| # debian.sh --arch 'amd64' out/ 'trixie' '@1777939200' |
| ENV PYTHONUNBUFFERED=1 |
| ENV PYTHONDONTWRITEBYTECODE=1 |
| ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright |
| RUN /bin/sh -c apt-get update && apt-get install -y --no-install-recommends ca-certificates curl iputils-ping python3 python-is-python3 ripgrep ffmpeg gcc g++ make cmake python3-dev python3-venv libffi-dev libolm-dev procps git openssh-client docker-cli xz-utils && rm -rf /var/lib/apt/lists/* # buildkit |
| ARG TARGETARCH=amd64 |
| ARG S6_OVERLAY_VERSION=3.2.3.0 |
| ARG S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf |
| ARG S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 |
| ARG S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 |
| ARG S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e |
| ADD https://github.com/just-containers/s6-overlay/releases/download/v3.2.3.0/s6-overlay-noarch.tar.xz /tmp/ # buildkit |
| ADD https://github.com/just-containers/s6-overlay/releases/download/v3.2.3.0/s6-overlay-symlinks-noarch.tar.xz /tmp/ # buildkit |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c set -eu; case "${TARGETARCH:-amd64}" in amd64) s6_arch="x86_64"; s6_arch_sha="${S6_OVERLAY_X86_64_SHA256}" ;; arm64) s6_arch="aarch64"; s6_arch_sha="${S6_OVERLAY_AARCH64_SHA256}" ;; *) echo "Unsupported TARGETARCH=${TARGETARCH} for s6-overlay" >&2; exit 1 ;; esac; curl -fsSL --retry 3 -o /tmp/s6-overlay-arch.tar.xz "https://github.com/just-containers/s6-overlay/releases/download/v${S6_OVERLAY_VERSION}/s6-overlay-${s6_arch}.tar.xz"; { printf '%s %s\n' "${S6_OVERLAY_NOARCH_SHA256}" /tmp/s6-overlay-noarch.tar.xz; printf '%s %s\n' "${s6_arch_sha}" /tmp/s6-overlay-arch.tar.xz; printf '%s %s\n' "${S6_OVERLAY_SYMLINKS_SHA256}" /tmp/s6-overlay-symlinks-noarch.tar.xz; } > /tmp/s6-overlay.sha256; sha256sum -c /tmp/s6-overlay.sha256; tar -C / -Jxpf /tmp/s6-overlay-noarch.tar.xz; tar -C / -Jxpf /tmp/s6-overlay-arch.tar.xz; tar -C / -Jxpf /tmp/s6-overlay-symlinks-noarch.tar.xz; rm /tmp/s6-overlay-*.tar.xz /tmp/s6-overlay.sha256; ln -sf /init /usr/bin/tini # buildkit |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c useradd -u 10000 -m -d /opt/data hermes # buildkit |
| COPY --chmod=0755 /usr/local/bin/uv /usr/local/bin/uvx /usr/local/bin/ # buildkit |
| COPY --chmod=0755 /usr/local/bin/node /usr/local/bin/ # buildkit |
| COPY /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/npm # buildkit |
| COPY /usr/local/lib/node_modules/corepack /usr/local/lib/node_modules/corepack # buildkit |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c ln -sf /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && ln -sf /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx && ln -sf /usr/local/lib/node_modules/corepack/dist/corepack.js /usr/local/bin/corepack # buildkit |
| WORKDIR /opt/hermes |
| COPY package.json package-lock.json ./ # buildkit |
| COPY web/package.json web/ # buildkit |
| COPY ui-tui/package.json ui-tui/ # buildkit |
| COPY ui-tui/packages/hermes-ink/ ui-tui/packages/hermes-ink/ # buildkit |
| COPY apps/shared/ apps/shared/ # buildkit |
| ENV npm_config_install_links=false |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c npm install --prefer-offline --no-audit && npx playwright install --with-deps chromium --only-shell && npm cache clean --force # buildkit |
| COPY pyproject.toml uv.lock ./ # buildkit |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c touch ./README.md # buildkit |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c uv sync --frozen --no-install-project --extra all --extra messaging --extra anthropic --extra bedrock --extra azure-identity --extra hindsight --extra matrix # buildkit |
| COPY web/ web/ # buildkit |
| COPY ui-tui/ ui-tui/ # buildkit |
| COPY apps/shared/ apps/shared/ # buildkit |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c cd web && npm run build && cd ../ui-tui && npm run build # buildkit |
| COPY --chmod=a+rX,go-w . . # buildkit |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c uv pip install --no-cache-dir --no-deps -e "." # buildkit |
| USER root |
| RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c mkdir -p /opt/hermes/bin && cp /opt/hermes/docker/hermes-exec-shim.sh /opt/hermes/bin/hermes && chmod 0755 /opt/hermes/bin/hermes && printf 'docker\n' > /opt/hermes/.install_method # buildkit |
| ARG HERMES_GIT_SHA=c44de998547816f8ef7e6bcc4ebe84370e6d2eb8 |
| RUN |7 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e HERMES_GIT_SHA=c44de998547816f8ef7e6bcc4ebe84370e6d2eb8 /bin/sh -c if [ -n "${HERMES_GIT_SHA}" ]; then printf '%s\n' "${HERMES_GIT_SHA}" > /opt/hermes/.hermes_build_sha; fi # buildkit |
| COPY docker/s6-rc.d/ /etc/s6-overlay/s6-rc.d/ # buildkit |
| RUN |7 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e HERMES_GIT_SHA=c44de998547816f8ef7e6bcc4ebe84370e6d2eb8 /bin/sh -c mkdir -p /etc/cont-init.d && printf '#!/command/with-contenv sh\nexec /opt/hermes/docker/stage2-hook.sh\n' > /etc/cont-init.d/01-hermes-setup && chmod +x /etc/cont-init.d/01-hermes-setup # buildkit |
| COPY --chmod=0755 docker/cont-init.d/015-supervise-perms /etc/cont-init.d/015-supervise-perms # buildkit |
| COPY --chmod=0755 docker/cont-init.d/02-reconcile-profiles /etc/cont-init.d/02-reconcile-profiles # buildkit |
| ENV HERMES_WEB_DIST=/opt/hermes/hermes_cli/web_dist |
| ENV HERMES_TUI_DIR=/opt/hermes/ui-tui |
| ENV HERMES_HOME=/opt/data |
| ENV HERMES_WRITE_SAFE_ROOT=/opt/data |
| ENV HERMES_DISABLE_LAZY_INSTALLS=1 |
| ENV HERMES_LAZY_INSTALL_TARGET=/opt/data/lazy-packages |
| ENV PATH=/opt/hermes/bin:/opt/hermes/.venv/bin:/opt/data/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin |
| RUN |7 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e HERMES_GIT_SHA=c44de998547816f8ef7e6bcc4ebe84370e6d2eb8 /bin/sh -c mkdir -p /opt/data # buildkit |
| VOLUME [/opt/data] |
| ENTRYPOINT ["/init" "/opt/hermes/docker/main-wrapper.sh"] |
| CMD [] |
| ENV HERMES_DISABLE_LAZY_INSTALLS=0 |
| RUN /bin/sh -c sed -i 's/CONTEXT_FILE_MAX_CHARS = 20_000/CONTEXT_FILE_MAX_CHARS = 60_000/' /opt/hermes/agent/prompt_builder.py # buildkit |
| RUN /bin/sh -c sed -i 's/\\"max_tokens\\": [0-9]*,/\\"max_tokens\\": 16384,/' /opt/hermes/tools/vision_tools.py # buildkit |
| RUN /bin/sh -c uv pip install --reinstall --python /opt/hermes/.venv/bin/python --no-cache-dir urllib3 requests # buildkit |
| COPY fix-data-perms.sh /etc/cont-init.d/00-fix-data-perms # buildkit |
| RUN /bin/sh -c chmod 755 /etc/cont-init.d/00-fix-data-perms # buildkit |
| RUN /bin/sh -c uv pip install --upgrade --python /opt/hermes/.venv/bin/python --no-cache-dir hindsight-client mnemosyne-memory mnemosyne-hermes # buildkit |
| RUN /bin/sh -c /opt/hermes/.venv/bin/mnemosyne-install # buildkit |
| RUN /bin/sh -c uv pip install --upgrade --python /opt/hermes/.venv/bin/python --no-cache-dir mcp # buildkit |
| RUN /bin/sh -c uv pip install --upgrade --python /opt/hermes/.venv/bin/python --no-cache-dir pymupdf pymupdf4llm weasyprint jinja2 pillow # buildkit |
| RUN /bin/sh -c uv pip install --upgrade --python /opt/hermes/.venv/bin/python --no-cache-dir firecrawl-py==4.17.0 # buildkit |
| RUN /bin/sh -c uv pip install --upgrade --python /opt/hermes/.venv/bin/python --no-cache-dir openpyxl pandas pdfplumber python-docx matplotlib xlsxwriter # buildkit |
| RUN /bin/sh -c uv pip install --upgrade --python /opt/hermes/.venv/bin/python --no-cache-dir nextcloud-mcp-server # buildkit |
| COPY openrouter-image-gen/plugin/ /opt/data/plugins/image_gen/openrouter/ # buildkit |
| COPY openrouter-image-gen/patches/image_generation_tool.py /opt/hermes/tools/image_generation_tool.py # buildkit |
| RUN /bin/sh -c chown -R hermes:hermes /opt/data/plugins /opt/hermes/tools/image_generation_tool.py # buildkit |
| COPY hermes-webui/ /opt/hermes-webui/ # buildkit |
| RUN /bin/sh -c uv pip install --upgrade --python /opt/hermes/.venv/bin/python --no-cache-dir pyyaml cryptography # buildkit |
| RUN /bin/sh -c chown -R hermes:hermes /opt/hermes/.venv # buildkit |
| COPY hermes-webui-s6/ /etc/s6-overlay/s6-rc.d/ # buildkit |
| EXPOSE [8787/tcp] |
