logo
docker.io/langgenius/dify-agent-local-sandbox:1.17.0
linux/amd64 docker.io 已验证 · Dify hekang1234 贡献

Dify Agent Local Sandbox镜像是Dify平台提供的智能体本地沙箱环境容器镜像,用于支持智能体在本地进行代码执行、工具调用等操作的隔离运行,确保智能体操作在安全可控的沙箱内开展,适用于Dify智能体的开发与测试场景。

4
浏览次数
540.19MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0
源镜像
docker.io/langgenius/dify-agent-local-sandbox:1.17.0
镜像ID
sha256:f93c797dcb5bc226484024463da1ae83c15c73082fd65537d43e570aed48b3fa
镜像 TAG
1.17.0
镜像大小
540.19MB
平台架构
linux/amd64
镜像源
docker.io
CMD
shellctl serve --listen 0.0.0.0:5004
启动入口
/usr/bin/tini -g --
工作目录
/home/dify
OS/平台
linux/amd64
镜像创建
2026-08-25T11:10:10.202028047Z
同步时间
2026-08-27 17:07
浏览量
4 次
贡献者
avatar hekang1234
🔌 开放端口 1
5004/tcp
⚙️ 环境变量 8
KeyValue
PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
LANG=C.UTF-8 1
GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305 2
PYTHON_VERSION=3.12.14 3
PYTHON_SHA256=5c8462af5790baf43a321a1559dbe0db06d1be4300fb85fb53c40060668e548a 4
PYTHONDONTWRITEBYTECODE=1 5
PYTHONUNBUFFERED=1 6
PIP_NO_CACHE_DIR=1 7
🏷️ 镜像标签 8
KeyValue
2026-08-25T11:14:30.701Z org.opencontainers.image.created
Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack. org.opencontainers.image.description
NOASSERTION org.opencontainers.image.licenses
09a855dcef24c0edc7431c46c0cfaa494481daf5 org.opencontainers.image.revision
https://github.com/langgenius/dify org.opencontainers.image.source
dify org.opencontainers.image.title
https://github.com/langgenius/dify org.opencontainers.image.url
1.17.0 org.opencontainers.image.version
🛡️ 镜像安全扫描
debian 12.15 Trivy 2026-08-27 17:07 查看完整报告
168
低危 LOW
176
中危 MEDIUM
106
高危 HIGH
19
严重 CRITICAL
受影响目标 (8)
docker.io/langgenius/dify-agent-local-sandbox:1.17.0 (debian 12.15) debian Node.js node-pkg Python python-pkg usr/local/bin/dify-agent gobinary usr/local/bin/shellctl gobinary usr/local/bin/shellctl-runner gobinary usr/local/bin/shellctl-runner-exit gobinary usr/local/bin/shellctl-sanitize-pty gobinary

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0  docker.io/langgenius/dify-agent-local-sandbox:1.17.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0  docker.io/langgenius/dify-agent-local-sandbox:1.17.0

Shell快速替换命令

sed -i 's#langgenius/dify-agent-local-sandbox:1.17.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0  docker.io/langgenius/dify-agent-local-sandbox:1.17.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0  docker.io/langgenius/dify-agent-local-sandbox:1.17.0'

镜像构建历史


# 2026-08-25 19:10:10  0.00B 设置默认要执行的命令
CMD ["shellctl" "serve" "--listen" "0.0.0.0:5004"]
                        
# 2026-08-25 19:10:10  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/tini" "-g" "--"]
                        
# 2026-08-25 19:10:10  0.00B 声明容器运行时监听的端口
EXPOSE map[5004/tcp:{}]
                        
# 2026-08-25 19:10:10  0.00B 设置工作目录为/home/dify
WORKDIR /home/dify
                        
# 2026-08-25 19:10:10  0.00B 指定运行容器时使用的用户
USER dify
                        
# 2026-08-25 19:10:10  8.94KB 执行命令并创建新的镜像层
RUN |3 NODE_VERSION=22.22.1 PNPM_VERSION=11.9.0 UV_VERSION=0.8.9 /bin/sh -c useradd --create-home --shell /bin/sh dify     && mkdir -p /workspace     && chown dify:dify /home     && chown -R dify:dify /home/dify /workspace # buildkit
                        
# 2026-08-25 19:10:09  10.16MB 复制新文件或目录到容器中
COPY /bin/dify-agent /usr/local/bin/dify-agent # buildkit
                        
# 2026-08-25 19:10:09  3.69MB 复制新文件或目录到容器中
COPY /bin/shellctl-runner /usr/local/bin/shellctl-runner # buildkit
                        
# 2026-08-25 19:10:09  9.22MB 复制新文件或目录到容器中
COPY /bin/shellctl-runner-exit /usr/local/bin/shellctl-runner-exit # buildkit
                        
# 2026-08-25 19:10:09  2.54MB 复制新文件或目录到容器中
COPY /bin/shellctl-sanitize-pty /usr/local/bin/shellctl-sanitize-pty # buildkit
                        
# 2026-08-25 19:10:09  16.02MB 复制新文件或目录到容器中
COPY /bin/shellctl /usr/local/bin/shellctl # buildkit
                        
# 2026-08-25 19:10:01  47.69MB 执行命令并创建新的镜像层
RUN |3 NODE_VERSION=22.22.1 PNPM_VERSION=11.9.0 UV_VERSION=0.8.9 /bin/sh -c python -m pip install --no-cache-dir "uv==${UV_VERSION}" # buildkit
                        
# 2026-08-25 19:09:58  326.50MB 执行命令并创建新的镜像层
RUN |3 NODE_VERSION=22.22.1 PNPM_VERSION=11.9.0 UV_VERSION=0.8.9 /bin/sh -c apt-get update     && apt-get install -y --no-install-recommends         bash         ca-certificates         curl         file         git         jq         less         openssh-client         procps         ripgrep         tini         tmux         unzip         xz-utils         zip     && node_arch="$(dpkg --print-architecture)"     && case "${node_arch}" in         amd64) node_arch="x64" ;;         arm64) node_arch="arm64" ;;         *) echo "Unsupported Node.js architecture: ${node_arch}" >&2; exit 1 ;;     esac     && node_dist="node-v${NODE_VERSION}-linux-${node_arch}"     && curl -fsSLO "https://nodejs.org/dist/v${NODE_VERSION}/SHASUMS256.txt"     && curl -fsSLO "https://nodejs.org/dist/v${NODE_VERSION}/${node_dist}.tar.xz"     && grep " ${node_dist}.tar.xz\$" SHASUMS256.txt | sha256sum -c -     && tar -xJf "${node_dist}.tar.xz" -C /usr/local --strip-components=1     && rm -f SHASUMS256.txt "${node_dist}.tar.xz"     && npm install --global "pnpm@${PNPM_VERSION}"     && npm cache clean --force     && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-08-25 19:09:58  0.00B 设置环境变量 PYTHONDONTWRITEBYTECODE PYTHONUNBUFFERED PIP_NO_CACHE_DIR
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PIP_NO_CACHE_DIR=1
                        
# 2026-08-25 19:09:58  0.00B 定义构建参数
ARG UV_VERSION=0.8.9
                        
# 2026-08-25 19:09:58  0.00B 定义构建参数
ARG PNPM_VERSION=11.9.0
                        
# 2026-08-25 19:09:58  0.00B 定义构建参数
ARG NODE_VERSION=22.22.1
                        
# 2026-08-25 09:21:02  0.00B 设置默认要执行的命令
CMD ["python3"]
                        
# 2026-08-25 09:21:02  36.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	for src in idle3 pip3 pydoc3 python3 python3-config; do 		dst="$(echo "$src" | tr -d 3)"; 		[ -s "/usr/local/bin/$src" ]; 		[ ! -e "/usr/local/bin/$dst" ]; 		ln -svT "$src" "/usr/local/bin/$dst"; 	done # buildkit
                        
# 2026-08-25 09:21:02  40.24MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 		savedAptMark="$(apt-mark showmanual)"; 	apt-get update; 	apt-get install -y --no-install-recommends 		dpkg-dev 		gcc 		gnupg 		libbluetooth-dev 		libbz2-dev 		libc6-dev 		libdb-dev 		libffi-dev 		libgdbm-dev 		liblzma-dev 		libncursesw5-dev 		libreadline-dev 		libsqlite3-dev 		libssl-dev 		make 		tk-dev 		uuid-dev 		wget 		xz-utils 		zlib1g-dev 	; 		wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; 	echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; 	wget -O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc"; 	GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; 	gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY"; 	gpg --batch --verify python.tar.xz.asc python.tar.xz; 	gpgconf --kill all; 	rm -rf "$GNUPGHOME" python.tar.xz.asc; 	mkdir -p /usr/src/python; 	tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; 	rm python.tar.xz; 		cd /usr/src/python; 	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; 	./configure 		--build="$gnuArch" 		--enable-loadable-sqlite-extensions 		--enable-optimizations 		--enable-option-checking=fatal 		--enable-shared 		$(test "${gnuArch%%-*}" != 'riscv64' && echo '--with-lto') 		--with-ensurepip 	; 	nproc="$(nproc)"; 	EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; 	LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"; 	LDFLAGS="${LDFLAGS:-} -Wl,--strip-all"; 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; 	case "$arch" in 		amd64|arm64) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"; 			;; 		i386) 			;; 		*) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer"; 			;; 	esac; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-}" 	; 	rm python; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\$\$ORIGIN/../lib'" 		python 	; 	make install; 		cd /; 	rm -rf /usr/src/python; 		find /usr/local -depth 		\( 			\( -type d -a \( -name test -o -name tests -o -name idle_test \) \) 			-o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) 		\) -exec rm -rf '{}' + 	; 		ldconfig; 		apt-mark auto '.*' > /dev/null; 	apt-mark manual $savedAptMark; 	find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' 		| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' 		| sort -u 		| xargs -rt dpkg-query --search 		| awk 'sub(":$", "", $1) { print $1 }' 		| sort -u 		| xargs -r apt-mark manual 	; 	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; 	rm -rf /var/lib/apt/lists/*; 		export PYTHONDONTWRITEBYTECODE=1; 	python3 --version; 	pip3 --version # buildkit
                        
# 2026-08-25 09:11:46  0.00B 设置环境变量 PYTHON_SHA256
ENV PYTHON_SHA256=5c8462af5790baf43a321a1559dbe0db06d1be4300fb85fb53c40060668e548a
                        
# 2026-08-25 09:11:46  0.00B 设置环境变量 PYTHON_VERSION
ENV PYTHON_VERSION=3.12.14
                        
# 2026-08-25 09:11:46  0.00B 设置环境变量 GPG_KEY
ENV GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
                        
# 2026-08-25 09:11:46  9.28MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		ca-certificates 		netbase 		tzdata 	; 	rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-08-25 09:11:46  0.00B 设置环境变量 LANG
ENV LANG=C.UTF-8
                        
# 2026-08-25 09:11:46  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-08-24 08:00:00  74.83MB 
# debian.sh --arch 'amd64' out/ 'bookworm' '@1787529600'
                        
                    

镜像信息

{
    "Id": "sha256:f93c797dcb5bc226484024463da1ae83c15c73082fd65537d43e570aed48b3fa",
    "RepoTags": [
        "langgenius/dify-agent-local-sandbox:1.17.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0"
    ],
    "RepoDigests": [
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox@sha256:2ecd877d7aa607fdb9e343a52df23d9a7fd6e9fb13984e1383f58e57174ddf46"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-08-25T11:10:10.202028047Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "dify",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "5004/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "LANG=C.UTF-8",
            "GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305",
            "PYTHON_VERSION=3.12.14",
            "PYTHON_SHA256=5c8462af5790baf43a321a1559dbe0db06d1be4300fb85fb53c40060668e548a",
            "PYTHONDONTWRITEBYTECODE=1",
            "PYTHONUNBUFFERED=1",
            "PIP_NO_CACHE_DIR=1"
        ],
        "Cmd": [
            "shellctl",
            "serve",
            "--listen",
            "0.0.0.0:5004"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/home/dify",
        "Entrypoint": [
            "/usr/bin/tini",
            "-g",
            "--"
        ],
        "OnBuild": null,
        "Labels": {
            "org.opencontainers.image.created": "2026-08-25T11:14:30.701Z",
            "org.opencontainers.image.description": "Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack.",
            "org.opencontainers.image.licenses": "NOASSERTION",
            "org.opencontainers.image.revision": "09a855dcef24c0edc7431c46c0cfaa494481daf5",
            "org.opencontainers.image.source": "https://github.com/langgenius/dify",
            "org.opencontainers.image.title": "dify",
            "org.opencontainers.image.url": "https://github.com/langgenius/dify",
            "org.opencontainers.image.version": "1.17.0"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 540189464,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/6d8d57a504ca65a73696c078e85952882d7c8d32fe052a6f95c4e8fce458791f/diff:/var/lib/docker/overlay2/aeb7e0345d4ef7564aa988f58ce57e6f5f5329a537239cf664171564b2d8ab66/diff:/var/lib/docker/overlay2/4920154d4a75f8cddc3fc2031bcb8a4c46a6c67246c9236122bb91a5375f4508/diff:/var/lib/docker/overlay2/ca29aba7991cbe601eb2abf0d81c3c48d450899317e705e3cbd52df9bc77cdf6/diff:/var/lib/docker/overlay2/bf66f5d523183206f75a122e2f4ebc63114198d3c72a4784f4f6cc0ee2bb02a0/diff:/var/lib/docker/overlay2/23c0ebaf525e00cc1df9aab010a59612b7e7403a4dab256a4c54cb270fddb4d5/diff:/var/lib/docker/overlay2/4ba7f32a06c4a76d1a6a451ff7be2145804c2bc43e1fbfac66380e683cd9b30b/diff:/var/lib/docker/overlay2/9a7b0039d2566c1d6dfd92c30e9bdeccaeb958c1936422eea2125d7649ee24c5/diff:/var/lib/docker/overlay2/6b6502e5388adc4f29904175849a4bfbca75446c8b8567dda00565e9396093ca/diff:/var/lib/docker/overlay2/a4d2f1bc6c1e672fa0d607d8caf8dc1015d3234bb9734c11b8b553f22a176dff/diff:/var/lib/docker/overlay2/61ec91b82c1c2ca5de930e3debef7b56d02deecccb3a060781a33d7a98c53b5d/diff:/var/lib/docker/overlay2/4fb6c997901baaa25dd38086f0725b76f93a41f9b69f12b775f5ea6819ef9344/diff",
            "MergedDir": "/var/lib/docker/overlay2/f5a70aadd26c3bb7cc63210d79535d45d43b699fbda824ffc64c93f0ad850cd3/merged",
            "UpperDir": "/var/lib/docker/overlay2/f5a70aadd26c3bb7cc63210d79535d45d43b699fbda824ffc64c93f0ad850cd3/diff",
            "WorkDir": "/var/lib/docker/overlay2/f5a70aadd26c3bb7cc63210d79535d45d43b699fbda824ffc64c93f0ad850cd3/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:1d69a5fd31932841d7825ef4780c06f008eea65aaa9f3110fe09d5832ed5c7d8",
            "sha256:23a322e58bac2c848cf3accce5a2ae02847433e8f014f731c82cb7d0b1fe84bf",
            "sha256:835f4630cfa74f4bd2c6abd748da53d5b1319009947839b5c78fe198075bb7eb",
            "sha256:98bdd8b9915aeab4c23a1110f1ed14b3d9bb2869800e8af8ef238d7b9ebbf55e",
            "sha256:a723d5d4c2df7cf048158635ed364fa1784f85341f48189b8fd75ffdac954dc8",
            "sha256:d8bf0258b032038bd0a82ff9ea71117f15bf19275c432ae8b635e20296d531a1",
            "sha256:f32fa05a2abc2af7576bdc434aa9b8d69c69cef8c0867513ef4be67b854da948",
            "sha256:361e1588cd32ebd7e8a759d5677daabf6663a986acc4244df951fe35e62f0393",
            "sha256:761e9a41f9c679a0cccacb6ab01cea83b49ded8bc38fb0e137aeed9b7bcfbbac",
            "sha256:b95b43261079a6ca1a60350a283d25b1cc1aa6e51fae2c09ff08245d127b4b9b",
            "sha256:a62638335fb4dabc8f9823e2802fd5f58d392abcc125ae238298d319355ec5e6",
            "sha256:421a273d9f6a80749d8513482396c9c588eee18a53799a14bf1ab938dbe7ac55",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-08-27T17:07:39.270518787+08:00"
    }
}

更多版本

docker.io/langgenius/dify-agent-local-sandbox:1.16.0-rc1

linux/amd64 docker.io563.45MB2026-07-14 18:48
132

docker.io/langgenius/dify-agent-local-sandbox:1.16.0

linux/arm64 docker.io564.66MB2026-07-20 11:18
85

docker.io/langgenius/dify-agent-local-sandbox:1.16.0

linux/amd64 docker.io546.75MB2026-07-20 14:40
123

docker.io/langgenius/dify-agent-local-sandbox:1.16.1

linux/arm64 docker.io564.66MB2026-07-28 16:32
104

docker.io/langgenius/dify-agent-local-sandbox:1.16.1

linux/amd64 docker.io546.75MB2026-08-04 17:38
140

docker.io/langgenius/dify-agent-local-sandbox:1.17.0

linux/arm64 docker.io558.37MB2026-08-27 15:06
11

docker.io/langgenius/dify-agent-local-sandbox:1.17.0

linux/amd64 docker.io540.19MB2026-08-27 17:07
3
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×