feat: match herm container setup (version-tagged image, same-path mount, attachments/cache)

- Image derived from binary version: graycode/hawk:<version> (like herm's aduermael/herm:<tag>)
- Mount project at same path (not /workspace) for path consistency
- Add /attachments (read-only) and /cache mounts like herm
- Auto-pull image if not available locally, fall back to ubuntu:24.04
- Add container/Dockerfile with dev tools (git, curl, ripgrep, node, python)
- ContainerImageTag set via ldflags at build time

Author: Patel230

cmd/container_boot.go

@@ -3,6 +3,7 @@ package cmd
 import (
 	"context"
 	"fmt"
+	"os/exec"
 	"time"
 
 	tea "github.com/charmbracelet/bubbletea"
@@ -44,6 +45,20 @@ func bootContainerCmd(projectDir string) tea.Cmd {
 			}
 		}
 
+		// Ensure image exists locally, pull if needed (like herm)
+		image := cs.Image()
+		pullCtx, pullCancel := context.WithTimeout(context.Background(), 300*time.Second)
+		defer pullCancel()
+		checkCmd := exec.CommandContext(pullCtx, "docker", "image", "inspect", image)
+		if checkCmd.Run() != nil {
+			// Image not available locally — pull it
+			pullCmd := exec.CommandContext(pullCtx, "docker", "pull", image)
+			if err := pullCmd.Run(); err != nil {
+				// Fall back to ubuntu:24.04 if custom image can't be pulled
+				cs.SetImage("ubuntu:24.04")
+			}
+		}
+
 		ctx, cancel := context.WithTimeout(context.Background(), 60*time.Second)
 		defer cancel()
 

container/Dockerfile

@@ -0,0 +1,28 @@
+FROM ubuntu:24.04
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git \
+    curl \
+    wget \
+    jq \
+    tree \
+    ripgrep \
+    fd-find \
+    make \
+    gcc \
+    python3 \
+    python3-pip \
+    nodejs \
+    npm \
+    ca-certificates \
+    openssh-client \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create symlinks for common tool names
+RUN ln -sf /usr/bin/fdfind /usr/bin/fd
+
+# Set reasonable defaults
+ENV TERM=xterm-256color
+ENV LANG=C.UTF-8
+
+WORKDIR /workspace

main.go

@@ -5,6 +5,7 @@ import (
 	"os"
 
 	"github.com/GrayCodeAI/hawk/cmd"
+	"github.com/GrayCodeAI/hawk/sandbox"
 )
 
 // Version is set at build time via ldflags.
@@ -17,6 +18,7 @@ var BuildDate = "unknown"
 func main() {
 	cmd.SetVersion(Version)
 	cmd.SetBuildDate(BuildDate)
+	sandbox.ContainerImageTag = Version
 	if err := cmd.Execute(); err != nil {
 		fmt.Fprintln(os.Stderr, err)
 		os.Exit(1)

sandbox/container.go

@@ -57,11 +57,19 @@ func (c *ContainerSandbox) Start(ctx context.Context) error {
 	// Remove any stale container with the same name from a previous session
 	exec.CommandContext(ctx, "docker", "rm", "-f", name).Run()
 
+	// Create attachments and cache dirs (like herm)
+	attachDir := filepath.Join(c.projectDir, ".hawk", "attachments")
+	cacheDir := filepath.Join(c.projectDir, ".hawk", "cache")
+	os.MkdirAll(attachDir, 0755)
+	os.MkdirAll(cacheDir, 0755)
+
 	args := []string{
 		"run", "-d", "--rm",
 		"--name", name,
-		"-v", c.projectDir + ":/workspace",
-		"-w", "/workspace",
+		"-v", c.projectDir + ":" + c.projectDir, // mount at same path (like herm)
+		"-v", attachDir + ":/attachments:ro",
+		"-v", cacheDir + ":/cache",
+		"-w", c.projectDir,
 		c.image,
 		"sleep", "infinity",
 	}
@@ -130,6 +138,20 @@ func (c *ContainerSandbox) ContainerID() string {
 	return c.containerID
 }
 
+// Image returns the current image name.
+func (c *ContainerSandbox) Image() string {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	return c.image
+}
+
+// SetImage updates the image to use for the next Start call.
+func (c *ContainerSandbox) SetImage(img string) {
+	c.mu.Lock()
+	defer c.mu.Unlock()
+	c.image = img
+}
+
 // BuildFromDockerfile builds a new image from a Dockerfile in the project.
 // Returns the image tag that can be used for subsequent Start calls.
 func (c *ContainerSandbox) BuildFromDockerfile(ctx context.Context, dockerfile string) (string, error) {
@@ -168,6 +190,13 @@ func (c *ContainerSandbox) containerName() string {
 	return fmt.Sprintf("hawk-%s-%x", base, hash[:4])
 }
 
+// ContainerImageTag is set at build time via ldflags. Falls back to "latest".
+var ContainerImageTag = "latest"
+
+func defaultHawkImage() string {
+	return "graycode/hawk:" + ContainerImageTag
+}
+
 func resolveImage(projectDir string) string {
 	dfPath := filepath.Join(projectDir, ".hawk", "Dockerfile")
 	if _, err := os.Stat(dfPath); err == nil {
@@ -177,5 +206,5 @@ func resolveImage(projectDir string) string {
 			return fmt.Sprintf("hawk-sandbox:%x", hash[:6])
 		}
 	}
-	return "ubuntu:24.04"
+	return defaultHawkImage()
 }

sandbox/container_test.go

@@ -36,8 +36,9 @@ func TestContainerSandbox_ContainerName(t *testing.T) {
 
 func TestResolveImage_Default(t *testing.T) {
 	img := resolveImage(t.TempDir())
-	if img != "ubuntu:24.04" {
-		t.Fatalf("expected default image ubuntu:24.04, got %s", img)
+	expected := defaultHawkImage()
+	if img != expected {
+		t.Fatalf("expected default image %s, got %s", expected, img)
 	}
 }