Repository navigation
Add bobshell container example with release CI - #53
Merged
Merged
Conversation
brian-hussey
requested changes
Oct 5, 2026
brian-hussey
left a comment
brian-hussey
left a comment
Member
There was a problem hiding this comment.
This is awesome!
A couple of suggestions for security and for image size (saves ~600MB per image built).
Containerize IBM Bob Shell on ubi10/nodejs-24 under infra/bobshell: - Containerfile installs Bob Shell via the official installer, pre-accepts the IBM license, and pre-trusts /workspace for non-interactive use - entrypoint.sh wires Docker Compose configs/secrets: an MCP config at /etc/bob/mcp.json and an API key secret at /run/secrets/bob_api_key (BOB_API_KEY env var takes precedence) - sample docker-compose.yml, mcp.json, and README - build-bobshell workflow publishes a multi-arch image to ghcr.io/ibm/cfex-bobshell on main pushes, release publication, and manual dispatch Signed-off-by: Jonathan Springer <jps@s390x.com>
jonpspri
force-pushed
the
bob-container
branch
from
October 5, 2026 09:52
8ef955d to
ca85bb9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
infra/bobshell/Containerfile: IBM Bob Shell onubi10/nodejs-24, installed via the official installer; IBM license pre-accepted and/workspacepre-trusted from the command line sobobruns non-interactively; runs as UID 1001; defaults tobob chat.entrypoint.sh: two configurations via Docker Compose mechanisms —secrets:→/run/secrets/bob_api_key→ exported asBOB_API_KEY(env var takes precedence)configs:→/etc/bob/mcp.json→ installed as user-global~/.bob/settings/mcp.jsondocker-compose.yml,mcp.json, and README.build-bobshellworkflow: multi-arch (amd64/arm64) publish toghcr.io/ibm/cfex-bobshellon main pushes (path-filtered), release publication (tagged with the release name +latest), and manual dispatch; PRs build for validation.Test plan
docker buildsucceeds;bob --versionreports 2.0.5 in-imagedocker runlaunchesbob chat; license/trust state pre-baked (licenseConsent,TRUST_PARENT /workspace)BOB_API_KEYexported; env var wins over secretbob mcp listshows configured servers (global scope)docker compose config+build+runexercise the sample end to endBuild Bobshell Containerrun