Sandbox Images
Prebuild each instance's environment image and publish it to a registry
Prebuild the images, or the cluster builds them 512 times a step. Build each
instance's environment image offline, push it to a registry every sandbox node can
pull from, and point HARBOR_OPENSWE_IMAGE_REGISTRY at it in scripts/lib/site.env.
An OpenSWE instance is served as <registry>/openswe-<instance_id>:latest.
- Input — each instance's
environment/Dockerfile. - Output — one image per instance in a registry the cluster can pull.
Inline build is the fallback: with no registry configured, each trial builds its
image inside the pod. It is portable, it is slow, and it needs egress from the
sandbox. Setting INLINE_BUILD and a registry together is a validation fatal
(why).
The build and distribution workflow, including nydus lazy-pull, is in
docs/infra/image-preparation-and-build.md.