v0.2.1

tinycode-container v0.2.1

Container image: quay.io/bjohns/tinycode-container:v0.2.1

Changes

• vLLM env var bridging (TINYCODE_VLLM_URL → TINYCODE_VLLM_HOST)
• RHOAI / OpenShift in-cluster auto-detection
• GitOps startup mode (clone repos via TINYCODE_GIT_REPO)
• JSON injection prevention (TINYCODE_VLLM_MODEL validation)
• Git URL credential sanitization in logs
• oc CLI checksum verification and version validation
• RPM GPG signature verification
• GitHub Actions pinned to SHA digests
• NetworkPolicy, readOnlyRootFilesystem, ingress rate limiting
• Complete env var documentation in CONTAINER.md (22 variables)
• Port fixed to 4096 in install.sh
• rss-brief skill removed from bundled defaults
• BUILD_PLATFORM support for cross-arch builds

v0.2.0

tinycode-container v0.2.0

Added

• Pinnable git clone refs (TINYCODE_REF, OMT_REF build args)
• bats test suite for entrypoint validation
• .dockerignore for build context optimization

Fixed

• arm64 tmux RPM architecture detection (uname -m)
• Added git-core to CI runtime image (GitOps mode)
• readOnlyRootFilesystem emptyDir mounts for all writable paths
• Added /projects PVC mount to k8s deployment
• VLLM_MODEL newline validation bypass (printf + length check)
• Bats tests use portable relative paths (CI-compatible)
• Ingress overlay excludes OpenShift Route for vanilla Kubernetes
• OMT_REF default corrected to master
• Documentation drift (UBI9 not UBI9-minimal, RPM not compiled)

Full changelog

v0.1.1...v0.2.0

v0.1.1 — Security & Polish

tinycode-container v0.1.1

Security hardening and documentation improvements.

Security

• JSON injection prevention for TINYCODE_VLLM_MODEL (input validation)
• Git credential sanitization in entrypoint logs
• oc CLI checksum verification after download
• GPG-verified RPM downloads for tmux/libutempter
• GitHub Actions pinned to SHA digests
• NetworkPolicy for ingress restriction
• Read-only root filesystem support
• Ingress rate limiting annotations

Fixed

• Install URL fixed (was returning 404)
• Port corrected to 4096 in install.sh
• Stale "private repositories" language updated
• Tmux description corrected (RPM, not compiled from source)
• License section clarified

Added

• CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md, CHANGELOG.md
• CI/License/Release badges
• Issue/PR templates, Dependabot
• Complete environment variable documentation in CONTAINER.md

Full changelog

v0.1.0...v0.1.1

v0.1.0 — Initial Release

tinycode-container v0.1.0

First public release of the tinycode container image.

Features

• UBI9 base image for enterprise Linux compatibility
• Bundled tools — tmux, git, optional oc CLI for OpenShift management
• vLLM auto-configuration via TINYCODE_VLLM_URL environment variable
• GitOps startup mode — clone a git repo into /projects on container start
• RHOAI auto-detection — in-cluster Kubernetes detection with sensible defaults
• Cluster-admin mode — automatic oc CLI download with checksum verification
• Security hardened — input validation, read-only root filesystem, NetworkPolicy, GPG-verified RPMs

Container Image

podman pull quay.io/bjohns/tinycode-container:latest

Also available at ghcr.io/bjohns/tinycode-container:latest.

See CONTAINER.md for the full environment variable reference.