zeekayandHanzo Dev
0b4a9eb8a3
.github/workflows now holds sync.yml alone, carrying refs to git.hanzo.ai; every build runs natively there from .hanzo/workflows. .hanzo/workflows/deploy.yml publishes ghcr.io/hanzoai/hanzo-sh:<sha> and does not deploy — the operator CR in hanzoai/universe names which tag is live. The GitHub Pages workflow it replaces never served this host: Pages reports status null (no build ever succeeded) and hanzo.sh resolves to Cloudflare, where an assets Worker answers. Its two jobs asked for hanzo-build-linux-amd64 and hanzo-deploy-linux-amd64, retired labels nothing answers. public/CNAME goes with it: that file is a Pages control file and means nothing to hanzoai/static. The Dockerfile ends FROM ghcr.io/hanzoai/static:v0.5.1 with dist at /public, and asserts the polyglot before the image exists: dist/index.html must keep its `#!/bin/sh` first line, its `<!DOCTYPE html>`, and parse under bash -n, because `curl hanzo.sh | bash` runs the same bytes the browser renders. Measured: static returns the live 25426-byte polyglot byte-identical as text/html, and the served response still runs the installer under bash. wrangler.toml stays until the image is promoted; removing it first would strand the live host. Co-authored-by: Hanzo Dev <[email protected]>
33 lines
1.5 KiB
Docker
33 lines
1.5 KiB
Docker
# hanzo.sh — a Vite build served by hanzoai/static, the house static server (a Go
|
|
# binary on scratch). No GitHub Pages, no Cloudflare: the site is an image the
|
|
# operator runs behind hanzoai/ingress like every other Hanzo surface.
|
|
#
|
|
# dist/index.html is a POLYGLOT — an HTML document AND the installer that
|
|
# `curl hanzo.sh | bash` executes. scripts/build-polyglot.js wraps the built HTML
|
|
# in a heredoc and appends public/install.sh. hanzoai/static answers with file
|
|
# bytes verbatim (Go ServeContent: no rewrite, no minify, no injection), so the
|
|
# contract survives being served from here — measured byte-identical against the
|
|
# live response, and the served bytes still run under bash.
|
|
|
|
FROM node:22 AS build
|
|
WORKDIR /src
|
|
RUN npm i -g pnpm@9
|
|
COPY package.json pnpm-lock.yaml ./
|
|
RUN pnpm install --frozen-lockfile
|
|
COPY . .
|
|
RUN pnpm build
|
|
|
|
# Both halves, or there is no image. A shell that cannot parse index.html breaks
|
|
# `curl hanzo.sh | bash`; a document that does not open with <!DOCTYPE html>
|
|
# breaks the browser. bash, not sh — the installer uses bash arrays, which is
|
|
# why the documented contract pipes into bash explicitly.
|
|
RUN head -1 dist/index.html | grep -qx '#!/bin/sh' \
|
|
&& grep -qx '<!DOCTYPE html>' dist/index.html \
|
|
&& bash -n dist/index.html
|
|
|
|
# hanzoai/static defaults to -port 3000 -root /public, so it needs no arguments.
|
|
# No -spa: the app has exactly one route, so a mistyped path must 404 rather than
|
|
# hand back the installer under a name that promises something else.
|
|
FROM ghcr.io/hanzoai/static:v0.5.1
|
|
COPY --from=build /src/dist /public
|