hermes-agent (3c27eb6-walter-yamllint1)

Published 2026-08-10 05:18:42 +00:00 by dan

Pull the image from the command line:

docker pull forge.coffee-anon.com/dan/hermes-agent:3c27eb6-walter-yamllint1

Digest

sha256:58d272d2f44a98688393339d76d3055576d6cbcdccff9a2db67d623fa38d16af

For more information on the Container registry, see the documentation.

# debian.sh --arch 'amd64' out/ 'trixie' '@1777939200'

ENV PYTHONUNBUFFERED=1

ENV PYTHONDONTWRITEBYTECODE=1

ENV PLAYWRIGHT_BROWSERS_PATH=/opt/hermes/.playwright

RUN /bin/sh -c apt-get -o Acquire::Retries=3 update && apt-get -o Acquire::Retries=3 install -y --no-install-recommends ca-certificates curl iputils-ping python3 python-is-python3 ripgrep ffmpeg gcc g++ make cmake python3-dev python3-venv libffi-dev libolm-dev libatomic1 procps git openssh-client docker-cli xz-utils && rm -rf /var/lib/apt/lists/* # buildkit

COPY /opt/sqlite-fixed/lib/libsqlite3.so.3.53.4 /usr/local/lib/ # buildkit

RUN /bin/sh -c ln -sf libsqlite3.so.3.53.4 /usr/local/lib/libsqlite3.so.0 && ln -sf libsqlite3.so.3.53.4 /usr/local/lib/libsqlite3.so && printf '/usr/local/lib\n' > /etc/ld.so.conf.d/000-sqlite-fixed.conf && ldconfig && python3 -c "import sqlite3, sys; v = sqlite3.sqlite_version_info; sys.exit(f'linked SQLite {sqlite3.sqlite_version} still has the WAL-reset bug') if v < (3, 51, 3) else None; db = sqlite3.connect(':memory:'); db.execute(\"CREATE VIRTUAL TABLE docs USING fts5(content, tokenize='trigram')\"); db.execute(\"INSERT INTO docs VALUES ('hermes')\"); sys.exit('SQLite FTS5 trigram self-test failed') if db.execute(\"SELECT count(*) FROM docs WHERE docs MATCH 'erm'\").fetchone()[0] != 1 else None; db.close()" # buildkit

ARG TARGETARCH=amd64

ARG S6_OVERLAY_VERSION=3.2.3.0

ARG S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf

ARG S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563

ARG S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581

ARG S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e

RUN |6 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e /bin/sh -c set -eu; case "${TARGETARCH:-amd64}" in amd64) s6_arch="x86_64"; s6_arch_sha="${S6_OVERLAY_X86_64_SHA256}" ;; arm64) s6_arch="aarch64"; s6_arch_sha="${S6_OVERLAY_AARCH64_SHA256}" ;; *) echo "Unsupported TARGETARCH=${TARGETARCH} for s6-overlay" >&2; exit 1 ;; esac; base="https://github.com/just-containers/s6-overlay/releases/download/v${S6_OVERLAY_VERSION}"; curl -fsSL --retry 3 -o /tmp/s6-overlay-noarch.tar.xz "${base}/s6-overlay-noarch.tar.xz"; curl -fsSL --retry 3 -o /tmp/s6-overlay-symlinks-noarch.tar.xz "${base}/s6-overlay-symlinks-noarch.tar.xz"; curl -fsSL --retry 3 -o /tmp/s6-overlay-arch.tar.xz "${base}/s6-overlay-${s6_arch}.tar.xz"; { printf '%s %s\n' "${S6_OVERLAY_NOARCH_SHA256}" /tmp/s6-overlay-noarch.tar.xz; printf '%s %s\n' "${s6_arch_sha}" /tmp/s6-overlay-arch.tar.xz; printf '%s %s\n' "${S6_OVERLAY_SYMLINKS_SHA256}" /tmp/s6-overlay-symlinks-noarch.tar.xz; } > /tmp/s6-overlay.sha256; sha256sum -c /tmp/s6-overlay.sha256; tar -C / -Jxpf /tmp/s6-overlay-noarch.tar.xz; tar -C / -Jxpf /tmp/s6-overlay-arch.tar.xz; tar -C / -Jxpf /tmp/s6-overlay-symlinks-noarch.tar.xz; rm /tmp/s6-overlay-*.tar.xz /tmp/s6-overlay.sha256 # buildkit

COPY --chmod=0755 docker/tini-shim.sh /usr/bin/tini # buildkit

COPY --chmod=0755 /usr/local/bin/uv /usr/local/bin/uvx /usr/local/bin/ # buildkit

COPY --chmod=0755 /usr/local/bin/node /usr/local/bin/ # buildkit

COPY /usr/local/lib/node_modules/npm /usr/local/lib/node_modules/npm # buildkit

WORKDIR /opt/hermes

COPY package.json package-lock.json ./ # buildkit

COPY web/package.json web/ # buildkit

COPY ui-tui/package.json ui-tui/ # buildkit

COPY ui-tui/packages/hermes-ink/ ui-tui/packages/hermes-ink/ # buildkit

COPY apps/shared/ apps/shared/ # buildkit

ENV npm_config_install_links=false

COPY plugins/platforms/photon/sidecar/package.json plugins/platforms/photon/sidecar/package-lock.json plugins/platforms/photon/sidecar/patch-spectrum-mixed-attachments.mjs plugins/platforms/photon/sidecar/ # buildkit

COPY pyproject.toml uv.lock ./ # buildkit

COPY web/ web/ # buildkit

COPY ui-tui/ ui-tui/ # buildkit

COPY apps/shared/ apps/shared/ # buildkit

ARG TIRITH_VERSION=0.3.3

ARG TIRITH_X86_64_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2

RUN |8 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e TIRITH_VERSION=0.3.3 TIRITH_X86_64_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2 /bin/sh -c set -eu; archive="tirith-x86_64-unknown-linux-gnu.tar.gz"; curl -fsSL --retry 3 -o "/tmp/${archive}" "https://github.com/sheeki03/tirith/releases/download/v${TIRITH_VERSION}/${archive}"; printf '%s %s\n' "${TIRITH_X86_64_SHA256}" "/tmp/${archive}" | sha256sum -c -; tar -C /tmp -xzf "/tmp/${archive}" tirith; install -m 0755 /tmp/tirith /usr/local/bin/tirith; rm -f "/tmp/${archive}" /tmp/tirith # buildkit

COPY --chmod=a+rX,go-w . . # buildkit

RUN |8 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e TIRITH_VERSION=0.3.3 TIRITH_X86_64_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2 /bin/sh -c set -e; if [ -d atlas-patches ]; then for p in atlas-patches/*.patch; do [ -e "$p" ] || continue; echo "applying downstream patch: $p"; git apply -p1 --unsafe-paths --directory=/opt/hermes "$p" || git apply -p1 "$p"; done; rm -rf atlas-patches; else echo "no atlas-patches/ - skipping"; fi # buildkit

USER root

RUN |8 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e TIRITH_VERSION=0.3.3 TIRITH_X86_64_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2 /bin/sh -c mkdir -p /opt/hermes/bin && cp /opt/hermes/docker/hermes-exec-shim.sh /opt/hermes/bin/hermes && chmod 0755 /opt/hermes/bin/hermes && printf 'docker\n' > /opt/hermes/.install_method # buildkit

ARG HERMES_GIT_SHA=

RUN |9 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e TIRITH_VERSION=0.3.3 TIRITH_X86_64_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2 HERMES_GIT_SHA= /bin/sh -c if [ -n "${HERMES_GIT_SHA}" ]; then printf '%s\n' "${HERMES_GIT_SHA}" > /opt/hermes/.hermes_build_sha; fi # buildkit

COPY docker/s6-rc.d/ /etc/s6-overlay/s6-rc.d/ # buildkit

RUN |9 TARGETARCH=amd64 S6_OVERLAY_VERSION=3.2.3.0 S6_OVERLAY_NOARCH_SHA256=b720f9d9340efc8bb07528b9743813c836e4b02f8693d90241f047998b4c53cf S6_OVERLAY_X86_64_SHA256=a93f02882c6ed46b21e7adb5c0add86154f01236c93cd82c7d682722e8840563 S6_OVERLAY_AARCH64_SHA256=0952056ff913482163cc30e35b2e944b507ba1025d78f5becbb89367bf344581 S6_OVERLAY_SYMLINKS_SHA256=a60dc5235de3ecbcf874b9c1f18d73263ab99b289b9329aa950e8729c4789f0e TIRITH_VERSION=0.3.3 TIRITH_X86_64_SHA256=6cdbe35e8f9ccf42e70ad95b501c93cd218ac18201c3df958d54f6ba0d995ce2 HERMES_GIT_SHA= /bin/sh -c mkdir -p /etc/cont-init.d && printf '#!/command/with-contenv sh\nexec /opt/hermes/docker/stage2-hook.sh\n' > /etc/cont-init.d/01-hermes-setup && chmod +x /etc/cont-init.d/01-hermes-setup # buildkit

COPY --chmod=0755 docker/cont-init.d/015-supervise-perms /etc/cont-init.d/015-supervise-perms # buildkit

COPY --chmod=0755 docker/cont-init.d/02-reconcile-profiles /etc/cont-init.d/02-reconcile-profiles # buildkit

ENV HERMES_WEB_DIST=/opt/hermes/hermes_cli/web_dist

ENV HERMES_TUI_DIR=/opt/hermes/ui-tui

ENV HERMES_HOME=/opt/data

ENV HERMES_WRITE_SAFE_ROOT=/opt/data

ENV HERMES_DISABLE_LAZY_INSTALLS=1

ENV HERMES_LAZY_INSTALL_TARGET=/opt/data/lazy-packages

COPY --chmod=0755 docker/hermes-exec-shim.sh /opt/hermes/bin/hermes # buildkit

COPY --chmod=0755 docker/entrypoint-dispatch.sh /opt/hermes/docker/entrypoint-dispatch.sh # buildkit

ENV PATH=/opt/hermes/bin:/opt/hermes/.venv/bin:/opt/data/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

VOLUME [/opt/data]

ENTRYPOINT ["/opt/hermes/docker/entrypoint-dispatch.sh"]

CMD []

USER root

ARG KUBECONFORM_VERSION=v0.6.7

RUN |1 KUBECONFORM_VERSION=v0.6.7 /bin/sh -c set -eux; curl -fsSL "https://github.com/yannh/kubeconform/releases/download/${KUBECONFORM_VERSION}/kubeconform-linux-amd64.tar.gz" | tar -xz -C /usr/local/bin kubeconform; chmod 0755 /usr/local/bin/kubeconform; /usr/local/bin/kubeconform -v # buildkit

COPY wheels/ /tmp/yaml-lint-wheels/ # buildkit

RUN |1 KUBECONFORM_VERSION=v0.6.7 /bin/sh -c set -eux; uv pip install --python /opt/hermes/.venv/bin/python --no-cache /tmp/yaml-lint-wheels/*.whl; /opt/hermes/.venv/bin/yaml-lint --help >/dev/null; /opt/hermes/.venv/bin/yamllint --version; rm -rf /tmp/yaml-lint-wheels # buildkit

Details

Container

2026-08-10 05:18:42 +00:00

OCI / Docker

linux/amd64

944 MiB

Versions (13) View all

3c27eb6-walter-yamllint1

2026-08-10

3c27eb6-atlas1

2026-08-10

v2026.8.3-atlas1