Skip to content

feat(docker): bake litellm extra into the docker image #142

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
akshaylive merged 1 commit into from
Aug 27, 2026
Merged

feat(docker): bake litellm extra into the docker image #142

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 13 additions & 9 deletions docker/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,12 +48,16 @@ COPY src/ ./src/
# experiments/default.yaml is force-included by hatchling per pyproject.toml.
COPY experiments/default.yaml ./experiments/default.yaml

# Codex and Antigravity are always baked into the image -- peers to the
# claude-code agent installed above -- so all built-in agents ship in every
# build. `openai-codex` (+ its pinned cli-bin) and `google-antigravity` (which
# bundles its `localharness` binary as a manylinux wheel) come from public PyPI,
# so this needs no private-index credentials. The RUN below always passes
# `--extra codex --extra antigravity`.
# Codex, Antigravity, and litellm are always baked into the image -- codex/
# antigravity are peers to the claude-code agent installed above, so all
# built-in agents ship in every build; litellm backs the `checker_context.
# api_route.route: litellm` judge dispatch (see pyproject.toml's `litellm`
# extra), which every DockerRunner-isolated task needs available IN-container
# since the checker runs there too, not just on the host. `openai-codex`
# (+ its pinned cli-bin), `google-antigravity` (which bundles its
# `localharness` binary as a manylinux wheel), and `litellm` all come from
# public PyPI, so this needs no private-index credentials. The RUN below
# always passes `--extra codex --extra antigravity --extra litellm`.
#
# CODER_EVAL_UV_EXTRAS carries ADDITIONAL opt-in extras on top of those; it
# defaults to none. `make docker-image-full` passes `--extra uipath`, which
Expand All @@ -67,10 +71,10 @@ ARG CODER_EVAL_UV_EXTRAS=""
# newer than the gate window); callers may override.
ARG SAFE_CHAIN_MINIMUM_PACKAGE_AGE_EXCLUSIONS="openai-codex-cli-bin,openai-codex,google-antigravity"

# All extras (codex, antigravity, and the opt-in uipath) resolve from public
# PyPI per uv.lock, so the build needs no private-index credentials.
# All extras (codex, antigravity, litellm, and the opt-in uipath) resolve from
# public PyPI per uv.lock, so the build needs no private-index credentials.
RUN export SAFE_CHAIN_MINIMUM_PACKAGE_AGE_EXCLUSIONS="${SAFE_CHAIN_MINIMUM_PACKAGE_AGE_EXCLUSIONS}" && \
uv export --frozen --extra codex --extra antigravity ${CODER_EVAL_UV_EXTRAS} | uv pip install --system -r /dev/stdin
uv export --frozen --extra codex --extra antigravity --extra litellm ${CODER_EVAL_UV_EXTRAS} | uv pip install --system -r /dev/stdin

# Sanity check: the in-container entrypoint subcommand must be wired up.
RUN coder-eval _run-task-internal --help > /dev/null
Expand Down
Loading