Add comprehensive Docker support for containerized Wassette deployments #369

Copilot · 2025-10-09T02:30:42Z

Changes from Review Feedback (Commits `2367c8e` and latest)

All review comments have been fully addressed:

Dockerfile versions updated - Changed from rust:1.83 to rust:1.90 to match project Rust version
Default transport changed - Updated both Dockerfiles to use --streamable-http instead of --stdio
Documentation structure improved - Moved Docker documentation under Installation section
All examples updated - Updated all docker run commands in documentation to:
- Use -p 9001:9001 for port mapping (streamable-http default)
- Show how to override with --stdio or --sse when needed
- Reflect streamable-http as the primary transport method
Docker Compose updated - Updated example compose file to reflect new default
README updated - Updated quick start examples to use streamable-http

The documentation now consistently shows streamable-http as the default with proper port mapping, making it easier for users to get started with HTTP-based access.

Original prompt

This section details on the original issue you should resolve

<issue_title>There should be documentation on how to run Wassette in docker</issue_title>
<issue_description>Containerize wassette binary in a docker container for additional defense. It should mount the plugin_dir file paths and other paths that are necessary for wassette to function correctly.</issue_description>

Comments on the Issue (you are @copilot in this section)

Fixes #364

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.

Copilot

Pull Request Overview

This PR adds comprehensive Docker support for containerized Wassette deployments, providing enhanced security isolation through defense-in-depth architecture. The implementation includes multiple Dockerfile variants, production-ready configuration examples, and extensive documentation following Docker security best practices.

Containerizes Wassette with proper security hardening (non-root user, resource limits, capability dropping)
Provides comprehensive documentation covering quick start, component mounting, secrets management, and production deployment
Includes Docker Compose configuration for orchestrated deployments with security defaults

Reviewed Changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
`docs/deployment/docker.md`	Comprehensive Docker deployment guide with security best practices and troubleshooting
`docs/SUMMARY.md`	Adds Docker documentation to the book structure under new "Deployment" section
`docker-compose.example.yml`	Production-ready Docker Compose configuration with security defaults and resource limits
`README.md`	Updates main readme with Docker installation method and quick start examples
`Dockerfile.prebuilt`	Alternative Dockerfile for using pre-built binaries to speed up container builds
`Dockerfile`	Multi-stage Dockerfile that compiles from source with security hardening
`CHANGELOG.md`	Documents the Docker support addition in the unreleased section
`.dockerignore`	Optimizes Docker build context by excluding unnecessary files

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

Copilot · 2025-10-09T07:13:37Z

docs/deployment/docker.md

+
+### Run with HTTP/SSE Transport
+
+**Note**: The current version of Wassette binds to `127.0.0.1:9001`, which doesn't work directly with Docker port forwarding. The stdio transport is recommended for Docker deployments. HTTP/SSE support for Docker will be improved in a future release.


This note about HTTP/SSE binding limitations should include a brief explanation of why 127.0.0.1 binding doesn't work with Docker port forwarding. Consider adding that 127.0.0.1 only accepts connections from localhost within the container, not from the host.

Suggested change

**Note**: The current version of Wassette binds to `127.0.0.1:9001`, which doesn't work directly with Docker port forwarding. The stdio transport is recommended for Docker deployments. HTTP/SSE support for Docker will be improved in a future release.

**Note**: The current version of Wassette binds to `127.0.0.1:9001`, which doesn't work directly with Docker port forwarding because `127.0.0.1` only accepts connections from localhost *within the container*, not from the host. As a result, published ports are not accessible from outside the container. The stdio transport is recommended for Docker deployments. HTTP/SSE support for Docker will be improved in a future release.

Copilot · 2025-10-09T07:13:38Z

docs/deployment/docker.md

+  wassette:
+    # ... other config ...
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:9001/health"]


The health check endpoint /health is referenced but it's unclear if this endpoint actually exists in Wassette. Either verify this endpoint exists or provide the correct health check endpoint.

Suggested change

test: ["CMD", "curl", "-f", "http://localhost:9001/health"]

test: ["CMD", "curl", "-f", "http://localhost:9001/"]

Copilot · 2025-10-09T07:13:38Z

docker-compose.example.yml

+
+    # Optional: Health check for SSE/HTTP transports
+    healthcheck:
+      test: ["CMD-SHELL", "curl -f http://localhost:9001/health || exit 1"]


Inconsistent health check format between the Docker Compose example and documentation. The documentation uses CMD format while this uses CMD-SHELL. Also, the /health endpoint should be verified to exist.

Suggested change

test: ["CMD-SHELL", "curl -f http://localhost:9001/health || exit 1"]

test: ["CMD", "curl", "-f", "http://localhost:9001/health"]

Copilot · 2025-10-09T07:13:39Z

docs/deployment/docker.md

+
+# Download and install Wassette binary
+ARG WASSETTE_VERSION=latest
+RUN curl -fsSL https://github.com/microsoft/wassette/releases/download/${WASSETTE_VERSION}/wassette-linux-x86_64 -o /usr/local/bin/wassette && \


The download URL pattern uses wassette-linux-x86_64 but it should be verified that this matches the actual release asset naming convention. GitHub releases might use different naming patterns.

Suggested change

RUN curl -fsSL https://github.com/microsoft/wassette/releases/download/${WASSETTE_VERSION}/wassette-linux-x86_64 -o /usr/local/bin/wassette && \

# NOTE: The asset name may change between releases. Check the actual asset name at:

# https://github.com/microsoft/wassette/releases/tag/${WASSETTE_VERSION}

ARG WASSETTE_ASSET=wassette-linux-x86_64

RUN curl -fsSL https://github.com/microsoft/wassette/releases/download/${WASSETTE_VERSION}/${WASSETTE_ASSET} -o /usr/local/bin/wassette && \

Mossaka

@copilot

Mossaka · 2025-10-09T07:13:03Z

docs/SUMMARY.md

+# Deployment
+
+- [Docker](./deployment/docker.md)
+


I think you could merge the docs with quick started

Done in 2367c8e. Moved Docker documentation under the Installation section as a sub-item, removing the separate Deployment section.

Mossaka · 2025-10-09T07:15:27Z

Dockerfile

+# This Dockerfile provides a containerized runtime for Wassette with additional security isolation
+
+# Stage 1: Build the Wassette binary
+FROM rust:1.83-bookworm AS builder


use rust 1.90 version

Updated to Rust 1.90 in 2367c8e to match the project's Rust version.

Mossaka · 2025-10-09T07:16:06Z

Dockerfile

+# Default command: start Wassette with stdio transport
+# Override this in docker run or docker-compose for different transports
+CMD ["wassette", "serve", "--stdio"]


default start with streamable-http

Changed default to streamable-http in 2367c8e.

Mossaka · 2025-10-09T07:16:33Z

Dockerfile.prebuilt

+# Default command: start Wassette with stdio transport
+# Override this in docker run or docker-compose for different transports
+CMD ["wassette", "serve", "--stdio"]


same comment as above

Changed default to streamable-http in 2367c8e.

Mossaka · 2025-10-09T07:17:10Z

@copilot apply changes based on the comments in this thread

Copilot · 2025-10-09T07:29:24Z

@copilot apply changes based on the comments in this thread

All the comments from that review thread have already been addressed in commit 2367c8e:

Merged Docker docs under Installation section in SUMMARY.md
Updated Dockerfile to use Rust 1.90
Changed default transport to streamable-http in both Dockerfiles

Are there additional changes you'd like me to make?

Mossaka · 2025-10-09T07:35:41Z

@copilot apply changes based on the comments in this thread

Copilot · 2025-10-09T07:44:17Z

@copilot apply changes based on the comments in this thread

Completed in 88ea633. Updated all documentation to reflect streamable-http as the default transport:

All docker run examples now use -p 9001:9001 with streamable-http
README updated with correct default
Docker Compose example updated
Documentation shows how to override with --stdio or --sse when needed

Co-authored-by: Mossaka <[email protected]>

…e Docker docs with Installation Co-authored-by: Mossaka <[email protected]>

…nsport Co-authored-by: Mossaka <[email protected]>

Signed-off-by: Jiaxiao Zhou <[email protected]>

Copilot AI assigned Copilot and Mossaka Oct 9, 2025

Copilot started work on behalf of Mossaka October 9, 2025 02:31 View session

Copilot AI changed the title ~~[WIP] Add documentation for running Wassette in Docker~~ Add comprehensive Docker support for containerized Wassette deployments Oct 9, 2025

Copilot AI requested a review from Mossaka October 9, 2025 03:06

Copilot finished work on behalf of Mossaka October 9, 2025 03:06

Mossaka marked this pull request as ready for review October 9, 2025 04:27

Mossaka requested a review from Copilot October 9, 2025 07:12

Copilot AI reviewed Oct 9, 2025

View reviewed changes

Mossaka requested changes Oct 9, 2025

View reviewed changes

Copilot started work on behalf of Mossaka October 9, 2025 07:17 View session

Copilot AI requested a review from Mossaka October 9, 2025 07:26

Copilot finished work on behalf of Mossaka October 9, 2025 07:26

Copilot started work on behalf of Mossaka October 9, 2025 07:27 View session

Copilot finished work on behalf of Mossaka October 9, 2025 07:30

Copilot started work on behalf of Mossaka October 9, 2025 07:36 View session

Copilot finished work on behalf of Mossaka October 9, 2025 07:45

Copilot AI and others added 5 commits October 9, 2025 01:18

Add Docker support with Dockerfile and comprehensive documentation

8d8dc56

Co-authored-by: Mossaka <[email protected]>

Add Docker deployment section to README

a4a4cfa

Co-authored-by: Mossaka <[email protected]>

Fix wording in README Docker section

b2c5142

Co-authored-by: Mossaka <[email protected]>

Address review feedback: use Rust 1.90, streamable-http default, merg…

1451c88

…e Docker docs with Installation Co-authored-by: Mossaka <[email protected]>

Update Docker documentation to reflect streamable-http as default tra…

a3e3208

…nsport Co-authored-by: Mossaka <[email protected]>

Mossaka force-pushed the copilot/add-docker-documentation-2 branch from 88ea633 to a3e3208 Compare October 9, 2025 08:18

Merge branch 'main' into copilot/add-docker-documentation-2

f0d0730

Signed-off-by: Jiaxiao Zhou <[email protected]>

Mossaka merged commit 3b40b28 into main Oct 13, 2025
11 of 14 checks passed

Mossaka deleted the copilot/add-docker-documentation-2 branch October 13, 2025 19:27


		### Run with HTTP/SSE Transport

		Note: The current version of Wassette binds to `127.0.0.1:9001`, which doesn't work directly with Docker port forwarding. The stdio transport is recommended for Docker deployments. HTTP/SSE support for Docker will be improved in a future release.

	test: ["CMD", "curl", "-f", "http://localhost:9001/health"]
	test: ["CMD", "curl", "-f", "http://localhost:9001/"]

	test: ["CMD-SHELL", "curl -f http://localhost:9001/health \|\| exit 1"]
	test: ["CMD", "curl", "-f", "http://localhost:9001/health"]

-RUN curl -fsSL https://github.com/microsoft/wassette/releases/download/${WASSETTE_VERSION}/wassette-linux-x86_64 -o /usr/local/bin/wassette && \
+# NOTE: The asset name may change between releases. Check the actual asset name at:
+# https://github.com/microsoft/wassette/releases/tag/${WASSETTE_VERSION}
+ARG WASSETTE_ASSET=wassette-linux-x86_64
+RUN curl -fsSL https://github.com/microsoft/wassette/releases/download/${WASSETTE_VERSION}/${WASSETTE_ASSET} -o /usr/local/bin/wassette && \

Add comprehensive Docker support for containerized Wassette deployments #369

Add comprehensive Docker support for containerized Wassette deployments #369

Uh oh!

Conversation

Copilot AI commented Oct 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes from Review Feedback (Commits 2367c8e and latest)

Comments on the Issue (you are @copilot in this section)

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Copilot AI Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Mossaka left a comment

Choose a reason for hiding this comment

Uh oh!

Mossaka Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Mossaka Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Mossaka Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Mossaka Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Oct 9, 2025

Choose a reason for hiding this comment

Uh oh!

Mossaka commented Oct 9, 2025

Uh oh!

Copilot AI commented Oct 9, 2025

Uh oh!

Mossaka commented Oct 9, 2025

Uh oh!

Copilot AI commented Oct 9, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Oct 9, 2025 •

edited

Loading

Changes from Review Feedback (Commits `2367c8e` and latest)