzip -q /tmp/bun.zip -d "$BUN_INSTALL/bin" \
+    && mv "$BUN_INSTALL/bin/bun-linux-x64-baseline/bun" "$BUN_INSTALL/bin/bun" \
+    && chmod +x "$BUN_INSTALL/bin/bun" \
+    && rm -rf "$BUN_INSTALL/bin/bun-linux-x64-baseline" /tmp/bun.zip \
+    && echo 'export BUN_INSTALL=/root/.bun' >> /etc/profile \
+    && echo 'export PATH="$BUN_INSTALL/bin:$PATH"' >> /etc/profile
+
+### JAVA ###
+
+ARG JAVA_VERSION=21
+ARG GRADLE_VERSION=8.14
+ARG GRADLE_DOWNLOAD_SHA256=61ad310d3c7d3e5da131b76bbf22b5a4c0786e9d892dae8c1658d4b484de3caa
+
+ENV GRADLE_HOME=/opt/gradle
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        openjdk-${JAVA_VERSION}-jdk \
+    && rm -rf /var/lib/apt/lists/* \
+    && curl -LO "https://services.gradle.org/distributions/gradle-${GRADLE_VERSION}-bin.zip" \
+    && echo "${GRADLE_DOWNLOAD_SHA256} *gradle-${GRADLE_VERSION}-bin.zip" | sha256sum --check - \
+    && unzip gradle-${GRADLE_VERSION}-bin.zip \
+    && rm gradle-${GRADLE_VERSION}-bin.zip \
+    && mv "gradle-${GRADLE_VERSION}" "${GRADLE_HOME}/" \
+    && ln -s "${GRADLE_HOME}/bin/gradle" /usr/bin/gradle
+
+### SWIFT ###
+
+ARG SWIFT_VERSION=6.1
+ARG SWIFT_DOWNLOAD_SHA256=8c11f8bdeee212ed4b541a1ce2708866d4d290fdfe02362b0048b4cc57614341
+
+# Install swift.
+RUN mkdir /tmp/swiftly \
+    && cd /tmp/swiftly \
+    && curl -O https://download.swift.org/swiftly/linux/swiftly-$(uname -m).tar.gz \
+    && echo "${SWIFT_DOWNLOAD_SHA256} *swiftly-$(uname -m).tar.gz" | sha256sum --check - \
+    && tar zxf swiftly-$(uname -m).tar.gz \
+    && ./swiftly init --quiet-shell-followup -y \
+    && echo '. ~/.local/share/swiftly/env.sh' >> /etc/profile \
+    && bash -lc "swiftly install --use ${SWIFT_VERSION}" \
+    && rm -rf /tmp/swiftly
+
+### RUBY ###
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        ruby-full
+
+### RUST ###
+
+RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
+        sh -s -- -y --profile minimal \
+    && . "$HOME/.cargo/env" \
+    && rustup show
+
+### GO ###
+
+ARG GO_VERSION=1.23.8
+ARG GO_DOWNLOAD_SHA256=45b87381172a58d62c977f27c4683c8681ef36580abecd14fd124d24ca306d3f
+
+# Go defaults GOROOT to /usr/local/go - we just need to update PATH
+ENV PATH=/usr/local/go/bin:$HOME/go/bin:$PATH
+RUN mkdir /tmp/go \
+    && cd /tmp/go \
+    && curl -O https://dl.google.com/go/go${GO_VERSION}.linux-amd64.tar.gz \
+    && echo "${GO_DOWNLOAD_SHA256} *go${GO_VERSION}.linux-amd64.tar.gz" | sha256sum --check - \
+    && tar -C /usr/local -xzf go${GO_VERSION}.linux-amd64.tar.gz \
+    && rm -rf /tmp/go
+
+### BAZEL ###
+
+RUN curl -L --fail https://github.com/bazelbuild/bazelisk/releases/download/v1.26.0/bazelisk-linux-amd64 -o /usr/local/bin/bazelisk \
+    && chmod +x /usr/local/bin/bazelisk \
+    && ln -s /usr/local/bin/bazelisk /usr/local/bin/bazel
+
+### LLVM ###
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        git \
+        cmake \
+        ccache \
+        python3 \
+        ninja-build \
+        nasm \
+        yasm \
+        gawk \
+        lsb-release \
+        wget \
+        software-properties-common \
+        gnupg \
+    && rm -rf /var/lib/apt/lists/* \
+    && bash -c "$(wget -O - https://apt.llvm.org/llvm.sh)"

README.md

@@ -1,2 +1,12 @@
 # codex-universal
 Base docker image used in Codex environments
+
+# Usage
+
+```
+docker pull ghcr.io/openai/codex-universal:latest
+```
+
+```
+docker run -v $(pwd):/workspace/$(basename $(pwd)) -it ghcr.io/openai/codex-universal:latest
+```