Dockerfile.optio

# Optio operations assistant pod.
# Lightweight image: Claude Code + HTTP tools. No repo/language tooling needed.

FROM ubuntu:24.04@sha256:186072bba1b2f436cbb91ef2567abca677337cfc786c86e107d25b7072feef0c

ENV DEBIAN_FRONTEND=noninteractive

# Minimal system packages — only what an ops agent needs
RUN apt-get update && apt-get install -y \
    curl wget jq ca-certificates gnupg \
    && rm -rf /var/lib/apt/lists/*

# Node.js 22 (needed for Claude Code)
RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
    && apt-get install -y nodejs \
    && rm -rf /var/lib/apt/lists/*

# Verify Node ships OpenSSL >= 3.5 for post-quantum TLS (X25519MLKEM768)
RUN node -e 'const [maj,min] = process.versions.openssl.split(".").map(Number); if (maj < 3 || (maj === 3 && min < 5)) { console.error("OpenSSL " + process.versions.openssl + " too old; need >= 3.5"); process.exit(1); }'

# Claude Code
RUN npm install -g @anthropic-ai/claude-code

# Non-root user
RUN useradd -m -s /bin/bash optio \
    && mkdir -p /home/optio/.claude \
    && chown -R optio:optio /home/optio

USER optio
WORKDIR /home/optio

# The pod runs sleep infinity — the API server execs into it for chat sessions
CMD ["sleep", "infinity"]