mirror of
https://github.com/bytedance/deer-flow.git
synced 2026-09-10 05:58:36 +00:00
0f7d8709d3
* feat(sandbox): add controlled egress approvals * Apply batched suggestions from code review * fix(sandbox): harden restricted network policy * fix(sandbox): harden denied egress handling * fix(sandbox): isolate network proxy sidecar * chore: retry sandbox image smoke * fix(sandbox): close remaining network policy gaps * fix(sandbox): harden relay token rejection * fix(sandbox): fence incompatible policy replacement * fix(sandbox): replace containers across network modes * fix(sandbox): close remaining lifecycle gaps --------- Co-authored-by: Willem Jiang <willem.jiang@gmail.com>
12 lines
523 B
Docker
12 lines
523 B
Docker
ARG BASE_IMAGE=python:3.12-alpine
|
|
FROM ${BASE_IMAGE}
|
|
|
|
# BASE_IMAGE is overridable for offline smoke tests. Production uses the small
|
|
# official Python Alpine image; a cached Alpine-derived base can install Python.
|
|
RUN if ! command -v python >/dev/null 2>&1; then apk add --no-cache python3 && ln -sf /usr/bin/python3 /usr/bin/python; fi
|
|
|
|
COPY backend/packages/harness/deerflow/community/aio_sandbox/network_proxy.py /opt/deerflow-network-proxy.py
|
|
|
|
USER 65532:65532
|
|
CMD ["python", "/opt/deerflow-network-proxy.py", "serve"]
|