Files
workspace/.opencode-sandbox/Dockerfile

20 lines
426 B
Docker

FROM archlinux:latest
# Network restriction — only allow git.processhub.work
RUN pacman -Syu --noconfirm && \
pacman -S --noconfirm \
nodejs \
npm \
git \
iptables \
opencode \
&& pacman -Scc --noconfirm
# Firewall script — blocks everything except your Gitea instance
COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh
WORKDIR /workspace
ENTRYPOINT ["/entrypoint.sh"]