Skip to content

perf(claude-code): install Claude Code last and cache CI layers #183

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gatezh merged 2 commits into from
Oct 1, 2026
Merged

perf(claude-code): install Claude Code last and cache CI layers #183

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
910ca32
perf(claude-code): install Claude Code last and cache CI layers
gatezh Oct 1, 2026
1ef8bc7
Merge remote-tracking branch 'github/master' into perf/claude-code-la…
gatezh Oct 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/workflows/build-claude-code.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,9 @@ jobs:
push: true
target: default
context: claude-code/.devcontainer
# Reuse unchanged layers so a Claude Code bump republishes only its own layer.
cache: true
cache-scope: claude-code

platforms: linux/amd64,linux/arm64
meta-images: ghcr.io/gatezh/devcontainers/claude-code
Expand All @@ -54,6 +57,8 @@ jobs:
push: true
target: sandbox
context: claude-code/.devcontainer
cache: true
cache-scope: claude-code-sandbox

platforms: linux/amd64,linux/arm64
meta-images: ghcr.io/gatezh/devcontainers/claude-code-sandbox
Expand Down
33 changes: 21 additions & 12 deletions claude-code/.devcontainer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,12 @@
# docker build --target sandbox -t claude-code:sandbox .
# ═══════════════════════════════════════════════════════════════════════════════

# Global so Renovate bumps one line; re-declared as the last step of each target.
# An ARG joins the cache key of every later RUN, so declaring it earlier would
# rebuild Chromium on each Claude Code release.
# renovate: datasource=npm depName=@anthropic-ai/claude-code
ARG CLAUDE_CODE_VERSION=2.1.287

# ═════════════════════════════════════════════════════════════════════════════
# Parallel download stages — BuildKit runs these concurrently
# ═════════════════════════════════════════════════════════════════════════════
Expand Down Expand Up @@ -203,17 +209,6 @@ USER node
ARG GH_STACK_VERSION=0.1.1
RUN gh extension install github/gh-stack --pin "v${GH_STACK_VERSION}"

# ── Claude Code CLI ───────────────────────────────────────────────────────────
# npm, not the native installer: the installer rate-limits (429) under parallel
# Docker builds. npm stays supported "for compatibility reasons" — this is that
# reason. https://code.claude.com/docs/en/getting-started#install-with-npm
#
# Installed as node so files land node-owned; a later chown -R would duplicate
# every file on overlayfs, adding hundreds of MB.
# renovate: datasource=npm depName=@anthropic-ai/claude-code
ARG CLAUDE_CODE_VERSION=2.1.287
RUN npm install -g @anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}

# ─── DEFAULT — full dev environment ───────────────────────────────────────────
FROM base AS default

Expand Down Expand Up @@ -253,12 +248,22 @@ ENV PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 \

# agent-browser: headless browser automation for AI agents.
# Uses the apt-installed chromium above (via AGENT_BROWSER_EXECUTABLE_PATH).
# Installed as the node user (see claude-code install above for rationale).
# Installed as the node user (see the Claude Code install below for rationale).
# Version pinned and kept up to date by Renovate (see .github/renovate.json5).
# renovate: datasource=npm depName=agent-browser
ARG AGENT_BROWSER_VERSION=0.38.1
RUN npm install -g agent-browser@${AGENT_BROWSER_VERSION}

# ── Claude Code CLI — last: it changes most often (see the global ARG) ───────
# npm, not the native installer: the installer rate-limits (429) under parallel
# Docker builds. npm stays supported "for compatibility reasons" — this is that
# reason. https://code.claude.com/docs/en/getting-started#install-with-npm
#
# Installed as node so files land node-owned; a later chown -R would duplicate
# every file on overlayfs, adding hundreds of MB.
ARG CLAUDE_CODE_VERSION
RUN npm install -g @anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}

LABEL org.opencontainers.image.source="https://github.com/gatezh/devcontainers" \
org.opencontainers.image.description="Claude Code devcontainer — full dev environment with agent-browser, Playwright, and passwordless sudo" \
org.opencontainers.image.licenses="MIT" \
Expand Down Expand Up @@ -301,6 +306,10 @@ RUN echo "node ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/node-nopasswd \
&& chmod 0440 /etc/sudoers.d/node-nopasswd
USER node

# ── Claude Code CLI — last (see the global ARG and the default target) ───────
ARG CLAUDE_CODE_VERSION
RUN npm install -g @anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}

LABEL org.opencontainers.image.source="https://github.com/gatezh/devcontainers" \
org.opencontainers.image.description="Claude Code devcontainer — network-restricted sandbox with firewall packages" \
org.opencontainers.image.licenses="MIT" \
Expand Down
Loading