mcp/Dockerfile at master · ethpandaops/mcp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
# ethpandaops MCP Server Dockerfile
#
# Build:
#   docker build -t mcp:latest .
#
# Run:
#   docker run -p 2480:2480 -v /var/run/docker.sock:/var/run/docker.sock mcp:latest

# =============================================================================
# Stage 1: Build libllama_go.so from source
# =============================================================================
FROM debian:bookworm-slim AS llama-builder

RUN apt-get update && apt-get install -y --no-install-recommends \
    git cmake g++ make ca-certificates && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /build

RUN git clone --depth 1 --recurse-submodules https://github.com/kelindar/search.git && \
    cd search && \
    mkdir build && cd build && \
    cmake -DBUILD_SHARED_LIBS=ON -DCMAKE_BUILD_TYPE=Release \
        -DGGML_NATIVE=OFF \
        -DCMAKE_CXX_COMPILER=g++ -DCMAKE_C_COMPILER=gcc .. && \
    cmake --build . --config Release && \
    cp /build/search/build/lib/libllama_go.so.1.0 /build/libllama_go.so

# =============================================================================
# Stage 2: Go builder
# =============================================================================
FROM golang:1.24-bookworm AS builder

RUN apt-get update && apt-get install -y --no-install-recommends \
    git ca-certificates curl && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /app

# Copy go mod files first for layer caching
COPY go.mod go.sum ./
RUN go mod download

# Copy source code
COPY cmd/ cmd/
COPY pkg/ pkg/
COPY extensions/ extensions/
COPY internal/ internal/
COPY runbooks/ runbooks/

# Build with version info (CGO_ENABLED=0 works because kelindar/search uses purego)
ARG VERSION=dev
ARG GIT_COMMIT=unknown
ARG BUILD_TIME=unknown

RUN CGO_ENABLED=0 GOOS=linux go build \
    -ldflags="-s -w -X github.com/ethpandaops/mcp/internal/version.Version=${VERSION} \
    -X github.com/ethpandaops/mcp/internal/version.GitCommit=${GIT_COMMIT} \
    -X github.com/ethpandaops/mcp/internal/version.BuildTime=${BUILD_TIME}" \
    -o mcp ./cmd/mcp

# Build proxy binary
RUN CGO_ENABLED=0 GOOS=linux go build \
    -ldflags="-s -w -X github.com/ethpandaops/mcp/internal/version.Version=${VERSION} \
    -X github.com/ethpandaops/mcp/internal/version.GitCommit=${GIT_COMMIT} \
    -X github.com/ethpandaops/mcp/internal/version.BuildTime=${BUILD_TIME}" \
    -o proxy ./cmd/proxy

# Download embedding model (same for all architectures)
RUN mkdir -p /assets && \
    curl -L -o /assets/MiniLM-L6-v2.Q8_0.gguf \
        https://huggingface.co/second-state/All-MiniLM-L6-v2-Embedding-GGUF/resolve/main/all-MiniLM-L6-v2-Q8_0.gguf

# Copy libllama_go.so built from source
COPY --from=llama-builder /build/libllama_go.so /assets/libllama_go.so

# =============================================================================
# Stage 3: Runtime
# =============================================================================
FROM debian:bookworm-slim

# Install runtime dependencies for Docker access, health checks, and llama.cpp
RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates docker.io netcat-openbsd libgomp1 && \
    rm -rf /var/lib/apt/lists/*

# Create non-root user
RUN useradd -m -s /bin/bash mcp && \
    usermod -aG docker mcp 2>/dev/null || true

WORKDIR /app

# Copy binaries from builder
COPY --from=builder /app/mcp /app/mcp
COPY --from=builder /app/proxy /app/proxy

# Copy embedding model and llama.cpp shared library
COPY --from=builder /assets/MiniLM-L6-v2.Q8_0.gguf /usr/share/mcp/
COPY --from=builder /assets/libllama_go.so /lib/

# Create directories
RUN mkdir -p /config /shared /output && \
    chown -R mcp:mcp /app /config /shared /output

# Expose ports
EXPOSE 2480 2490

# Health check - verify the MCP server port is accepting connections
HEALTHCHECK --interval=30s --timeout=5s --start-period=5s --retries=3 \
    CMD nc -z localhost 2480 || exit 1

# Default command - start MCP server with streamable-http transport
ENTRYPOINT ["/app/mcp"]
CMD ["serve", "--transport", "streamable-http"]