Scott KarpandClaude Opus 4.6
2f1205eef1
L1 (29MB, 5860 files) is read-only and immutable — it belongs inside the image, not on a separate volume. The scroll is sealed in the aron. It ships with the vessel. - All 4 Dockerfiles: COPY l1/ /mnt/torah/ in runtime stage - deployment.yaml: Removed L1 PVC volume and all L1 volumeMounts - deployment.yaml: Added imagePullSecrets for registry auth - deployment.yaml: Manna uses emptyDir (kohen writes via kubectl cp) - No CSI driver needed — eliminates Exoscale block storage dependency Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
52 lines
1.6 KiB
Docker
52 lines
1.6 KiB
Docker
# Shorashim Shoresh Engine — Haskell root activation engine
|
|
# Construction spec §1.1: GHC 9.6.4, Cabal 3.10
|
|
# Communicates with vav_pipeline via Erlang Port (stdin/stdout)
|
|
|
|
# === BUILD STAGE ===
|
|
FROM haskell:9.6.4-slim AS build
|
|
|
|
# haskell:9.6.4-slim is Debian Buster (EOL) — use archive repos
|
|
RUN sed -i 's|deb.debian.org/debian|archive.debian.org/debian|g' /etc/apt/sources.list && \
|
|
sed -i 's|deb.debian.org/debian-security|archive.debian.org/debian-security|g' /etc/apt/sources.list && \
|
|
sed -i '/buster-updates/d' /etc/apt/sources.list && \
|
|
apt-get update && apt-get install -y zlib1g-dev && rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /app
|
|
|
|
# Copy cabal files first for dependency caching
|
|
COPY shoresh-engine/shoresh-engine.cabal ./
|
|
COPY shoresh-engine/cabal.project.freeze ./
|
|
|
|
RUN cabal update && cabal build --only-dependencies
|
|
|
|
# Copy source and build
|
|
COPY shoresh-engine/ ./
|
|
|
|
RUN cabal build && \
|
|
cp $(cabal list-bin shoresh-engine) /usr/local/bin/shoresh-engine
|
|
|
|
# === RUNTIME STAGE ===
|
|
FROM ubuntu:jammy-20240125
|
|
|
|
RUN apt-get update && \
|
|
apt-get install -y --no-install-recommends \
|
|
libgmp10 zlib1g && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN useradd --create-home --shell /bin/bash shorashim
|
|
USER shorashim
|
|
|
|
WORKDIR /home/shorashim
|
|
|
|
COPY --from=build /usr/local/bin/shoresh-engine ./shoresh-engine
|
|
|
|
# L1 Torah filesystem — baked into the image
|
|
COPY --chown=shorashim:shorashim l1/ /mnt/torah/
|
|
|
|
# L1 mount point
|
|
ENV L1_MOUNT_POINT=/mnt/torah
|
|
|
|
# The engine is invoked as an Erlang Port by vav_pipeline
|
|
# In K8s, it runs as a sidecar or is called via the Port protocol
|
|
CMD ["./shoresh-engine"]
|