[build] bump image to v2.5.0 with Codex and Claude CLIs

Author: jamesnulliu

AGENTS.md

@@ -0,0 +1,22 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+This repository is a small Docker image build system. The root contains `Dockerfile.cpu` and `Dockerfile.cuda`, which define the CPU and CUDA variants. Shared shell entrypoints, environment setup, and container dotfiles live in `data/`. Operational wrappers live in `scripts/`: `build.sh`, `run.sh`, `exec.sh`, and `image-configs.sh`. Release automation is in `.github/workflows/cd-docker-build-push.yml`.
+
+## Build, Test, and Development Commands
+Use the scripts rather than calling long `docker` commands by hand.
+
+- `bash ./scripts/build.sh Dockerfile.cpu`: build the CPU image and print its tag.
+- `bash ./scripts/build.sh Dockerfile.cuda`: build the CUDA image using the version values from `scripts/image-configs.sh`.
+- `bash ./scripts/run.sh -i jamesnulliu/deeplearning:v2.4.7-cuda12.8.0 --tmp`: start an interactive temporary container.
+- `bash ./scripts/run.sh -i <image> -c devbox`: start a named long-lived container.
+- `bash ./scripts/exec.sh devbox`: open a shell in an existing container.
+
+## Coding Style & Naming Conventions
+Keep Dockerfiles and shell scripts POSIX/Bash-friendly, with one logical step per block and consistent four-space indentation for wrapped commands. Prefer uppercase variable names for exported build configuration (`IMAGE_VERSION`, `CUDA_VERSION`) and lowercase filenames for scripts and data assets. When you change a version, update `scripts/image-configs.sh` first so tags stay consistent.
+
+## Testing Guidelines
+There is no automated unit test suite in this repository today. Validation is build-and-smoke-test based: rebuild the affected Dockerfile, start a container, and verify entrypoint behavior plus any installed toolchain changes. For example, after editing `data/env_setup.sh`, run the image and confirm the shell starts cleanly.
+
+## Commit & Pull Request Guidelines
+Recent history uses short bracketed prefixes such as `[update]`, `[fix]`, and version-scoped subjects like `[UPDATE][v2.4.5] ...`. Follow that pattern and keep the subject imperative. PRs should state which image variant changed, summarize package/toolchain impact, include the exact build command used for verification, and note any release-tag implications. Do not commit credentials; Docker Hub publishing is handled by GitHub Actions secrets on tagged pushes (`v*`).

Dockerfile.cpu

@@ -30,7 +30,7 @@ SHELL ["/bin/bash", "-c"]
 RUN apt-get update && apt-get upgrade -y && \
     apt-get install -y \
     apt-utils lsb-release software-properties-common gnupg git acl sed\
-    vim-gtk3 wget p7zip-full ninja-build curl jq pkg-config ssh ccache \
+    vim-gtk3 wget p7zip-full ninja-build curl jq nodejs npm pkg-config ssh ccache \
     build-essential gdb htop tmux kmod \
     libssl-dev && \
     echo "ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true" \
@@ -68,6 +68,10 @@ RUN wget -O /tmp/llvm.sh https://apt.llvm.org/llvm.sh && \
 # Install Rust
 RUN curl https://sh.rustup.rs -sSf | sh -s -- -y
 
+# Install AI coding CLIs
+RUN npm install -g @openai/codex @anthropic-ai/claude-code \
+    && npm cache clean --force
+
 # Config files
 COPY data/vimrc.local /etc/vim/vimrc.local
 COPY data/env_setup.sh ${ENV_SETUP_FILE}

Dockerfile.cuda

@@ -29,7 +29,7 @@ SHELL ["/bin/bash", "-c"]
 RUN apt-get update && apt-get upgrade -y && \
     apt-get install -y \
     apt-utils lsb-release software-properties-common gnupg git acl sed \
-    vim-gtk3 wget p7zip-full ninja-build curl jq pkg-config ssh ccache \
+    vim-gtk3 wget p7zip-full ninja-build curl jq nodejs npm pkg-config ssh ccache \
     build-essential gdb htop tmux kmod \
     libssl-dev && \
     echo "ttf-mscorefonts-installer msttcorefonts/accepted-mscorefonts-eula select true" \
@@ -67,6 +67,10 @@ RUN wget -O /tmp/llvm.sh https://apt.llvm.org/llvm.sh && \
 # Install Rust
 RUN curl https://sh.rustup.rs -sSf | sh -s -- -y
 
+# Install AI coding CLIs
+RUN npm install -g @openai/codex @anthropic-ai/claude-code \
+    && npm cache clean --force
+
 # Config files
 COPY data/vimrc.local /etc/vim/vimrc.local
 COPY data/env_setup.sh ${ENV_SETUP_FILE}

scripts/image-configs.sh

@@ -1,4 +1,4 @@
-IMAGE_VERSION=2.4.7
+IMAGE_VERSION=2.5.0
 CUDA_VERSION=12.8.0
 UBUNTU_VERSION=24.04
 LLVM_VERSION=20

scripts/run.sh

@@ -4,6 +4,8 @@ set -e
 IMAGE_NAME=""
 CONTAINER_NAME="tmp"
 TMP="false"
+PROXY_URL=""
+SYS_ADMIN="false"
 
 function print_help() {
     echo "Usage: $0 [options]"
@@ -13,6 +15,8 @@ function print_help() {
     echo "  -c, --container-name   Name of the Docker container (default: tmp)"
     echo "  --tmp                  Create a temporary container and attach to it;"
     echo "                         The container would be removed after exit"
+    echo "  --proxy <url>          Set http_proxy, https_proxy, and all_proxy"
+    echo "  --sys-admin              Add SYS_ADMIN capability to the container"
 }
 
 while [[ $# -gt 0 ]]; do
@@ -23,6 +27,10 @@ while [[ $# -gt 0 ]]; do
             CONTAINER_NAME="$2"; shift ;;
         --tmp)
             TMP="true" ;;
+        --proxy)
+            PROXY_URL="$2"; shift ;;
+        --sys-admin)
+            SYS_ADMIN="true" ;;
         -h|--help)
             print_help; exit 0 ;;
         *)
@@ -32,42 +40,46 @@ while [[ $# -gt 0 ]]; do
     shift
 done
 
-
 if [ -z "$IMAGE_NAME" ]; then
     echo "[run.sh] ERROR: Image name is required. Use -i or --image-name to specify it."
     exit 1
 fi
 
-if [ "$TMP" = "true" ]; then
-    docker run -it --rm \
-        --name $CONTAINER_NAME \
-        --gpus all \
-        --network host \
-        --shm-size 20G \
-        --hostname $CONTAINER_NAME \
-        -v /home:/home \
-        $IMAGE_NAME /bin/bash
+if [ -n "$PROXY_URL" ]; then
+    PROXY_ARGS=(
+        -e "http_proxy=$PROXY_URL"
+        -e "https_proxy=$PROXY_URL"
+        -e "all_proxy=$PROXY_URL"
+    )
+else
+    PROXY_ARGS=()
+fi
+
+if [ "$SYS_ADMIN" = "true" ]; then
+    SYS_ADMIN_ARGS=(--cap-add SYS_ADMIN)
 else
-    if [[ "$IMAGE_NAME" == *"cuda"* ]]; then
-        docker run -td \
-            --name $CONTAINER_NAME \
-            --gpus all \
-            --network host \
-            --shm-size 20G \
-            --hostname $CONTAINER_NAME \
-            -v /home:/home \
-            $IMAGE_NAME
-    else
-        docker run -td \
-            --name $CONTAINER_NAME \
-            --network host \
-            --shm-size 20G \
-            --hostname $CONTAINER_NAME \
-            -v /home:/home \
-            $IMAGE_NAME
-    fi
-    docker cp $HOME/.ssh $CONTAINER_NAME:/root/
-    docker start $CONTAINER_NAME
-    docker exec $CONTAINER_NAME chown -R root:root /root/.ssh
+    SYS_ADMIN_ARGS=()
+fi
+
+DOCKER_RUN_ARGS=(
+    --name "$CONTAINER_NAME"
+    --network host
+    --shm-size 20G
+    --hostname "$CONTAINER_NAME"
+    -v /home:/home
+)
+
+if [ "$TMP" = "true" ] || [[ "$IMAGE_NAME" == *"cuda"* ]]; then
+    DOCKER_RUN_ARGS+=(--gpus all)
 fi
 
+DOCKER_RUN_ARGS+=("${PROXY_ARGS[@]}" "${SYS_ADMIN_ARGS[@]}")
+
+if [ "$TMP" = "true" ]; then
+    docker run -it --rm "${DOCKER_RUN_ARGS[@]}" "$IMAGE_NAME" /bin/bash
+else
+    docker run -td "${DOCKER_RUN_ARGS[@]}" "$IMAGE_NAME"
+    docker cp "$HOME/.ssh" "$CONTAINER_NAME:/root/"
+    docker start "$CONTAINER_NAME"
+    docker exec "$CONTAINER_NAME" chown -R root:root /root/.ssh
+fi