/bin/sh -c #(nop) LABEL maintainer="Red Hat, Inc."

/bin/sh -c #(nop) LABEL vendor="Red Hat, Inc."

/bin/sh -c #(nop) LABEL url="https://catalog.redhat.com/en/search?searchType=containers"

/bin/sh -c #(nop) LABEL com.redhat.component="ubi10-minimal-container" name="ubi10/ubi-minimal" version="10.2" cpe="cpe:/o:redhat:enterprise_linux:10.2" distribution-scope="public"

/bin/sh -c #(nop) LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI"

/bin/sh -c #(nop) LABEL summary="Provides the latest release of the minimal Red Hat Universal Base Image 10."

/bin/sh -c #(nop) LABEL description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.description="The Universal Base Image Minimal is a stripped down image that uses microdnf as a package manager. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly."

/bin/sh -c #(nop) LABEL io.k8s.display-name="Red Hat Universal Base Image 10 Minimal"

/bin/sh -c #(nop) LABEL io.openshift.expose-services=""

/bin/sh -c #(nop) LABEL io.openshift.tags="minimal rhel10"

/bin/sh -c #(nop) ENV container oci

/bin/sh -c #(nop) COPY dir:6532b60aee6596eedc54150733b22a4bd5845766d2e036847d94db009e28c073 in /

/bin/sh -c #(nop) COPY file:5de33b5fc08b00635bccf9134a18978dba13e2250aa51838f9969515a3957847 in /etc/yum.repos.d/.

/bin/sh -c #(nop) CMD ["/bin/bash"]

/bin/sh -c #(nop) COPY dir:bf92bcd7ce86cb6517dab9f0376ba8e4643a80e464a985b546839b4dfe432698 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:bf92bcd7ce86cb6517dab9f0376ba8e4643a80e464a985b546839b4dfe432698 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-06-30T05:59:57Z" "org.opencontainers.image.revision"="44f0ddba4a090cf20869fe52250e95ba0eca806d" "build-date"="2026-06-30T05:59:57Z" "architecture"="aarch64" "vcs-ref"="44f0ddba4a090cf20869fe52250e95ba0eca806d" "vcs-type"="git" "release"="1782798957"org.opencontainers.image.created=2026-06-30T05:59:57Z,org.opencontainers.image.revision=44f0ddba4a090cf20869fe52250e95ba0eca806d

/bin/sh -c #(nop) EXPOSE 8080

/bin/sh -c #(nop) ENV PYTHON_VERSION=3.14 PYTHONUNBUFFERED=1 PYTHONIOENCODING=UTF-8 LC_ALL=en_US.UTF-8 LANG=en_US.UTF-8 CNB_STACK_ID=com.redhat.stacks.ubi10-python-314 CNB_USER_ID=1001 CNB_GROUP_ID=0 PIP_NO_CACHE_DIR=off STI_SCRIPTS_PATH=/usr/libexec/s2i APP_ROOT=/opt/app-root HOME=/opt/app-root/src PLATFORM="el10"

/bin/sh -c #(nop) ENV PATH=$APP_ROOT/bin:$HOME/bin:$HOME/.local/bin:$PATH

/bin/sh -c #(nop) ENV BASH_ENV=${APP_ROOT}/bin/activate ENV=${APP_ROOT}/bin/activate PROMPT_COMMAND=". ${APP_ROOT}/bin/activate"

/bin/sh -c #(nop) ENV SUMMARY="Minimal platform for building and running Python $PYTHON_VERSION applications" DESCRIPTION="Python $PYTHON_VERSION available as container is a base platform for building and running various Python $PYTHON_VERSION applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms."

/bin/sh -c #(nop) LABEL summary="$SUMMARY" description="$DESCRIPTION" io.k8s.description="$DESCRIPTION" io.k8s.display-name="Python 3.14" io.openshift.expose-services="8080:http" io.openshift.tags="builder,python,python314,python-314,rh-python314" com.redhat.component="python-314-container" name="ubi10/python-314-minimal" usage="s2i build https://github.com/sclorg/s2i-python-container.git --context-dir=3.14-minimal/test/setup-test-app/ ubi10/python-314-minimal python-sample-app" com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI" io.buildpacks.stack.id="com.redhat.stacks.ubi10-python-314-minimal" maintainer="SoftwareCollections.org <sclorg@redhat.com>"

/bin/sh -c INSTALL_PKGS="python3.14 glibc-langpack-en findutils nss_wrapper-libs" && microdnf -y --setopt=tsflags=nodocs --setopt=install_weak_deps=0 install $INSTALL_PKGS && microdnf -y clean all --enablerepo='*'

/bin/sh -c #(nop) COPY dir:14b52e5b4dba2b5d78794253f3905f7c69773c0fbaad2ef4f5997fc407dbb3c3 in $STI_SCRIPTS_PATH

/bin/sh -c #(nop) COPY dir:0e0aa0f5272905534917e11b52428147aefc961d770ef17b2d3ec9f7ec09cf1d in /

/bin/sh -c #(nop) COPY dir:208155bc9054883784c7146928dd201221f759e227e3fb517c26e7336c745994 in /opt/wheels

/bin/sh -c #(nop) WORKDIR ${HOME}

/bin/sh -c python3.14 -m venv ${APP_ROOT} && ${APP_ROOT}/bin/pip install /opt/wheels/pip-* && rm -r /opt/wheels && chown -R 1001:0 ${APP_ROOT} && fix-permissions ${APP_ROOT} -P && rpm-file-permissions

/bin/sh -c #(nop) USER 1001

/bin/sh -c #(nop) CMD $STI_SCRIPTS_PATH/usage

/bin/sh -c #(nop) COPY dir:2d82225e46d0ddafafa26aa80bd96df95e5cc45fb1485403b70ec02e9f7c6ef3 in /usr/share/buildinfo/

/bin/sh -c #(nop) COPY dir:2d82225e46d0ddafafa26aa80bd96df95e5cc45fb1485403b70ec02e9f7c6ef3 in /root/buildinfo/

/bin/sh -c #(nop) LABEL "org.opencontainers.image.created"="2026-07-08T04:39:51Z" "org.opencontainers.image.revision"="dc55323b09a3a1620d325c98f365f577834cbbfb" "build-date"="2026-07-08T04:39:51Z" "architecture"="aarch64" "vcs-ref"="dc55323b09a3a1620d325c98f365f577834cbbfb" "vcs-type"="git" "release"="1783485471"org.opencontainers.image.created=2026-07-08T04:39:51Z,org.opencontainers.image.revision=dc55323b09a3a1620d325c98f365f577834cbbfb

USER root

RUN /bin/sh -c microdnf update -y && microdnf install -y curl git libpq gnupg xz tar shadow-utils && microdnf clean all # buildkit

RUN /bin/sh -c python3.14 -m pip install --upgrade pip # buildkit

COPY /usr/local/bin/uv /usr/local/bin/uv # buildkit

COPY /usr/local/bin/uvx /usr/local/bin/uvx # buildkit

RUN /bin/sh -c ARCH=$(uname -m) && if [ "$ARCH" = "x86_64" ]; then NODE_ARCH="x64"; elif [ "$ARCH" = "aarch64" ]; then NODE_ARCH="arm64"; else NODE_ARCH="$ARCH"; fi && NODE_VERSION=$(curl -fsSL https://nodejs.org/dist/latest-v22.x/ | sed -nE "s/.*node-v([0-9]+\.[0-9]+\.[0-9]+)-linux-${NODE_ARCH}\.tar\.xz.*/\1/p" | head -1) && if [ -z "$NODE_VERSION" ]; then echo "ERROR: Could not determine Node.js version" && exit 1; fi && curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${NODE_ARCH}.tar.xz" | tar -xJ -C /usr/local --strip-components=1 && npm install -g npm@latest # ← add this line # buildkit

RUN /bin/sh -c useradd user -u 1000 -g 0 --no-create-home --home-dir /app/data # buildkit

COPY --chown=1000 /app/.venv /app/.venv # buildkit

ENV PATH=/app/.venv/bin:/opt/app-root/bin:/opt/app-root/src/bin:/opt/app-root/src/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

ENV BASH_ENV= ENV= PROMPT_COMMAND=

RUN /bin/sh -c mkdir -p /app/langflow && chown -R 1000:0 /app/langflow && chmod -R g+rwX /app/langflow # buildkit

ENV NPM_CONFIG_CACHE=/app/.npm

RUN /bin/sh -c mkdir -p /app/.npm /opt/app-root/src/.npm && chown -R 1000:0 /app/.npm /opt/app-root/src/.npm && chmod -R g+rwX /app/.npm /opt/app-root/src/.npm # buildkit

LABEL org.opencontainers.image.title=langflow

LABEL org.opencontainers.image.authors=[Langflow]

LABEL org.opencontainers.image.licenses=MIT

LABEL org.opencontainers.image.url=https://github.com/langflow-ai/langflow

LABEL org.opencontainers.image.source=https://github.com/langflow-ai/langflow

USER user

WORKDIR /app

ENV LANGFLOW_HOST=0.0.0.0

ENV LANGFLOW_PORT=7860

ENV LANGFLOW_AUTO_LOGIN=false

ENV LANGFLOW_ALLOW_CUSTOM_COMPONENTS=false

ENV LANGFLOW_BLOCK_CODE_INTERPRETER_COMPONENTS=true

ENV LANGFLOW_RESTRICT_LOCAL_FILE_ACCESS=true

ENV LANGFLOW_CONNECTOR_SSRF_ALLOW_LOOPBACK=false

ENV LANGFLOW_MCP_SERVER_DOCKER_HARDENING=true

ENV LANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true

ENV LANGFLOW_MCP_SERVER_ALLOWED_PACKAGES=mcp-proxy,lfx

CMD ["langflow" "run"]