openclaw/Dockerfile.sandbox

# syntax=docker/dockerfile:1.7

FROM debian:bookworm-slim@sha256:98f4b71de414932439ac6ac690d7060df1f27161073c5036a7553723881bffbe

ENV DEBIAN_FRONTEND=noninteractive

RUN --mount=type=cache,id=openclaw-sandbox-bookworm-apt-cache,target=/var/cache/apt,sharing=locked \
  --mount=type=cache,id=openclaw-sandbox-bookworm-apt-lists,target=/var/lib/apt,sharing=locked \
  apt-get update \
  && apt-get install -y --no-install-recommends \
    bash \
    ca-certificates \
    curl \
    git \
    jq \
    python3 \
    ripgrep

RUN useradd --create-home --shell /bin/bash sandbox
USER sandbox
WORKDIR /home/sandbox

CMD ["sleep", "infinity"]
Docker: improve build cache reuse (#40351) * Docker: improve build cache reuse * Tests: cover Docker build cache layout * Docker: fix sandbox cache mount continuations * Docker: document qr-import manifest scope * Docker: narrow e2e install inputs * CI: cache Docker builds in workflows * CI: route sandbox smoke through setup script * CI: keep sandbox smoke on script path 2026-03-08 17:57:46 -07:00			`# syntax=docker/dockerfile:1.7`

fix(docker): pin base images to SHA256 digests (#7734) * fix(docker): pin base images to SHA256 digests for supply chain security Pin all 9 Dockerfiles to immutable SHA256 digests to prevent supply chain attacks where a compromised upstream image could be silently pulled into production builds. Also add Docker ecosystem to Dependabot configuration for automated digest updates. Images pinned: - node:22-bookworm@sha256:cd7bcd2e7a1e6f72052feb023c7f6b722205d3fcab7bbcbd2d1bfdab10b1e935 - node:22-bookworm-slim@sha256:3cfe526ec8dd62013b8843e8e5d4877e297b886e5aace4a59fec25dc20736e45 - debian:bookworm-slim@sha256:98f4b71de414932439ac6ac690d7060df1f27161073c5036a7553723881bffbe - ubuntu:24.04@sha256:cd1dba651b3080c3686ecf4e3c4220f026b521fb76978881737d24f200828b2b Fixes #7731 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> * test(docker): add digest pinning regression coverage --------- Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com> 2026-02-19 12:42:07 -08:00			`FROM debian:bookworm-slim@sha256:98f4b71de414932439ac6ac690d7060df1f27161073c5036a7553723881bffbe`
feat: add per-session agent sandbox 2026-01-03 21:35:44 +01:00
			`ENV DEBIAN_FRONTEND=noninteractive`

Docker: improve build cache reuse (#40351) * Docker: improve build cache reuse * Tests: cover Docker build cache layout * Docker: fix sandbox cache mount continuations * Docker: document qr-import manifest scope * Docker: narrow e2e install inputs * CI: cache Docker builds in workflows * CI: route sandbox smoke through setup script * CI: keep sandbox smoke on script path 2026-03-08 17:57:46 -07:00			`RUN --mount=type=cache,id=openclaw-sandbox-bookworm-apt-cache,target=/var/cache/apt,sharing=locked \`
			`--mount=type=cache,id=openclaw-sandbox-bookworm-apt-lists,target=/var/lib/apt,sharing=locked \`
			`apt-get update \`
feat: add per-session agent sandbox 2026-01-03 21:35:44 +01:00			`&& apt-get install -y --no-install-recommends \`
			`bash \`
			`ca-certificates \`
			`curl \`
			`git \`
			`jq \`
			`python3 \`
Docker: improve build cache reuse (#40351) * Docker: improve build cache reuse * Tests: cover Docker build cache layout * Docker: fix sandbox cache mount continuations * Docker: document qr-import manifest scope * Docker: narrow e2e install inputs * CI: cache Docker builds in workflows * CI: route sandbox smoke through setup script * CI: keep sandbox smoke on script path 2026-03-08 17:57:46 -07:00			`ripgrep`
feat: add per-session agent sandbox 2026-01-03 21:35:44 +01:00
chore: project hygiene — fix workspace:, sandbox USER, dead config (#11289) chore: project hygiene fixes (workspace:, sandbox USER, dead config) chore: also fix workspace:* in zalouser dependencies 2026-02-08 02:36:42 -08:00			`RUN useradd --create-home --shell /bin/bash sandbox`
			`USER sandbox`
			`WORKDIR /home/sandbox`

feat: add per-session agent sandbox 2026-01-03 21:35:44 +01:00			`CMD ["sleep", "infinity"]`