From 8d1d7ac166babbe6dc83504ba570bd0fba204fa2 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Sun, 14 Jun 2026 12:39:44 -0400
Subject: [PATCH] fix: resolve hadolint lint issues (pin versions, remove
 redundant USER root)

---
 Dockerfile | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index e0e9448..20d31bd 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM jcabillot/opencode:latest
+FROM jcabillot/opencode:1.16.2
 
 ARG OPENCHAMBER_WEB_VERSION=1.12.3
 
@@ -6,16 +6,15 @@ ENV NPM_CONFIG_UPDATE_NOTIFIER=false \
   NPM_CONFIG_LOGLEVEL=warn \
   NODE_ENV=production
 
-USER root
-
-RUN rm -rf /tmp/* \
-  && apt-get update \
-  && apt-get install -y --no-install-recommends python3 make g++ \
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends \
+    python3=3.12* \
+    make=4.3* \
+    g++=14.2* \
   && rm -rf /var/lib/apt/lists/* \
   && npm install -g --no-fund --no-audit "@openchamber/web@${OPENCHAMBER_WEB_VERSION}" \
   && npm cache clean --force \
-  && openchamber --version \
-  && chown -R opencode:opencode /home/opencode
+  && openchamber --version
 
 WORKDIR /home/opencode/
 USER opencode