bd sync: Dockerfile to rootfs conversion complete

thrashr888 · thrashr888 · commit ddb8443ee0ce · 2026-01-27T18:59:56.000-08:00
diff --git a/.beads/issues.jsonl b/.beads/issues.jsonl
@@ -35,7 +35,7 @@
 {"id":"agentkernel-iyq","title":"Integration tests: file operations","description":"Create tests/file_operations_test.rs:\n- cp host → sandbox\n- cp sandbox → host\n- write_file via API\n- read_file via API","status":"closed","priority":2,"issue_type":"task","owner":"thrashr888@gmail.com","created_at":"2026-01-25T12:44:58.691684-08:00","created_by":"Paul Thrasher","updated_at":"2026-01-25T13:47:24.9856-08:00","closed_at":"2026-01-25T13:47:24.9856-08:00","close_reason":"Added 12 new integration tests for file operations including file write, read, multiline content, binary files, directory operations, permissions, stress tests (100 files, 1MB file), and ephemeral run tests"}
 {"id":"agentkernel-jhv","title":"Agentkernel: Microkernel for AI Agents","description":"A Firecracker-inspired microkernel that provides sandboxed execution environments for AI coding agents. Supports Claude Code, Gemini CLI, Codex, and OpenCode in isolated Docker containers with per-project configuration.","status":"closed","priority":1,"issue_type":"epic","owner":"thrashr888@gmail.com","created_at":"2026-01-19T00:40:14.532521-08:00","created_by":"Paul Thrasher","updated_at":"2026-01-19T15:43:28.228393-08:00","closed_at":"2026-01-19T15:43:28.228393-08:00","close_reason":"All core microkernel features implemented","dependencies":[{"issue_id":"agentkernel-jhv","depends_on_id":"agentkernel-2ro","type":"blocks","created_at":"2026-01-19T00:40:52.902898-08:00","created_by":"Paul Thrasher"},{"issue_id":"agentkernel-jhv","depends_on_id":"agentkernel-pbf","type":"blocks","created_at":"2026-01-19T00:40:53.040613-08:00","created_by":"Paul Thrasher"},{"issue_id":"agentkernel-jhv","depends_on_id":"agentkernel-i49","type":"blocks","created_at":"2026-01-19T00:40:53.193697-08:00","created_by":"Paul Thrasher"},{"issue_id":"agentkernel-jhv","depends_on_id":"agentkernel-9kh","type":"blocks","created_at":"2026-01-19T00:40:53.385846-08:00","created_by":"Paul Thrasher"},{"issue_id":"agentkernel-jhv","depends_on_id":"agentkernel-70m","type":"blocks","created_at":"2026-01-19T00:40:55.578866-08:00","created_by":"Paul Thrasher"},{"issue_id":"agentkernel-jhv","depends_on_id":"agentkernel-3qj","type":"blocks","created_at":"2026-01-19T00:40:55.759663-08:00","created_by":"Paul Thrasher"},{"issue_id":"agentkernel-jhv","depends_on_id":"agentkernel-h8e","type":"blocks","created_at":"2026-01-19T00:40:55.939652-08:00","created_by":"Paul Thrasher"},{"issue_id":"agentkernel-jhv","depends_on_id":"agentkernel-do6","type":"blocks","created_at":"2026-01-19T00:40:56.127458-08:00","created_by":"Paul Thrasher"}]}
 {"id":"agentkernel-lop","title":"Create Claude Code skill plugin","description":"Create a Claude Code plugin with sandbox skill and /sandbox command for easy integration.","status":"closed","priority":2,"issue_type":"feature","owner":"thrashr888@gmail.com","created_at":"2026-01-19T14:04:37.010359-08:00","created_by":"Paul Thrasher","updated_at":"2026-01-19T14:04:42.96354-08:00","closed_at":"2026-01-19T14:04:42.96354-08:00","close_reason":"Created Claude Code plugin with sandbox skill and /sandbox command in claude-plugin/ directory"}
-{"id":"agentkernel-lth","title":"[RICE:48] Dockerfile Support","description":"Build custom environments from Dockerfiles with automatic caching and Firecracker rootfs conversion.\n\n**RICE Score: 48** (Priority #2)\n- Reach: 60 (users with custom environments)\n- Impact: 2 (high - removes major limitation)\n- Confidence: 0.8 (Firecracker conversion adds complexity)\n- Effort: 2 weeks\n\n**Plan:** plan/02-dockerfile-support.md\n\n**Key deliverables:**\n- Auto-detect Dockerfile in project\n- docker build with content-hash caching\n- [build] config section (args, target, context)\n- Firecracker: Docker image to ext4 rootfs conversion\n- .dockerignore handling","status":"in_progress","priority":2,"issue_type":"epic","owner":"thrashr888@gmail.com","created_at":"2026-01-22T02:32:36.082489-08:00","created_by":"Paul Thrasher","updated_at":"2026-01-23T00:17:26.101095-08:00","comments":[{"id":1,"issue_id":"agentkernel-lth","author":"Paul Thrasher","text":"Phase 1 (Local Docker Build MVP) complete: Auto-detect Dockerfile, build with caching, [build] config section, wired into run command. Next: Phase 2 (Firecracker rootfs conversion).","created_at":"2026-01-23T08:35:11Z"},{"id":4,"issue_id":"agentkernel-lth","author":"Paul Thrasher","text":"Phase 1 complete. Remaining: Firecracker rootfs conversion (docker image to ext4). Blocked until Firecracker backend is working.","created_at":"2026-01-26T06:08:08Z"},{"id":7,"issue_id":"agentkernel-lth","author":"Paul Thrasher","text":"Firecracker backend now working on rookery (Linux KVM). Tested: ~800ms boot+exec+shutdown cycle, guest agent vsock communication, kernel 6.1.70-agentkernel + Alpine 3.20 rootfs. Ready to proceed with Phase 2: Docker image to ext4 rootfs conversion.","created_at":"2026-01-26T17:11:40Z"}]}
+{"id":"agentkernel-lth","title":"[RICE:48] Dockerfile Support","description":"Build custom environments from Dockerfiles with automatic caching and Firecracker rootfs conversion.\n\n**RICE Score: 48** (Priority #2)\n- Reach: 60 (users with custom environments)\n- Impact: 2 (high - removes major limitation)\n- Confidence: 0.8 (Firecracker conversion adds complexity)\n- Effort: 2 weeks\n\n**Plan:** plan/02-dockerfile-support.md\n\n**Key deliverables:**\n- Auto-detect Dockerfile in project\n- docker build with content-hash caching\n- [build] config section (args, target, context)\n- Firecracker: Docker image to ext4 rootfs conversion\n- .dockerignore handling","status":"in_progress","priority":2,"issue_type":"epic","owner":"thrashr888@gmail.com","created_at":"2026-01-22T02:32:36.082489-08:00","created_by":"Paul Thrasher","updated_at":"2026-01-23T00:17:26.101095-08:00","comments":[{"id":1,"issue_id":"agentkernel-lth","author":"Paul Thrasher","text":"Phase 1 (Local Docker Build MVP) complete: Auto-detect Dockerfile, build with caching, [build] config section, wired into run command. Next: Phase 2 (Firecracker rootfs conversion).","created_at":"2026-01-23T08:35:11Z"},{"id":4,"issue_id":"agentkernel-lth","author":"Paul Thrasher","text":"Phase 1 complete. Remaining: Firecracker rootfs conversion (docker image to ext4). Blocked until Firecracker backend is working.","created_at":"2026-01-26T06:08:08Z"},{"id":7,"issue_id":"agentkernel-lth","author":"Paul Thrasher","text":"Firecracker backend now working on rookery (Linux KVM). Tested: ~800ms boot+exec+shutdown cycle, guest agent vsock communication, kernel 6.1.70-agentkernel + Alpine 3.20 rootfs. Ready to proceed with Phase 2: Docker image to ext4 rootfs conversion.","created_at":"2026-01-26T17:11:40Z"},{"id":8,"issue_id":"agentkernel-lth","author":"Paul Thrasher","text":"Phase 3 complete! Docker image to ext4 rootfs conversion working. Features:\n- convert_image_to_rootfs() in src/rootfs.rs\n- docker save + privileged container for layer extraction\n- Guest agent injection and init script creation\n- Automatic caching of both Docker images and rootfs\n- ~838ms execution cycle for custom Dockerfile + Firecracker\n- Tested with Python 3.12 in Alpine-based Dockerfile\n\nRemaining for full epic completion: Phase 4 (registry push/pull, security scanning) is optional/future work.","created_at":"2026-01-28T02:59:47Z"}]}
 {"id":"agentkernel-orb","title":"Create example Wasm modules for common tasks","description":"Create example Wasm modules that demonstrate Hyperlight usage: hello world, file I/O, HTTP requests. Include build instructions.","status":"closed","priority":3,"issue_type":"task","owner":"thrashr888@gmail.com","created_at":"2026-01-21T20:42:48.740012-08:00","created_by":"Paul Thrasher","updated_at":"2026-01-22T02:02:09.25887-08:00","closed_at":"2026-01-22T02:02:09.25887-08:00","close_reason":"Created examples/wasm/ with hello.wat, calc.wat, and fib.wat demonstrating Wasm module patterns.","dependencies":[{"issue_id":"agentkernel-orb","depends_on_id":"agentkernel-fag","type":"blocks","created_at":"2026-01-21T20:43:05.335378-08:00","created_by":"Paul Thrasher"}]}
 {"id":"agentkernel-pbf","title":"Implement Docker container installation","description":"Create installation mechanism that deploys into a common Docker container. Should handle base image selection, dependency installation, and agent runtime setup.","status":"closed","priority":1,"issue_type":"task","owner":"thrashr888@gmail.com","created_at":"2026-01-19T00:40:32.916908-08:00","created_by":"Paul Thrasher","updated_at":"2026-01-19T01:19:40.400646-08:00","closed_at":"2026-01-19T01:19:40.400646-08:00","close_reason":"Implemented Docker container management with bollard: create/start/stop/remove/list sandboxes, config parsing for agentkernel.toml, base image pulling, dependency installation setup"}
 {"id":"agentkernel-r8u","title":"Implement Docker-based KVM host for macOS","description":"Docker container with KVM support for running Firecracker on macOS via nested virtualization. Dockerfile.kvm-host.","status":"closed","priority":2,"issue_type":"task","owner":"thrashr888@gmail.com","created_at":"2026-01-19T01:43:06.259161-08:00","created_by":"Paul Thrasher","updated_at":"2026-01-19T15:41:35.410925-08:00","closed_at":"2026-01-19T15:41:35.410925-08:00","close_reason":"Created Dockerfile.kvm-host with Firecracker for nested virt on macOS","dependencies":[{"issue_id":"agentkernel-r8u","depends_on_id":"agentkernel-dyt","type":"blocks","created_at":"2026-01-19T01:44:06.916058-08:00","created_by":"Paul Thrasher"}]}
