From 2f1e9b1a7700b321bfbc4ba1fa60cc65fd8052b9 Mon Sep 17 00:00:00 2001
From: Ryan Cook <rcook@redhat.com>
Date: Thu, 6 Nov 2025 14:21:51 -0500
Subject: [PATCH] WIP: convert the runner to UBI

Signed-off-by: Ryan Cook <rcook@redhat.com>
---
 .../runners/claude-code-runner/Dockerfile      | 18 +++++++-----------
 1 file changed, 7 insertions(+), 11 deletions(-)

diff --git a/components/runners/claude-code-runner/Dockerfile b/components/runners/claude-code-runner/Dockerfile
index 218d14124..66be7f4f2 100644
--- a/components/runners/claude-code-runner/Dockerfile
+++ b/components/runners/claude-code-runner/Dockerfile
@@ -1,14 +1,8 @@
-FROM python:3.11-slim
-
-# Install system dependencies
-RUN apt-get update && apt-get install -y \
-    git \
-    curl \
-    ca-certificates \
-    && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
-    && apt-get install -y nodejs \
-    && npm install -g @anthropic-ai/claude-code \
-    && rm -rf /var/lib/apt/lists/*
+FROM registry.access.redhat.com/ubi9/python-311@sha256:d0b35f779ca0ae87deaf17cd1923461904f52d3ef249a53dbd487e02bdabdde6
+
+USER 0
+
+RUN npm install -g @anthropic-ai/claude-code
 
 # Create working directory
 WORKDIR /app
@@ -35,5 +29,7 @@ ENV TERM=xterm-256color
 # OpenShift compatibility
 RUN chmod -R g=u /app && chmod -R g=u /usr/local && chmod g=u /etc/passwd
 
+USER 1001
+
 # Default command - run via runner-shell
 CMD ["python", "/app/claude-runner/wrapper.py"]