forked from claude-did-this/claude-hub
Claude
8f55bfac35
Fixes Docker socket permission denied error when running on Unraid. The container's docker group must match the host's docker GID for socket access to work properly. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
144 lines
4.1 KiB
Docker
144 lines
4.1 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
# Build stage - compile TypeScript and prepare production files
|
|
FROM node:24-slim AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy package files first for better caching
|
|
COPY package*.json tsconfig.json babel.config.js ./
|
|
|
|
# Install all dependencies (including dev)
|
|
RUN npm ci
|
|
|
|
# Copy source code
|
|
COPY src/ ./src/
|
|
|
|
# Build TypeScript
|
|
RUN npm run build
|
|
|
|
# Copy remaining application files
|
|
COPY . .
|
|
|
|
# Production dependency stage - smaller layer for dependencies
|
|
FROM node:24-slim AS prod-deps
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy package files
|
|
COPY package*.json ./
|
|
|
|
# Install only production dependencies
|
|
RUN npm ci --omit=dev && npm cache clean --force
|
|
|
|
# Test stage - includes dev dependencies and test files
|
|
FROM node:24-slim AS test
|
|
|
|
# Set shell with pipefail option
|
|
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy package files and install all dependencies
|
|
COPY package*.json tsconfig*.json babel.config.js jest.config.js ./
|
|
RUN npm ci
|
|
|
|
# Copy source and test files
|
|
COPY src/ ./src/
|
|
COPY test/ ./test/
|
|
COPY scripts/ ./scripts/
|
|
|
|
# Copy built files from builder
|
|
COPY --from=builder /app/dist ./dist
|
|
|
|
# Set test environment
|
|
ENV NODE_ENV=test
|
|
|
|
# Run only unit tests in Docker builds (skip integration tests that require Docker)
|
|
CMD ["npm", "run", "test:unit"]
|
|
|
|
# Production stage - minimal runtime image
|
|
FROM node:24-slim AS production
|
|
|
|
# Set shell with pipefail option for better error handling
|
|
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
|
|
|
|
# Install runtime dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
git \
|
|
curl \
|
|
python3 \
|
|
python3-pip \
|
|
python3-venv \
|
|
expect \
|
|
ca-certificates \
|
|
gnupg \
|
|
lsb-release \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Docker CLI (not the daemon, just the client)
|
|
RUN curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg \
|
|
&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null \
|
|
&& apt-get update \
|
|
&& apt-get install -y --no-install-recommends docker-ce-cli \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Create docker group first, then create a non-root user for running the application
|
|
# Note: GID 281 matches Unraid's docker group for socket access
|
|
RUN groupadd -g 281 docker 2>/dev/null || true \
|
|
&& useradd -m -u 1001 -s /bin/bash claudeuser \
|
|
&& usermod -aG docker claudeuser 2>/dev/null || true
|
|
|
|
# Create necessary directories and set permissions while still root
|
|
RUN mkdir -p /home/claudeuser/.npm-global \
|
|
&& mkdir -p /home/claudeuser/.config/claude \
|
|
&& chown -R claudeuser:claudeuser /home/claudeuser/.npm-global /home/claudeuser/.config
|
|
|
|
# Configure npm to use the user directory for global packages
|
|
ENV NPM_CONFIG_PREFIX=/home/claudeuser/.npm-global
|
|
ENV PATH=/home/claudeuser/.npm-global/bin:$PATH
|
|
|
|
# Switch to non-root user and install Claude Code
|
|
USER claudeuser
|
|
|
|
# Install Claude Code (latest version) as non-root user
|
|
# hadolint ignore=DL3016
|
|
RUN npm install -g @anthropic-ai/claude-code
|
|
|
|
# Switch back to root for remaining setup
|
|
USER root
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy production dependencies from prod-deps stage
|
|
COPY --from=prod-deps /app/node_modules ./node_modules
|
|
|
|
# Copy built application from builder stage
|
|
COPY --from=builder /app/dist ./dist
|
|
|
|
# Copy configuration and runtime files
|
|
COPY package*.json tsconfig.json babel.config.js ./
|
|
COPY claude-config.json /home/claudeuser/.config/claude/config.json
|
|
COPY scripts/ ./scripts/
|
|
COPY docs/ ./docs/
|
|
COPY cli/ ./cli/
|
|
|
|
# Set permissions
|
|
RUN chown -R claudeuser:claudeuser /home/claudeuser/.config /app \
|
|
&& chmod +x /app/scripts/runtime/startup.sh
|
|
|
|
# Expose the port
|
|
EXPOSE 3002
|
|
|
|
# Set default environment variables
|
|
ENV NODE_ENV=production \
|
|
PORT=3002 \
|
|
NPM_CONFIG_PREFIX=/home/claudeuser/.npm-global \
|
|
PATH=/home/claudeuser/.npm-global/bin:$PATH
|
|
|
|
# Switch to non-root user for running the application
|
|
# Docker commands will work via docker group membership when socket is mounted
|
|
USER claudeuser
|
|
|
|
# Run the startup script
|
|
CMD ["bash", "/app/scripts/runtime/startup.sh"] |