kanso-skill-sandbox (sha-a0b1163d38d5)

Published 2026-10-14 10:55:59 +00:00 by sralt

Pull the image from the command line:

docker pull git.finnaro.de/sralt/kanso-skill-sandbox:sha-a0b1163d38d5

Digest

sha256:a2dfddb4c10e2ee59c2b7fc468f5f61e740e795120f51f7afec7d951a7549faa

For more information on the Container registry, see the documentation.

# debian.sh --arch 'amd64' out/ 'bookworm' '@1733097600'

ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

ENV LANG=C.UTF-8

RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates netbase tzdata ; rm -rf /var/lib/apt/lists/* # buildkit

ENV GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305

ENV PYTHON_VERSION=3.12.7

ENV PYTHON_SHA256=24887b92e2afd4a2ac602419ad4b596372f67ac9b077190f459aba390faf5550

RUN /bin/sh -c set -eux; savedAptMark="$(apt-mark showmanual)"; apt-get update; apt-get install -y --no-install-recommends dpkg-dev gcc gnupg libbluetooth-dev libbz2-dev libc6-dev libdb-dev libffi-dev libgdbm-dev liblzma-dev libncursesw5-dev libreadline-dev libsqlite3-dev libssl-dev make tk-dev uuid-dev wget xz-utils zlib1g-dev ; wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; wget -O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc"; GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY"; gpg --batch --verify python.tar.xz.asc python.tar.xz; gpgconf --kill all; rm -rf "$GNUPGHOME" python.tar.xz.asc; mkdir -p /usr/src/python; tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; rm python.tar.xz; cd /usr/src/python; gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; ./configure --build="$gnuArch" --enable-loadable-sqlite-extensions --enable-optimizations --enable-option-checking=fatal --enable-shared --with-lto --with-ensurepip ; nproc="$(nproc)"; EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"; LDFLAGS="${LDFLAGS:--Wl},--strip-all"; make -j "$nproc" "EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" "LDFLAGS=${LDFLAGS:-}" ; rm python; make -j "$nproc" "EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" "LDFLAGS=${LDFLAGS:--Wl},-rpath='\$\$ORIGIN/../lib'" python ; make install; cd /; rm -rf /usr/src/python; find /usr/local -depth $ \( -type d -a \( -name test -o -name tests -o -name idle_test $ \) -o $ -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' $ \) \) -exec rm -rf '{}' + ; ldconfig; apt-mark auto '.*' > /dev/null; apt-mark manual $savedAptMark; find /usr/local -type f -executable -not $ -name '*tkinter*' $ -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual ; apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; rm -rf /var/lib/apt/lists/*; export PYTHONDONTWRITEBYTECODE=1; python3 --version; pip3 --version # buildkit

RUN /bin/sh -c set -eux; for src in idle3 pip3 pydoc3 python3 python3-config; do dst="$(echo "$src" | tr -d 3)"; [ -s "/usr/local/bin/$src" ]; [ ! -e "/usr/local/bin/$dst" ]; ln -svT "$src" "/usr/local/bin/$dst"; done # buildkit

CMD ["python3"]

RUN /bin/sh -c apt-get update && apt-get install -y --no-install-recommends libreoffice-impress libreoffice-writer libreoffice-calc libreoffice-draw poppler-utils qpdf ghostscript imagemagick pandoc tesseract-ocr tesseract-ocr-deu tesseract-ocr-eng tesseract-ocr-osd ocrmypdf unpaper fontconfig fonts-dejavu fonts-liberation fonts-noto-core fonts-noto-color-emoji zip unzip jq file sqlite3 procps graphviz libpango-1.0-0 libpangoft2-1.0-0 curl ca-certificates && rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c sed -i -E 's/(rights=")none(" pattern="(PDF|PS|EPS|XPS)")/\1read|write\2/' /etc/ImageMagick-6/policy.xml # buildkit

RUN /bin/sh -c pip install --no-cache-dir python-pptx==1.0.2 python-docx==1.1.2 openpyxl==3.1.5 xlsxwriter==3.2.0 xlrd==2.0.1 pypdf==5.1.0 pdfplumber==0.11.4 pypdfium2==4.30.0 pikepdf==9.4.2 reportlab==4.2.5 pdf2image==1.17.0 img2pdf==0.6.3 pytesseract==0.3.13 pillow==11.0.0 matplotlib==3.9.2 numpy==2.1.3 pandas==2.2.3 scipy==1.14.1 seaborn==0.13.2 lxml==5.3.0 defusedxml==0.7.1 fonttools==4.54.1 "markitdown[docx,pptx,xlsx,pdf]==0.1.1" pyyaml==6.0.2 jinja2==3.1.4 beautifulsoup4==4.12.3 tabulate==0.9.0 docxtpl==0.19.0 weasyprint==63.1 graphviz==0.20.3 qrcode==8.0 babel==2.16.0 # buildkit

COPY /usr/local/bin/node /usr/local/bin/node # buildkit

COPY /usr/local/lib/node_modules /usr/local/lib/node_modules # buildkit

ENV NODE_PATH=/usr/local/lib/node_modules PLAYWRIGHT_BROWSERS_PATH=/opt/ms-playwright PUPPETEER_SKIP_DOWNLOAD=true

RUN /bin/sh -c ln -s ../lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && ln -s ../lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx && npm install -g --no-audit --no-fund pptxgenjs@3.12.0 docx@9.0.2 pdf-lib@1.17.1 sharp@0.33.5 playwright@1.48.2 echarts@5.5.1 @mermaid-js/mermaid-cli@11.4.0 && apt-get update && playwright install --with-deps chromium && rm -rf /var/lib/apt/lists/* && npm cache clean --force # buildkit

RUN /bin/sh -c chrome="$(ls -d /opt/ms-playwright/chromium-*/chrome-linux/chrome | head -n 1)" && test -x "$chrome" && mkdir -p /etc/kanso && printf '{"executablePath": "%s", "pipe": true, "timeout": 30000, "args": ["--no-sandbox", "--disable-setuid-sandbox", "--disable-dev-shm-usage", "--disable-gpu", "--no-zygote"]}\n' "$chrome" > /etc/kanso/puppeteer.json && mv /usr/local/bin/mmdc /usr/local/bin/mmdc-original && printf '%s\n' '#!/bin/sh' 'exec /usr/local/bin/mmdc-original --puppeteerConfigFile /etc/kanso/puppeteer.json "$@"' > /usr/local/bin/mmdc && chmod 755 /usr/local/bin/mmdc # buildkit

RUN /bin/sh -c mkdir -p /usr/share/fonts/truetype/barlow-condensed && for style in Regular Bold Italic BoldItalic; do curl -fsSL -o /usr/share/fonts/truetype/barlow-condensed/BarlowCondensed-$style.ttf https://raw.githubusercontent.com/google/fonts/main/ofl/barlowcondensed/BarlowCondensed-$style.ttf; done && fc-cache -f && fc-list | grep -qi "Barlow Condensed" && apt-get purge -y curl && apt-get autoremove -y # buildkit

ENV FONT_DIR=/usr/share/fonts/truetype/barlow-condensed

RUN /bin/sh -c printf '%s\n' '#!/bin/sh' 'export SAL_USE_VCLPLUGIN=svp' 'exec /usr/lib/libreoffice/program/soffice -env:UserInstallation=file:///tmp/libreoffice-profile "$@"' > /usr/local/bin/soffice && chmod 755 /usr/local/bin/soffice && ln -s /usr/local/bin/soffice /usr/local/bin/libreoffice # buildkit

ENV ECHARTS_JS=/usr/local/lib/node_modules/echarts/dist/echarts.min.js KANSO_DASHBOARD_GERUEST=/usr/local/share/kanso/dashboard-geruest.html KANSO_HTML_PRUEFEN=/usr/local/lib/kanso/html-pruefen.js

COPY dashboard-geruest.html /usr/local/share/kanso/ # buildkit

COPY html-pruefen.js /usr/local/lib/kanso/ # buildkit

COPY dashboard-bauen /usr/local/bin/ # buildkit

RUN /bin/sh -c chmod 644 /usr/local/share/kanso/dashboard-geruest.html /usr/local/lib/kanso/html-pruefen.js && chmod 755 /usr/local/bin/dashboard-bauen && test -s "$ECHARTS_JS" # buildkit

COPY sandbox-werkzeuge layout-pruefen vorschau-erstellen /usr/local/bin/ # buildkit

RUN /bin/sh -c chmod 755 /usr/local/bin/sandbox-werkzeuge /usr/local/bin/layout-pruefen /usr/local/bin/vorschau-erstellen # buildkit

RUN /bin/sh -c useradd --uid 1000 --create-home --home-dir /home/skill skill # buildkit

USER 1000

WORKDIR /work

RUN /bin/sh -c sandbox-werkzeuge # buildkit

Details

Container

2026-10-14 10:55:59 +00:00

OCI / Docker

linux/amd64

975 MiB