From 4640417166b7c8e50008449d2f07d33e6adff2d3 Mon Sep 17 00:00:00 2001 From: Chris Farhood Date: Thu, 9 Apr 2026 17:37:58 -0400 Subject: [PATCH] feat(docker): add kubectl, kubeseal, uv, nano, vim to production stage Install custom tooling in the production stage via direct binaries and apt so it doesn't break the base stage build. Co-Authored-By: Claude Opus 4.6 --- Dockerfile | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 5c3b3bef..0550b410 100644 --- a/Dockerfile +++ b/Dockerfile @@ -50,7 +50,18 @@ ARG USER_UID=1000 ARG USER_GID=1000 WORKDIR /app COPY --chown=node:node --from=build /app /app -RUN npm install --global --omit=dev @anthropic-ai/claude-code@latest @openai/codex@latest opencode-ai \ +RUN apt-get update \ + && apt-get install -y --no-install-recommends nano vim \ + && rm -rf /var/lib/apt/lists/* \ + && curl -fsSL https://dl.k8s.io/release/v1.32.0/bin/linux/amd64/kubectl -o /usr/local/bin/kubectl \ + && chmod +x /usr/local/bin/kubectl \ + && curl -fsSL https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.36.6/kubeseal-0.36.6-linux-amd64.tar.gz | tar -xzf - -C /tmp \ + && mv /tmp/kubeseal /usr/local/bin/kubeseal \ + && rm -rf /tmp/kubeseal /tmp/LICENSE /tmp/README.md \ + && curl -LsSf https://astral.sh/uv/install.sh | sh \ + && mv /root/.local/bin/uv /usr/local/bin/uv \ + && mv /root/.local/bin/uvx /usr/local/bin/uvx \ + && npm install --global --omit=dev @anthropic-ai/claude-code@latest @openai/codex@latest opencode-ai \ && mkdir -p /paperclip \ && chown node:node /paperclip