From 2d930777d1bf3276ec4ddeaad5ec9b0f5749ac1b Mon Sep 17 00:00:00 2001 From: Alex Himmel Date: Fri, 7 Aug 2026 18:55:33 -0500 Subject: [PATCH] Add ghcr.io/novaexperiment/nova-claude:latest Sandboxed Claude Code image for the NOvA GPVMs. Runs the agent inside apptainer with an explicit bind allowlist, so interactive AI sessions on the shared interactive nodes cannot reach users' ssh keys, Kerberos credentials or each other's tokens. Rebuilt weekly from https://github.com/novaexperiment/nova-claude and published to GHCR; only :latest needs syncing, since version-pinned tags are pulled directly from the registry on the rare occasion someone needs to roll back. --- docker_images.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/docker_images.txt b/docker_images.txt index 7708728..16cf414 100644 --- a/docker_images.txt +++ b/docker_images.txt @@ -404,6 +404,7 @@ fermilab/benchmark:* # NOvA Experiment ghcr.io/novaexperiment/el7-tensorflow-gpu:latest +ghcr.io/novaexperiment/nova-claude:latest ghcr.io/novaexperiment/nova-sl7-novat2k:2020-10-27_freeze ghcr.io/novaexperiment/nova-sl7-novat2k:aborttest ghcr.io/novaexperiment/nova-sl7-novat2k:latest