Dockerfile

FROM nvidia/cuda:13.0.2-cudnn-devel-ubuntu22.04
SHELL ["/bin/bash", "-exo", "pipefail", "-c"]

ENV DEBIAN_FRONTEND=noninteractive \
  TZ=Europe/Paris



# Remove any third-party apt sources to avoid issues with expiring keys.
# Install some basic utilities
RUN rm -f /etc/apt/sources.list.d/*.list && \
  apt-get update && apt-get install -y --no-install-recommends \
  curl \
  ca-certificates \
  sudo \
  git \
  wget \
  procps \
  git-lfs \
  zip \
  unzip \
  htop \
  vim \
  nano \
  bzip2 \
  libx11-6 \
  build-essential \
  libsndfile-dev \
  openssh-client \
  software-properties-common \
  && rm -rf /var/lib/apt/lists/*

#RUN add-apt-repository ppa:flexiondotorg/nvtop && \
#  apt-get upgrade -y && \
#RUN apt-get install -y --no-install-recommends nvtop

RUN apt-get -y install git-lfs

RUN curl -fsSL https://deb.nodesource.com/setup_22.x  | bash -
RUN apt-get install -y nodejs
#RUN apt-get install -y npm
RUN npm install -g configurable-http-proxy && npm install -g @openai/codex

# Create a working directory
WORKDIR /app

# Create a non-root user and switch to it
RUN adduser --disabled-password --gecos '' --shell /bin/bash user \
  && chown -R user:user /app
RUN echo "user ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/90-user
USER user

# All users can use /home/user as their home directory
ENV HOME=/home/user
RUN mkdir $HOME/.cache $HOME/.config \
  && chmod -R 777 $HOME

# Set up the Conda environment
ENV CONDA_AUTO_UPDATE_CONDA=false \
  PATH=$HOME/miniconda/bin:$PATH
RUN curl -sLo ~/miniconda.sh https://repo.continuum.io/miniconda/Miniconda3-py39_4.10.3-Linux-x86_64.sh \
  && chmod +x ~/miniconda.sh \
  && ~/miniconda.sh -b -p ~/miniconda \
  && rm ~/miniconda.sh \
  && conda clean -ya

WORKDIR $HOME/app

#######################################
# Start root user section
#######################################

USER root

# User Debian packages
## Security warning : Potential user code executed as root (build time)
RUN --mount=target=/root/packages.txt,source=packages.txt \
  apt-get update && \
  xargs -r -a /root/packages.txt apt-get install -y --no-install-recommends \
  && rm -rf /var/lib/apt/lists/*

RUN --mount=target=/root/on_startup.sh,source=on_startup.sh,readwrite \
  bash /root/on_startup.sh

RUN mkdir /data && chown user:user /data
WORKDIR /data

#######################################
# End root user section
#######################################

USER user

# Python packages
RUN --mount=target=requirements.txt,source=requirements.txt \
  pip install --no-cache-dir --upgrade -r requirements.txt

# Copy the current directory contents into the container at $HOME/app setting the owner to the user
#COPY --chown=user . $HOME/app
COPY --chown=user . /data

RUN chmod +x start_server.sh

COPY --chown=user login.html /home/user/miniconda/lib/python3.9/site-packages/jupyter_server/templates/login.html

ENV PYTHONUNBUFFERED=1 \
  GRADIO_ALLOW_FLAGGING=never \
  GRADIO_NUM_PORTS=1 \
  GRADIO_SERVER_NAME=0.0.0.0 \
  GRADIO_THEME=huggingface \
  SYSTEM=spaces \
  SHELL=/bin/bash

#RUN git clone --recurse-submodules  https://github.com/itbench-hub/ITBench-SRE-Agent.git
#RUN git clone --recursive https://github.com/itbench-hub/ITBench-Lite.git

RUN git clone https://github.com/itbench-hub/ITBench-SRE-Agent.git

RUN curl -LsSf https://astral.sh/uv/install.sh | /bin/bash
RUN . $HOME/.local/bin/env
WORKDIR /data/ITBench-SRE-Agent
RUN /home/user/.local/bin/uv python pin 3.13
RUN /home/user/.local/bin/uv sync && \
  /home/user/.local/bin/uv pip install ipykernel && \
  /data/ITBench-SRE-Agent/.venv/bin/python -m ipykernel install --user --display-name "SRE"

WORKDIR /data

CMD ["./start_server.sh"]