logo
docker.io/langgenius/dify-agent-local-sandbox:1.17.0
linux/arm64 docker.io 已验证 · Dify 请确认架构匹配

Dify Agent Local Sandbox镜像是Dify平台提供的智能体本地沙箱环境容器镜像,用于支持智能体在本地进行代码执行、工具调用等操作的隔离运行,确保智能体操作在安全可控的沙箱内开展,适用于Dify智能体的开发与测试场景。

12
浏览次数
558.37MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64
源镜像
docker.io/langgenius/dify-agent-local-sandbox:1.17.0
镜像ID
sha256:928bc1aa0c3d1b294edf4e49b479c3e58f5992ce8c49f30151786f5d0349ba0d
镜像 TAG
1.17.0-linuxarm64
镜像大小
558.37MB
平台架构
linux/arm64
镜像源
docker.io
CMD
shellctl serve --listen 0.0.0.0:5004
启动入口
/usr/bin/tini -g --
工作目录
/home/dify
OS/平台
linux/arm64
镜像创建
2026-08-25T05:16:03.405923482Z
同步时间
2026-08-27 15:06
浏览量
12 次
贡献者
🔌 开放端口 1
5004/tcp
⚙️ 环境变量 8
KeyValue
PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
LANG=C.UTF-8 1
GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305 2
PYTHON_VERSION=3.12.14 3
PYTHON_SHA256=5c8462af5790baf43a321a1559dbe0db06d1be4300fb85fb53c40060668e548a 4
PYTHONDONTWRITEBYTECODE=1 5
PYTHONUNBUFFERED=1 6
PIP_NO_CACHE_DIR=1 7
🏷️ 镜像标签 8
KeyValue
2026-08-25T11:14:26.276Z org.opencontainers.image.created
Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack. org.opencontainers.image.description
NOASSERTION org.opencontainers.image.licenses
09a855dcef24c0edc7431c46c0cfaa494481daf5 org.opencontainers.image.revision
https://github.com/langgenius/dify org.opencontainers.image.source
dify org.opencontainers.image.title
https://github.com/langgenius/dify org.opencontainers.image.url
1.17.0 org.opencontainers.image.version
🛡️ 镜像安全扫描
debian 12.15 Trivy 2026-08-27 15:06 查看完整报告
168
低危 LOW
174
中危 MEDIUM
106
高危 HIGH
19
严重 CRITICAL
受影响目标 (8)
docker.io/langgenius/dify-agent-local-sandbox:1.17.0 (debian 12.15) debian Node.js node-pkg Python python-pkg usr/local/bin/dify-agent gobinary usr/local/bin/shellctl gobinary usr/local/bin/shellctl-runner gobinary usr/local/bin/shellctl-runner-exit gobinary usr/local/bin/shellctl-sanitize-pty gobinary

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64  docker.io/langgenius/dify-agent-local-sandbox:1.17.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64  docker.io/langgenius/dify-agent-local-sandbox:1.17.0

Shell快速替换命令

sed -i 's#langgenius/dify-agent-local-sandbox:1.17.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64  docker.io/langgenius/dify-agent-local-sandbox:1.17.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64  docker.io/langgenius/dify-agent-local-sandbox:1.17.0'

镜像构建历史


# 2026-08-25 13:16:03  0.00B 设置默认要执行的命令
CMD ["shellctl" "serve" "--listen" "0.0.0.0:5004"]
                        
# 2026-08-25 13:16:03  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["/usr/bin/tini" "-g" "--"]
                        
# 2026-08-25 13:16:03  0.00B 声明容器运行时监听的端口
EXPOSE map[5004/tcp:{}]
                        
# 2026-08-25 13:16:03  0.00B 设置工作目录为/home/dify
WORKDIR /home/dify
                        
# 2026-08-25 13:16:03  0.00B 指定运行容器时使用的用户
USER dify
                        
# 2026-08-25 13:16:03  8.94KB 执行命令并创建新的镜像层
RUN |3 NODE_VERSION=22.22.1 PNPM_VERSION=11.9.0 UV_VERSION=0.8.9 /bin/sh -c useradd --create-home --shell /bin/sh dify     && mkdir -p /workspace     && chown dify:dify /home     && chown -R dify:dify /home/dify /workspace # buildkit
                        
# 2026-08-25 13:16:02  9.44MB 复制新文件或目录到容器中
COPY /bin/dify-agent /usr/local/bin/dify-agent # buildkit
                        
# 2026-08-25 13:16:02  3.50MB 复制新文件或目录到容器中
COPY /bin/shellctl-runner /usr/local/bin/shellctl-runner # buildkit
                        
# 2026-08-25 13:16:02  8.97MB 复制新文件或目录到容器中
COPY /bin/shellctl-runner-exit /usr/local/bin/shellctl-runner-exit # buildkit
                        
# 2026-08-25 13:16:02  2.51MB 复制新文件或目录到容器中
COPY /bin/shellctl-sanitize-pty /usr/local/bin/shellctl-sanitize-pty # buildkit
                        
# 2026-08-25 13:16:01  15.12MB 复制新文件或目录到容器中
COPY /bin/shellctl /usr/local/bin/shellctl # buildkit
                        
# 2026-08-25 13:16:01  40.78MB 执行命令并创建新的镜像层
RUN |3 NODE_VERSION=22.22.1 PNPM_VERSION=11.9.0 UV_VERSION=0.8.9 /bin/sh -c python -m pip install --no-cache-dir "uv==${UV_VERSION}" # buildkit
                        
# 2026-08-25 13:15:59  327.93MB 执行命令并创建新的镜像层
RUN |3 NODE_VERSION=22.22.1 PNPM_VERSION=11.9.0 UV_VERSION=0.8.9 /bin/sh -c apt-get update     && apt-get install -y --no-install-recommends         bash         ca-certificates         curl         file         git         jq         less         openssh-client         procps         ripgrep         tini         tmux         unzip         xz-utils         zip     && node_arch="$(dpkg --print-architecture)"     && case "${node_arch}" in         amd64) node_arch="x64" ;;         arm64) node_arch="arm64" ;;         *) echo "Unsupported Node.js architecture: ${node_arch}" >&2; exit 1 ;;     esac     && node_dist="node-v${NODE_VERSION}-linux-${node_arch}"     && curl -fsSLO "https://nodejs.org/dist/v${NODE_VERSION}/SHASUMS256.txt"     && curl -fsSLO "https://nodejs.org/dist/v${NODE_VERSION}/${node_dist}.tar.xz"     && grep " ${node_dist}.tar.xz\$" SHASUMS256.txt | sha256sum -c -     && tar -xJf "${node_dist}.tar.xz" -C /usr/local --strip-components=1     && rm -f SHASUMS256.txt "${node_dist}.tar.xz"     && npm install --global "pnpm@${PNPM_VERSION}"     && npm cache clean --force     && rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-08-25 13:15:59  0.00B 设置环境变量 PYTHONDONTWRITEBYTECODE PYTHONUNBUFFERED PIP_NO_CACHE_DIR
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1 PIP_NO_CACHE_DIR=1
                        
# 2026-08-25 13:15:59  0.00B 定义构建参数
ARG UV_VERSION=0.8.9
                        
# 2026-08-25 13:15:59  0.00B 定义构建参数
ARG PNPM_VERSION=11.9.0
                        
# 2026-08-25 13:15:59  0.00B 定义构建参数
ARG NODE_VERSION=22.22.1
                        
# 2026-08-25 09:26:07  0.00B 设置默认要执行的命令
CMD ["python3"]
                        
# 2026-08-25 09:26:07  36.00B 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	for src in idle3 pip3 pydoc3 python3 python3-config; do 		dst="$(echo "$src" | tr -d 3)"; 		[ -s "/usr/local/bin/$src" ]; 		[ ! -e "/usr/local/bin/$dst" ]; 		ln -svT "$src" "/usr/local/bin/$dst"; 	done # buildkit
                        
# 2026-08-25 09:26:07  43.62MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 		savedAptMark="$(apt-mark showmanual)"; 	apt-get update; 	apt-get install -y --no-install-recommends 		dpkg-dev 		gcc 		gnupg 		libbluetooth-dev 		libbz2-dev 		libc6-dev 		libdb-dev 		libffi-dev 		libgdbm-dev 		liblzma-dev 		libncursesw5-dev 		libreadline-dev 		libsqlite3-dev 		libssl-dev 		make 		tk-dev 		uuid-dev 		wget 		xz-utils 		zlib1g-dev 	; 		wget -O python.tar.xz "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz"; 	echo "$PYTHON_SHA256 *python.tar.xz" | sha256sum -c -; 	wget -O python.tar.xz.asc "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc"; 	GNUPGHOME="$(mktemp -d)"; export GNUPGHOME; 	gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$GPG_KEY"; 	gpg --batch --verify python.tar.xz.asc python.tar.xz; 	gpgconf --kill all; 	rm -rf "$GNUPGHOME" python.tar.xz.asc; 	mkdir -p /usr/src/python; 	tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; 	rm python.tar.xz; 		cd /usr/src/python; 	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; 	./configure 		--build="$gnuArch" 		--enable-loadable-sqlite-extensions 		--enable-optimizations 		--enable-option-checking=fatal 		--enable-shared 		$(test "${gnuArch%%-*}" != 'riscv64' && echo '--with-lto') 		--with-ensurepip 	; 	nproc="$(nproc)"; 	EXTRA_CFLAGS="$(dpkg-buildflags --get CFLAGS)"; 	LDFLAGS="$(dpkg-buildflags --get LDFLAGS)"; 	LDFLAGS="${LDFLAGS:-} -Wl,--strip-all"; 	arch="$(dpkg --print-architecture)"; arch="${arch##*-}"; 	case "$arch" in 		amd64|arm64) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer -mno-omit-leaf-frame-pointer"; 			;; 		i386) 			;; 		*) 			EXTRA_CFLAGS="${EXTRA_CFLAGS:-} -fno-omit-frame-pointer"; 			;; 	esac; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-}" 	; 	rm python; 	make -j "$nproc" 		"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}" 		"LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\$\$ORIGIN/../lib'" 		python 	; 	make install; 		cd /; 	rm -rf /usr/src/python; 		find /usr/local -depth 		\( 			\( -type d -a \( -name test -o -name tests -o -name idle_test \) \) 			-o \( -type f -a \( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \) \) 		\) -exec rm -rf '{}' + 	; 		ldconfig; 		apt-mark auto '.*' > /dev/null; 	apt-mark manual $savedAptMark; 	find /usr/local -type f -executable -not \( -name '*tkinter*' \) -exec ldd '{}' ';' 		| awk '/=>/ { so = $(NF-1); if (index(so, "/usr/local/") == 1) { next }; gsub("^/(usr/)?", "", so); printf "*%s\n", so }' 		| sort -u 		| xargs -rt dpkg-query --search 		| awk 'sub(":$", "", $1) { print $1 }' 		| sort -u 		| xargs -r apt-mark manual 	; 	apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; 	rm -rf /var/lib/apt/lists/*; 		export PYTHONDONTWRITEBYTECODE=1; 	python3 --version; 	pip3 --version # buildkit
                        
# 2026-08-25 09:14:22  0.00B 设置环境变量 PYTHON_SHA256
ENV PYTHON_SHA256=5c8462af5790baf43a321a1559dbe0db06d1be4300fb85fb53c40060668e548a
                        
# 2026-08-25 09:14:22  0.00B 设置环境变量 PYTHON_VERSION
ENV PYTHON_VERSION=3.12.14
                        
# 2026-08-25 09:14:22  0.00B 设置环境变量 GPG_KEY
ENV GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305
                        
# 2026-08-25 09:14:22  9.27MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux; 	apt-get update; 	apt-get install -y --no-install-recommends 		ca-certificates 		netbase 		tzdata 	; 	rm -rf /var/lib/apt/lists/* # buildkit
                        
# 2026-08-25 09:14:22  0.00B 设置环境变量 LANG
ENV LANG=C.UTF-8
                        
# 2026-08-25 09:14:22  0.00B 设置环境变量 PATH
ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-08-24 08:00:00  97.21MB 
# debian.sh --arch 'arm64' out/ 'bookworm' '@1787529600'
                        
                    

镜像信息

{
    "Id": "sha256:928bc1aa0c3d1b294edf4e49b479c3e58f5992ce8c49f30151786f5d0349ba0d",
    "RepoTags": [
        "langgenius/dify-agent-local-sandbox:1.17.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox:1.17.0-linuxarm64"
    ],
    "RepoDigests": [
        "langgenius/dify-agent-local-sandbox@sha256:316279a82ead635306071d2b6a2ee15395daec10e0348f2002c101403d107646",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/langgenius/dify-agent-local-sandbox@sha256:ff21f901ed43a5de9954f464be2b688621dbe6cc507427e2bebe7f650ead0f96"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-08-25T05:16:03.405923482Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "dify",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "ExposedPorts": {
            "5004/tcp": {}
        },
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "LANG=C.UTF-8",
            "GPG_KEY=7169605F62C751356D054A26A821E680E5FA6305",
            "PYTHON_VERSION=3.12.14",
            "PYTHON_SHA256=5c8462af5790baf43a321a1559dbe0db06d1be4300fb85fb53c40060668e548a",
            "PYTHONDONTWRITEBYTECODE=1",
            "PYTHONUNBUFFERED=1",
            "PIP_NO_CACHE_DIR=1"
        ],
        "Cmd": [
            "shellctl",
            "serve",
            "--listen",
            "0.0.0.0:5004"
        ],
        "ArgsEscaped": true,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/home/dify",
        "Entrypoint": [
            "/usr/bin/tini",
            "-g",
            "--"
        ],
        "OnBuild": null,
        "Labels": {
            "org.opencontainers.image.created": "2026-08-25T11:14:26.276Z",
            "org.opencontainers.image.description": "Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack.",
            "org.opencontainers.image.licenses": "NOASSERTION",
            "org.opencontainers.image.revision": "09a855dcef24c0edc7431c46c0cfaa494481daf5",
            "org.opencontainers.image.source": "https://github.com/langgenius/dify",
            "org.opencontainers.image.title": "dify",
            "org.opencontainers.image.url": "https://github.com/langgenius/dify",
            "org.opencontainers.image.version": "1.17.0"
        }
    },
    "Architecture": "arm64",
    "Os": "linux",
    "Size": 558365820,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/2fa1b4201acf98087ca5aabd9d84508e54305e69767590637b6e29e89f022f8f/diff:/var/lib/docker/overlay2/ed0f3c395cd30146465af2f3fb6beb3753da7aed38c3312d3cd3aeb32a81356a/diff:/var/lib/docker/overlay2/c975b1d5ab058323a5c419b30ccf6c524ae004897a6bef9b6f6f608063f20b8a/diff:/var/lib/docker/overlay2/80b38eca8d43752652a4ff883364a0d3482aea087a501eb6da9799f85917c960/diff:/var/lib/docker/overlay2/af03225548db2a9c9d54e96a8772997a67052778aa4e43721577d2938f4754ff/diff:/var/lib/docker/overlay2/163bd402e1b49112c282f67cbd9afbda3b0473a2d346804166b7608574917387/diff:/var/lib/docker/overlay2/0fed43d6b88bab4cf2aeb209eacefe0bde1658e0d07e56dc99e98cc91b0ebd36/diff:/var/lib/docker/overlay2/3b558f823217d9acf16f55bd4458e83bb6f2a858c7f8b4b0944db374840f6f12/diff:/var/lib/docker/overlay2/84fcff3db29e5e393edfac5b271d745b7a8aaab8248d4ceb9b1c5b0315a9819f/diff:/var/lib/docker/overlay2/02fd5e58a7c871127caccbd35f0c86f7bed4bb80112c983f360aa60ad9941f6e/diff:/var/lib/docker/overlay2/71c6dfc4a5c333e1645b549debabf9db04a65d9155efc27e4e98529c16eaa737/diff:/var/lib/docker/overlay2/860756f439b836884f9614c2aee2ac90424f47d8c7151c20ac7f257caf9725fe/diff",
            "MergedDir": "/var/lib/docker/overlay2/0ae588d5e7ab4183c67f153dda1cad68b8b0708235341217691666075851aa7d/merged",
            "UpperDir": "/var/lib/docker/overlay2/0ae588d5e7ab4183c67f153dda1cad68b8b0708235341217691666075851aa7d/diff",
            "WorkDir": "/var/lib/docker/overlay2/0ae588d5e7ab4183c67f153dda1cad68b8b0708235341217691666075851aa7d/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:13a56b6535801be2adde694dabaf1c2df1d862a390661907dac821c42cd565cc",
            "sha256:4865ec4c5ecdf7dd51b6df29ffd04ddb07757e690fc344defa18dea5caa4fa55",
            "sha256:3b5faa36e5e05efbee828c3c0a3f6242323bb6351ecc41b95260669dbbf08900",
            "sha256:58e0f5438684adf0f1d4261d33bd55e9f4f925d883c7d0b3e87a911fd4be37b1",
            "sha256:fa60a58414dac6d9d7bc52c2f18df28134f8b8e10c84e5117fce4e0ff35e6e8d",
            "sha256:7cf2fc5469fa68add1482638885451969575cd9323c61fd950bd3b5ba0d99d3f",
            "sha256:382d015e9faeda746a97002faf8199f8f8d3fb84204e8935ed6381962bc206fc",
            "sha256:36844203301693d91a812b29a370e5d54eed8a8c68b22f1ab9189c1ad9768413",
            "sha256:16e20beaf022e4f3638834e5261be17bbdb866badf5d10e6a7e523e35e93c00b",
            "sha256:462115cb9235e4adaf8310aa3fa7ca803c0c2ef28ccad42f19ddf7c1adf28c99",
            "sha256:2a226592f2975cdcb950e8bd9e39601673c7ae3a70c809857206523195c99f63",
            "sha256:ec2f00cce799103e18a7c267b6d866924eeac21f4068e6d22c860bd04cdc8cce",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-08-27T15:06:12.018103044+08:00"
    }
}

更多版本

docker.io/langgenius/dify-agent-local-sandbox:1.16.0-rc1

linux/amd64 docker.io563.45MB2026-07-14 18:48
132

docker.io/langgenius/dify-agent-local-sandbox:1.16.0

linux/arm64 docker.io564.66MB2026-07-20 11:18
85

docker.io/langgenius/dify-agent-local-sandbox:1.16.0

linux/amd64 docker.io546.75MB2026-07-20 14:40
123

docker.io/langgenius/dify-agent-local-sandbox:1.16.1

linux/arm64 docker.io564.66MB2026-07-28 16:32
104

docker.io/langgenius/dify-agent-local-sandbox:1.16.1

linux/amd64 docker.io546.75MB2026-08-04 17:38
140

docker.io/langgenius/dify-agent-local-sandbox:1.17.0

linux/arm64 docker.io558.37MB2026-08-27 15:06
11

docker.io/langgenius/dify-agent-local-sandbox:1.17.0

linux/amd64 docker.io540.19MB2026-08-27 17:07
4
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×