fix(docker): make v2026.7.30 image Python 3.13-compatible #1

Closed

clawlter wants to merge 1 commit from fix/v2026.7.30-docker-image-policy into main

pull from: fix/v2026.7.30-docker-image-policy

merge into: clawlter:main

clawlter:main

clawlter:fix/gateway-deps

Conversation 0 Commits 1 Files changed 5 +160 -16

clawlter commented 2026-07-31 07:29:42 -04:00

Owner

Copy link

Summary

• Update the embedded Hermes Agent source from v2026.7.20 to v2026.7.30.
• Replace unrestricted optional-dependency selection with an explicit broad production/provider allowlist that includes the official Docker baseline and excludes wake, dev, and Termux-only bundles.
• Build and validate SQLite 3.53.4 in both dependency and runtime stages, including the FTS5 trigram self-test.
• Add Matrix/python-olm build/runtime support and PortAudio runtime support for the selected voice extra.
• Seal the baked application tree for the normal non-root 1000:1000 runtime while preserving explicit root/arbitrary numeric UID:GID overrides.
• Derive safe-write and durable lazy-install paths from the actual HERMES_HOME bind mount, with Compose overrides for docker exec consistency.

Validation

• Independent read-only audit by the configured reviewer profile using openai-codex/gpt-5.6-sol: PASS, no remaining blocker or important correctness findings.
• Frozen CPython 3.13 dependency dry-run against the exact v2026.7.30 pyproject.toml/uv.lock: passed for all 28 selected extras.
• Static extra-set checks: official baseline present; no duplicate, wake, dev, termux, or termux-all selection.
• Dockerfile/entrypoint/wrapper/healthcheck shell syntax checks and git diff --check: passed.
• Runtime path expansion checks for default, non-default, and explicitly overridden HERMES_HOME: passed.
• Commit is GPG-signed.

Not run here

A full BuildKit image build and live container acceptance run were not completed in this environment. The remaining validation is the target-architecture Docker build plus startup, SQLite/FTS5, Matrix, PortAudio, Playwright, healthcheck, Docker-wrapper, and persistence smoke tests.

## Summary - Update the embedded Hermes Agent source from v2026.7.20 to v2026.7.30. - Replace unrestricted optional-dependency selection with an explicit broad production/provider allowlist that includes the official Docker baseline and excludes `wake`, `dev`, and Termux-only bundles. - Build and validate SQLite 3.53.4 in both dependency and runtime stages, including the FTS5 trigram self-test. - Add Matrix/python-olm build/runtime support and PortAudio runtime support for the selected voice extra. - Seal the baked application tree for the normal non-root `1000:1000` runtime while preserving explicit root/arbitrary numeric UID:GID overrides. - Derive safe-write and durable lazy-install paths from the actual `HERMES_HOME` bind mount, with Compose overrides for `docker exec` consistency. ## Validation - Independent read-only audit by the configured `reviewer` profile using `openai-codex/gpt-5.6-sol`: PASS, no remaining blocker or important correctness findings. - Frozen CPython 3.13 dependency dry-run against the exact v2026.7.30 `pyproject.toml`/`uv.lock`: passed for all 28 selected extras. - Static extra-set checks: official baseline present; no duplicate, `wake`, `dev`, `termux`, or `termux-all` selection. - Dockerfile/entrypoint/wrapper/healthcheck shell syntax checks and `git diff --check`: passed. - Runtime path expansion checks for default, non-default, and explicitly overridden `HERMES_HOME`: passed. - Commit is GPG-signed. ## Not run here A full BuildKit image build and live container acceptance run were not completed in this environment. The remaining validation is the target-architecture Docker build plus startup, SQLite/FTS5, Matrix, PortAudio, Playwright, healthcheck, Docker-wrapper, and persistence smoke tests.

clawlter added 1 commit 2026-07-31 07:29:42 -04:00

fix(docker): align v2026.7.30 image policy 4d8110a0a7

clawlter closed this pull request 2026-07-31 07:43:49 -04:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

clawlter/hermes-agent-docker!1

No description provided.