sbx/pi-image repository overview

⁠sbx/pi-image

Base image for the pi agent kit for Docker Sandboxes⁠.

⁠Contents

Built on docker.io/sbx/shell-docker-image: the standard sandbox tool chain plus a Docker engine, requesting Docker-in-Docker via com.docker.sandboxes.start-docker=true. On top of that:

• @earendil-works/pi-coding-agent⁠, installed globally at the latest upstream release (rebuilt nightly), plus a /usr/local/bin/pi symlink
• fd-find (apt), which backs pi's find tool, plus a /usr/local/bin/fd symlink for the canonical name — without it pi downloads a binary from GitHub releases on first use, which a locked-down sandbox blocks
• no ripgrep layer — pi probes the system for rg just as it does for fd, and the base image already ships it
• no Node layer: the base image already ships Node 22.22.1, and pi requires >= 22.19.0

The npm global prefix stays owned by agent, so pi install and pi update --self work inside the sandbox.

Runs as the non-root agent user, with CMD ["pi"].

⁠Kit

docker.io/sbx/pi-kit⁠