.dockerignore

# Git
.git
.gitignore
.gitmodules

# Dependencies
node_modules
**/node_modules
.venv
**/.venv

# CI/CD
.github

# Environment files
.env

*.md

# Runtime data (bind-mounted at /opt/data; must not leak into build context)
data/
feat(docker): add Docker container for the agent (salvage #1841) (#3668) Adds a complete Docker packaging for Hermes Agent: - Dockerfile based on debian:13.4 with all deps - Entrypoint that bootstraps .env, config.yaml, SOUL.md on first run - CI workflow to build, test, and push to DockerHub - Documentation for interactive, gateway, and upgrade workflows Closes #850, #913. Changes vs original PR: - Removed pre-created legacy cache/platform dirs from entrypoint (image_cache, audio_cache, pairing, whatsapp/session) — these are now created on demand by the application using the consolidated layout from get_hermes_dir() - Moved docs from docs/docker.md to website/docs/user-guide/docker.md and added to Docusaurus sidebar Co-authored-by: benbarclay <benbarclay@users.noreply.github.com> 2026-03-28 22:21:48 -07:00			`# Git`
			`.git`
			`.gitignore`
			`.gitmodules`

Simplify dockerignore 2026-03-30 15:29:06 -05:00			`# Dependencies`
			`node_modules`
fix(docker): materialize bundled TUI Ink package (#16690) * fix(docker): materialize bundled TUI Ink package * fix(docker): keep nested deps out of build context * fix(docker): make TUI Ink smoke check deterministic * test(docker): skip dockerignore assertion in partial checkouts * fix(docker): use lockfile install for vendored Ink deps * test(cli): expect deterministic npm ci in /update flow * fix(docker): fall back to npm install for vendored Ink deps * fix(docker): keep bundled Ink source for TUI runtime builds * fix(docker): dedupe React in vendored Ink package 2026-04-28 13:11:47 -07:00			`**/node_modules`
fix(docker): add .venv to .dockerignore 2026-04-13 12:28:57 +03:00			`.venv`
fix(docker): materialize bundled TUI Ink package (#16690) * fix(docker): materialize bundled TUI Ink package * fix(docker): keep nested deps out of build context * fix(docker): make TUI Ink smoke check deterministic * test(docker): skip dockerignore assertion in partial checkouts * fix(docker): use lockfile install for vendored Ink deps * test(cli): expect deterministic npm ci in /update flow * fix(docker): fall back to npm install for vendored Ink deps * fix(docker): keep bundled Ink source for TUI runtime builds * fix(docker): dedupe React in vendored Ink package 2026-04-28 13:11:47 -07:00			`**/.venv`
Optimize Dockerfile: combine RUN commands, clear caches, add .dockerignore - Combine apt-get update and install into single RUN with cache clearing - Remove APT lists after installation - Add --no-cache-dir to pip install - Add --prefer-offline --no-audit to npm install - Create .dockerignore to exclude unnecessary files from build context - Update docker-publish.yml workflow to tag images with release names - Ensure buildx caching is used (type=gha) 2026-03-30 15:19:52 -05:00
Simplify dockerignore 2026-03-30 15:29:06 -05:00			`# CI/CD`
			`.github`
Optimize Dockerfile: combine RUN commands, clear caches, add .dockerignore - Combine apt-get update and install into single RUN with cache clearing - Remove APT lists after installation - Add --no-cache-dir to pip install - Add --prefer-offline --no-audit to npm install - Create .dockerignore to exclude unnecessary files from build context - Update docker-publish.yml workflow to tag images with release names - Ensure buildx caching is used (type=gha) 2026-03-30 15:19:52 -05:00
Simplify dockerignore 2026-03-30 15:29:06 -05:00			`# Environment files`
Optimize Dockerfile: combine RUN commands, clear caches, add .dockerignore - Combine apt-get update and install into single RUN with cache clearing - Remove APT lists after installation - Add --no-cache-dir to pip install - Add --prefer-offline --no-audit to npm install - Create .dockerignore to exclude unnecessary files from build context - Update docker-publish.yml workflow to tag images with release names - Ensure buildx caching is used (type=gha) 2026-03-30 15:19:52 -05:00			`.env`

			`*.md`
fix(docker): exclude runtime data/ from build context The Dockerfile declares VOLUME /opt/data and the published docker-compose flow bind-mounts ./data:/opt/data for runtime state. Because .dockerignore did not list data/, any file the container writes under /opt/data leaks back into the build context on the next `docker compose build`. This becomes a hard failure when the container writes a dangling symlink there — e.g. PulseAudio's XDG runtime entry (data/.config/pulse/<host>-runtime -> /tmp/pulse-*) whose target only exists inside the container. Docker's tar packer cannot resolve the broken symlink on the host and aborts context load with `invalid file request`. Excluding data/ keeps build context clean, shrinks the context tarball (logs/, sessions/, memories/ no longer shipped), and matches the intent already expressed in .gitignore. 2026-04-22 16:33:58 +08:00
			`# Runtime data (bind-mounted at /opt/data; must not leak into build context)`
			`data/`