Grayscale/nanobot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,706 Commits 1 Branch 1 Tag
main
Commit Graph
23 Commits
Author SHA1 Message Date
chengyongruandGitHub 8423cf3eeb fix(channels): complete dependency manifest migration (#4995) 
* fix(channels): complete dependency manifest migration

* docs(docker): clarify custom uid dependency installs

* fix(channels): keep dependency preinstall internal

* refactor(channels): move dependency installer to scripts

* fix(docker): limit runtime write access
 2026-07-20 15:24:57 +08:00
Ho1yShifandXubin Ren c77379099b refactor(entrypoint): improve privilege dropping and config initialization 
- Updated entrypoint.sh to initialize the on-disk config only if it does not already exist, preserving user edits across restarts.
- Enhanced privilege dropping logic to ensure the container does not run as root if the privilege drop fails.
- Clarified comments in Dockerfile and entrypoint.sh for better understanding of the privilege management process.
- Updated README.md to include a note about persistent disks requiring a paid service on Render.
- Adjusted render.yaml to clarify the Docker command behavior and added a note regarding auto-deploy settings.
 2026-07-18 17:39:59 +08:00
Ho1yShifXubin RenClaude Opus 4.8
 		770d89b430 feat: add one-click Deploy to Render support 
Adds a Render Blueprint (render.yaml) and supporting pieces so nanobot can
be deployed to Render in one click, with persistent memory across deploys.

- render.yaml: web service + 1GB persistent disk mounted at
  /home/nanobot/.nanobot. Prompts for ANTHROPIC_API_KEY and
  NANOBOT_WEB_TOKEN at deploy time (sync: false).
- render-config.json: committed gateway config that wires secrets via
  ${VAR} placeholders (resolved at runtime). Nothing secret is committed.
- entrypoint.sh: adds a branch gated on RENDER=true that copies the config
  onto the mounted disk, chowns the root-owned mount, and drops to the
  non-root nanobot user via setpriv. Local (non-Render) path is unchanged.
- Dockerfile: COPY render-config.json; USER nanobot -> USER root so the
  entrypoint can chown the freshly-mounted disk before dropping privileges;
  add PYTHONUNBUFFERED/PYTHONFAULTHANDLER for diagnosable crash output.
- README.md: Deploy to Render button + section.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-18 17:39:59 +08:00
David JimenezandXubin Ren 6313ae9f4f add Dockerfile arg to override optional Python dependencies to install at build time 2026-07-09 23:58:59 +08:00
chengyongruandXubin Ren 5281e67222 fix(docker): repair whatsapp image build 2026-06-27 11:05:03 +08:00
chengyongruandXubin Ren dbb53109f4 build(docker): remove node from runtime image 2026-06-27 11:05:03 +08:00
chengyongruandXubin Ren bfb4246659 fix(docker): limit whatsapp bridge removal 2026-06-27 11:05:03 +08:00
chengyongruandXubin Ren 2a9e288dfe refactor(whatsapp): replace bridge with neonize 2026-06-27 11:05:03 +08:00
David JimenezandXubin Ren 4b1decdb95 chore: bump to node 24 2026-06-24 10:23:07 +08:00
Xubin Ren f309982bb0 chore(release): update version to 0.2.1 2026-06-01 16:51:24 +08:00
Xubin Ren 175b58e259 fix(docker): document bundled webui port 2026-05-17 15:51:04 +08:00
huanglei.214andXubin Ren 3bf8de047a fix docker build 2026-05-17 15:51:04 +08:00
flobo3andXubin Ren 67e6f8cc7a fix(docker): strip Windows CRLF from entrypoint.sh 2026-04-07 13:32:01 +08:00
Xubin Ren bf459c7887 fix(docker): fix volume mount path and add permission error guidance 2026-04-06 13:15:40 +00:00
Xubin Ren a8707ca8f6 Merge origin/main into feat/best_skill_and_hook (resolve 4 conflicts) 
Made-with: Cursor
 2026-04-05 18:53:17 +00:00
Xubin RenandXubin Ren f4983329c6 fix(docker): preserve both github ssh rewrite rules for npm install 2026-04-04 22:33:46 +08:00
Wenzhang-ChenandXubin Ren c9d6491814 fix(docker): rewrite github ssh git deps to https for npm build 2026-04-04 22:33:46 +08:00
KianandXubin Ren d7f6cbbfc4 fix: add openssh-client and use HTTPS for GitHub in Docker build 
- Add openssh-client to apt dependencies for git operations
- Configure git to use HTTPS instead of SSH for github.com to avoid
  SSH key requirements during Docker build

Made-with: Cursor
 2026-03-21 02:43:11 +08:00
kinchahoy 7913e7150a feat: sandbox exec calls with bwrap and run container as non-root 2026-03-16 23:55:19 -07:00
Peter van Eijk ae1830acdd feat: change default command to status 2026-02-02 16:36:22 +07:00
Claude f7e8e73c54 fix: add git to Dockerfile for npm bridge dependency install 
A bridge npm dependency requires git to be present at install time.

https://claude.ai/code/session_011C1h1NERqqZp4ht3Pqpwkc
 2026-02-02 09:17:24 +00:00
Claude fa25856d8c fix: create stub bridge/ dir in dependency caching layer 
Hatchling's force-include requires bridge/ to exist at build time.
The dependency caching step now stubs both nanobot/ and bridge/.

https://claude.ai/code/session_011C1h1NERqqZp4ht3Pqpwkc
 2026-02-02 09:07:23 +00:00
Claude 20227f1f04 feat: add Dockerfile with uv-based installation 
Add a Dockerfile using the official uv Python image (python3.12-bookworm-slim)
for fast dependency installation. Includes Node.js 20 for the WhatsApp bridge,
dependency layer caching, and exposes the gateway port (18790).

https://claude.ai/code/session_011C1h1NERqqZp4ht3Pqpwkc
 2026-02-02 08:55:21 +00:00