Block a user
dsh (latest)
Published 2026-10-01 22:27:26 +03:00 by hermes
Installation
docker pull gitea2.archeon.io/hermes/dsh:latestsha256:7ea0cd8ce55da2335f11e3205421a9516e7666a430a3b9d4321c785425540d64
Images
| Digest | OS / Arch | Size |
|---|---|---|
| 4b7f34a5af | linux/amd64 | 460 MiB |
Image Layers ( linux/amd64)
| # debian.sh --arch 'amd64' out/ 'bookworm' '@1789689600' |
| RUN /bin/sh -c groupadd --gid 1000 node && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit |
| ENV NODE_VERSION=24.21.0 |
| RUN /bin/sh -c ARCH= OPENSSL_ARCH= && dpkgArch="$(dpkg --print-architecture)" && case "${dpkgArch##*-}" in amd64) ARCH='x64' OPENSSL_ARCH='linux-x86_64';; ppc64el) ARCH='ppc64le' OPENSSL_ARCH='linux-ppc64le';; arm64) ARCH='arm64' OPENSSL_ARCH='linux-aarch64';; *) echo "unsupported architecture"; exit 1 ;; esac && set -ex && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr xz-utils libatomic1 --no-install-recommends && rm -rf /var/lib/apt/lists/* && export GNUPGHOME="$(mktemp -d)" && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A 655F3B5C1FB3FA8D1A0CA6BDE4A7D232B936D2FD A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt && find /usr/local/include/node/openssl/archs -mindepth 1 -maxdepth 1 ! -name "$OPENSSL_ARCH" -exec rm -rf {} \; && apt-mark auto '.*' > /dev/null && find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && ln -s /usr/local/bin/node /usr/local/bin/nodejs && node --version && npm --version && rm -rf /tmp/* # buildkit |
| ENV YARN_VERSION=1.22.22 |
| RUN /bin/sh -c set -ex && savedAptMark="$(apt-mark showmanual)" && apt-get update && apt-get install -y ca-certificates curl wget gnupg dirmngr --no-install-recommends && rm -rf /var/lib/apt/lists/* && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && apt-mark auto '.*' > /dev/null && { [ -z "$savedAptMark" ] || apt-mark manual $savedAptMark > /dev/null; } && find /usr/local -type f -executable -exec ldd '{}' ';' | awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); print so }' | sort -u | xargs -r dpkg-query --search | cut -d: -f1 | sort -u | xargs -r apt-mark manual && apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && yarn --version && rm -rf /tmp/* # buildkit |
| COPY docker-entrypoint.sh /usr/local/bin/ # buildkit |
| ENTRYPOINT ["docker-entrypoint.sh"] |
| CMD ["node"] |
| ARG PNPM_VERSION=11.7.0 |
| ARG DSH_VERSION=0.2.0-rc.2 |
| ARG ENVIRONMENT_VERSION=development |
| ARG TARGET_SEQUENCE=0 |
| LABEL org.opencontainers.image.title=DeepSeek Harness org.opencontainers.image.description=Unofficial container image for DeepSeek Harness org.opencontainers.image.source=https://github.com/yjrszcq/dsh-docker org.opencontainers.image.licenses=MIT org.opencontainers.image.version=0.2.0-rc.2 io.dsh-docker.environment.version=development io.dsh-docker.target-sequence=0 |
| RUN |4 PNPM_VERSION=11.7.0 DSH_VERSION=0.2.0-rc.2 ENVIRONMENT_VERSION=development TARGET_SEQUENCE=0 /bin/sh -c apt-get update && apt-get install -y --no-install-recommends bash ca-certificates curl g++ git jq make openssh-client p7zip-full procps python3 python3-venv ripgrep sudo tini unzip util-linux zip && groupadd --system dsh-sudo-true && groupadd --system dsh-sudo-false && groupadd --system --gid 991 dsh-proxy && useradd --system --uid 991 --gid 991 --home-dir /nonexistent --shell /usr/sbin/nologin dsh-proxy && groupadd --system --gid 992 dsh-access && useradd --system --uid 992 --gid 992 --home-dir /nonexistent --shell /usr/sbin/nologin dsh-access && npm install --global "pnpm@${PNPM_VERSION}" && rm -rf /var/lib/apt/lists/* /root/.npm # buildkit |
| COPY docker-sudoers /etc/sudoers.d/dsh-sudo # buildkit |
| RUN |4 PNPM_VERSION=11.7.0 DSH_VERSION=0.2.0-rc.2 ENVIRONMENT_VERSION=development TARGET_SEQUENCE=0 /bin/sh -c chmod 440 /etc/sudoers.d/dsh-sudo && visudo -cf /etc/sudoers.d/dsh-sudo # buildkit |
| COPY /opt/dsh-platform-seed /opt/dsh-platform/seed # buildkit |
| COPY container/platform /opt/dsh-platform/runtime/platform # buildkit |
| COPY container/control-plane /opt/dsh-platform/runtime/control-plane # buildkit |
| COPY /opt/dsh-platform-source/control-plane/services/management/node_modules /opt/dsh-platform/runtime/control-plane/services/management/node_modules # buildkit |
| COPY container/platform/tools/dsh-shim.sh /usr/local/bin/dsh # buildkit |
| COPY container/platform/tools/dsh-platform-shim.sh /usr/local/bin/dsh-platform # buildkit |
| RUN |4 PNPM_VERSION=11.7.0 DSH_VERSION=0.2.0-rc.2 ENVIRONMENT_VERSION=development TARGET_SEQUENCE=0 /bin/sh -c chmod 755 /usr/local/bin/dsh /usr/local/bin/dsh-platform # buildkit |
| ENV DSH_PLATFORM_DATA=/data/platform DSH_PLATFORM_MANAGED=1 DSH_PLATFORM_RUN=/run/dsh-platform DSH_HOME=/data/dsh DSH_DEFAULT_WORKSPACE=/workspace DSH_PROXY_POLYFILL=true DSH_TELEMETRY_DISABLED=true DSH_UPDATE_METADATA_URL=https://raw.githubusercontent.com/yjrszcq/dsh-docker/release-channel/ DSH_LOG_MAX_BYTES=104857600 DSH_LOG_RETENTION_DAYS=14 DSH_ACTIVATION_TIMEOUT_SECONDS=60 DSH_EXPERIMENTAL_PROBATION_SECONDS=120 |
| RUN |4 PNPM_VERSION=11.7.0 DSH_VERSION=0.2.0-rc.2 ENVIRONMENT_VERSION=development TARGET_SEQUENCE=0 /bin/sh -c mkdir -p /data/platform /data/dsh /workspace && chown -R node:node /data/dsh /workspace # buildkit |
| ARG INSTALL_DEVTOOLS=false |
| ARG UV_VERSION=0.11.32 |
| RUN |6 PNPM_VERSION=11.7.0 DSH_VERSION=0.2.0-rc.2 ENVIRONMENT_VERSION=development TARGET_SEQUENCE=0 INSTALL_DEVTOOLS=false UV_VERSION=0.11.32 /bin/sh -c case "$INSTALL_DEVTOOLS" in true) apt-get update && apt-get install -y --no-install-recommends bash-completion build-essential dnsutils file htop iproute2 iputils-ping less lsof nano netcat-openbsd openssl pkg-config rsync tmux tree unzip vim wget xz-utils zip && curl --fail --location --silent --show-error "https://astral.sh/uv/${UV_VERSION}/install.sh" --output /tmp/uv-installer.sh && UV_UNMANAGED_INSTALL=/usr/local/bin sh /tmp/uv-installer.sh && mkdir -p /etc/uv && printf '%s\n' 'python-downloads = "manual"' > /etc/uv/uv.toml && rm /tmp/uv-installer.sh && rm -rf /var/lib/apt/lists/* ;; false) ;; *) echo "INSTALL_DEVTOOLS must be true or false" >&2; exit 64 ;; esac # buildkit |
| WORKDIR /workspace |
| EXPOSE [3080/tcp] |
| HEALTHCHECK {Test:[CMD-SHELL /usr/bin/curl --fail --silent --show-error --noproxy '*' http://127.0.0.1:3080/_dsh_gateway/health >/dev/null || exit 1] Interval:30s Timeout:5s StartPeriod:1m0s StartInterval:0s Retries:3} |
| ENTRYPOINT ["/usr/bin/tini" "--"] |
| CMD ["/usr/local/bin/node" "/opt/dsh-platform/runtime/platform/stage0/index.mjs"] |
Labels
| Key | Value |
|---|---|
| io.dsh-docker.environment.version | development |
| io.dsh-docker.target-sequence | 0 |
| org.opencontainers.image.description | Unofficial container image for DeepSeek Harness |
| org.opencontainers.image.licenses | MIT |
| org.opencontainers.image.source | https://github.com/yjrszcq/dsh-docker |
| org.opencontainers.image.title | DeepSeek Harness |
| org.opencontainers.image.version | 0.2.0-rc.2 |
Details
2026-10-01 22:27:26 +03:00
Versions (2)
View all
Container
1
OCI / Docker
0.2.0-rc.2
2026-10-01
latest
2026-10-01