JD Davis
eafdf11a2c
## Description Fixes #1551 and #1692. Every published Headroom Docker image now installs the existing `bedrock` extra, so `--backend bedrock` can authenticate with temporary STS, SSO, and credential-process credentials instead of failing because `botocore` is absent. Public Docker instructions now consistently use `ghcr.io/headroomlabs-ai/headroom`. Several still pointed at the old personal package, which is frozen at 0.27.0 and caused users to report that no latest image existed. ## Type of Change - [x] Bug fix - [ ] New feature - [ ] Breaking change - [x] Documentation update - [x] Build / CI ## Changes Made - Add `bedrock` to the standalone Dockerfile default extras. - Add `bedrock` to all nine root/code/slim/nonroot bake targets. - Replace obsolete personal GHCR references in README, llms.txt, Compose guidance, testing guidance, and wiki docs. - Add release contract tests for Bedrock dependencies and the current organization registry. ## Testing - [x] Focused Docker release and Bedrock preflight tests pass. - [x] Full updater suites pass: 69 tests. - [x] `uv run ruff check tests/test_release_workflows.py` - [x] `docker buildx bake --print` - [x] `git diff --check` ## Real Behavior Proof Before this change, every published bake target installed only `proxy` or `proxy,code`, so `AWS_SESSION_TOKEN` selected an unavailable botocore path. Public copy-paste commands also referenced `ghcr.io/chopratejas/headroom`, which the existing migration code and changelog identify as frozen at 0.27.0. After this change, all nine parsed bake targets install `bedrock`; the regression resolves that package extra and confirms `boto3` plus `botocore`. Every public Docker instruction covered by the contract names `ghcr.io/headroomlabs-ai/headroom`. ## Runtime Rollout Safety This changes image contents and documentation only; proxy routing and non-Docker installs are unchanged. Static AWS credentials remain unaffected. Existing manifests using the deprecated image continue to be migrated by the established install-state logic. Rollback is a Docker/bake extras and documentation revert. ## Review Readiness - [x] Two related Docker blockers batched in one PR - [x] Regression coverage included - [x] No unrelated lockfile changes - [x] Ready for review
89 lines
1.8 KiB
HCL
89 lines
1.8 KiB
HCL
target "docker-metadata-action" {}
|
|
|
|
target "_common" {
|
|
context = "."
|
|
dockerfile = "Dockerfile"
|
|
platforms = ["linux/amd64", "linux/arm64"]
|
|
}
|
|
|
|
target "runtime-default" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,bedrock"
|
|
RUNTIME_USER = "nonroot"
|
|
}
|
|
}
|
|
|
|
target "runtime" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,bedrock"
|
|
RUNTIME_USER = "root"
|
|
}
|
|
}
|
|
|
|
target "runtime-nonroot" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,bedrock"
|
|
RUNTIME_USER = "nonroot"
|
|
}
|
|
}
|
|
|
|
target "runtime-code" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,code,bedrock"
|
|
RUNTIME_USER = "root"
|
|
}
|
|
}
|
|
|
|
target "runtime-code-nonroot" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,code,bedrock"
|
|
RUNTIME_USER = "nonroot"
|
|
}
|
|
}
|
|
|
|
target "runtime-slim" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime-slim"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,bedrock"
|
|
RUNTIME_USER = "root"
|
|
}
|
|
}
|
|
|
|
target "runtime-slim-nonroot" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime-slim"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,bedrock"
|
|
RUNTIME_USER = "nonroot"
|
|
}
|
|
}
|
|
|
|
target "runtime-code-slim" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime-slim"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,code,bedrock"
|
|
RUNTIME_USER = "root"
|
|
}
|
|
}
|
|
|
|
target "runtime-code-slim-nonroot" {
|
|
inherits = ["_common", "docker-metadata-action"]
|
|
target = "runtime-slim"
|
|
args = {
|
|
HEADROOM_EXTRAS = "proxy,code,bedrock"
|
|
RUNTIME_USER = "nonroot"
|
|
}
|
|
}
|