OpenShell-Community/sandboxes/ollama/Dockerfile at 571a85022224a03cc284074704eb142cc54725bb · ParthSareen/OpenShell-Community · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
# syntax=docker/dockerfile:1.4

# SPDX-License-Identifier: Apache-2.0

# Ollama sandbox image for OpenShell
#
# Builds on the community base sandbox (has Node.js, Claude, Codex pre-installed).
# Build:  docker build -t openshell-ollama --build-arg BASE_IMAGE=openshell-base .
# Run:    openshell sandbox create --from ollama --forward 11434

ARG BASE_IMAGE=ghcr.io/nvidia/openshell-community/sandboxes/base:latest
FROM ${BASE_IMAGE}

USER root

# Install zstd (required by Ollama install script)
RUN apt-get update && apt-get install -y --no-install-recommends zstd \
    && rm -rf /var/lib/apt/lists/*

# Install Ollama into /sandbox/bin so it lives on a writable path and can be
# updated at runtime (the sandbox policy makes /usr read-only).
RUN mkdir -p /sandbox/bin && \
    curl -fsSL https://ollama.com/install.sh | sh && \
    mv /usr/local/bin/ollama /sandbox/bin/ollama && \
    chown -R sandbox:sandbox /sandbox/bin

# Copy sandbox policy
COPY policy.yaml /etc/openshell/policy.yaml

# Copy entrypoint and update scripts
COPY entrypoint.sh /usr/local/bin/entrypoint
COPY update-ollama.sh /sandbox/bin/update-ollama
RUN chmod +x /usr/local/bin/entrypoint /sandbox/bin/update-ollama

# Set environment variables for OpenShell provider discovery
# /sandbox/bin comes first so the writable ollama binary is preferred
ENV OLLAMA_HOST=http://127.0.0.1:11434 \
    NPM_CONFIG_PREFIX=/sandbox/.npm-global \
    PATH="/sandbox/bin:/sandbox/.npm-global/bin:/sandbox/.venv/bin:/usr/local/bin:/usr/bin:/bin"

# Configure npm to install globals into a writable directory
# (the sandbox policy makes /usr read-only, so the default /usr/lib/node_modules fails)
RUN mkdir -p /sandbox/.npm-global && \
    chown sandbox:sandbox /sandbox/.npm-global

# Add environment variables to .bashrc for interactive shells
RUN echo 'export OLLAMA_HOST=http://127.0.0.1:11434' >> /sandbox/.bashrc && \
    echo 'export NPM_CONFIG_PREFIX=/sandbox/.npm-global' >> /sandbox/.bashrc && \
    echo 'export PATH="/sandbox/bin:/sandbox/.npm-global/bin:$PATH"' >> /sandbox/.bashrc && \
    chown sandbox:sandbox /sandbox/.bashrc

USER sandbox

ENTRYPOINT ["/usr/local/bin/entrypoint"]
CMD ["/bin/bash", "-l"]