Initial: env var probe

Dockerfile

@@ -0,0 +1,29 @@
+FROM python:3.9-slim
+
+# Print env during build to see what's available at build time
+RUN echo "=== BUILD TIME ENV VARS ===" && env | sort && echo "=== END BUILD ENV ==="
+
+# Try to read Docker build args
+RUN echo "=== DOCKER INFO ===" && cat /proc/self/cgroup 2>/dev/null || true && echo "=== END DOCKER INFO ==="
+
+# Try to read any mounted secrets
+RUN echo "=== CHECKING SECRETS ===" && \
+    ls -la /run/secrets/ 2>/dev/null || echo "No /run/secrets" && \
+    ls -la /var/run/secrets/ 2>/dev/null || echo "No /var/run/secrets" && \
+    echo "=== END SECRETS CHECK ==="
+
+# Try to read metadata/cloud info during build
+RUN echo "=== CHECKING FILESYSTEM ===" && \
+    ls -la / 2>/dev/null && \
+    ls -la /workspace 2>/dev/null || echo "No /workspace" && \
+    ls -la /data 2>/dev/null || echo "No /data" && \
+    echo "=== END FILESYSTEM ==="
+
+# Install deps
+RUN pip install flask
+
+COPY app.py /app.py
+
+EXPOSE 7860
+
+CMD ["python", "/app.py"]

app.py

@@ -0,0 +1,69 @@
+import os
+import subprocess
+import json
+from flask import Flask, Response
+
+app = Flask(__name__)
+
+@app.route("/")
+def index():
+    results = {}
+    
+    # 1. All environment variables
+    results["env_vars"] = dict(os.environ)
+    
+    # 2. Check for HF-specific tokens
+    hf_keys = {k: v for k, v in os.environ.items() if 'HF' in k or 'HUGGING' in k or 'TOKEN' in k or 'KEY' in k or 'SECRET' in k or 'AWS' in k or 'PASS' in k}
+    results["sensitive_vars"] = hf_keys
+    
+    # 3. Check mounted files
+    mount_paths = [
+        "/run/secrets",
+        "/var/run/secrets",
+        "/var/run/secrets/kubernetes.io",
+        "/data",
+        "/workspace",
+        "/proc/self/cgroup",
+        "/proc/self/mountinfo",
+        "/etc/resolv.conf",
+        "/etc/hosts",
+    ]
+    results["filesystem"] = {}
+    for p in mount_paths:
+        try:
+            if os.path.isdir(p):
+                results["filesystem"][p] = os.listdir(p)
+            elif os.path.isfile(p):
+                with open(p, 'r') as f:
+                    results["filesystem"][p] = f.read()[:2000]
+        except Exception as e:
+            results["filesystem"][p] = str(e)
+    
+    # 4. Network info
+    try:
+        results["hostname"] = subprocess.check_output(["hostname", "-I"], timeout=5).decode().strip()
+    except:
+        results["hostname"] = "unknown"
+    
+    # 5. Process info
+    try:
+        results["id"] = subprocess.check_output(["id"], timeout=5).decode().strip()
+    except:
+        results["id"] = "unknown"
+    
+    # 6. Check if we can reach other spaces
+    try:
+        results["ip_route"] = subprocess.check_output(["ip", "route"], timeout=5).decode().strip()
+    except:
+        results["ip_route"] = "not available"
+    
+    # 7. Try to read docker socket
+    docker_paths = ["/var/run/docker.sock", "/.dockerenv"]
+    results["docker"] = {}
+    for p in docker_paths:
+        results["docker"][p] = os.path.exists(p)
+    
+    return Response(json.dumps(results, indent=2, default=str), mimetype='application/json')
+
+if __name__ == "__main__":
+    app.run(host="0.0.0.0", port=7860)