From 6e2d60100b67d82e695f55aba0ba190bd822a53b Mon Sep 17 00:00:00 2001 From: enyst Date: Sun, 26 Oct 2025 19:42:49 +0000 Subject: [PATCH 1/2] docs: runtime images and conda channel hosting; document OH_CONDA_CHANNEL_ALIAS usage\n\nCo-authored-by: openhands --- .../runtime/runtime-images-and-conda.mdx | 37 +++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 openhands/runtime/runtime-images-and-conda.mdx diff --git a/openhands/runtime/runtime-images-and-conda.mdx b/openhands/runtime/runtime-images-and-conda.mdx new file mode 100644 index 0000000..ca76cfd --- /dev/null +++ b/openhands/runtime/runtime-images-and-conda.mdx @@ -0,0 +1,37 @@ +--- +title: Runtime images and conda channel hosting +--- + +This page explains when OpenHands runtime builds may contact anaconda.org and how to avoid it. + +Overview +- OpenHands runtime images are built with micromamba and we install Python and Poetry from the conda-forge channel +- Even when using only conda-forge, the default channel_alias expands conda-forge to https://conda.anaconda.org/conda-forge, which is hosted under anaconda.org + +Two usage paths +1) Use prebuilt runtime images +- No conda network activity occurs during normal use; no contact with anaconda.org on your side +- If your organization must avoid any anaconda.org contact entirely, build your own runtime image instead (path 2) and configure OpenHands to use it + +2) Build runtime images yourself +- As of PR #11516, you can override where the conda-forge channel resolves by setting an environment variable before building: + + export OH_CONDA_CHANNEL_ALIAS=https://repo.prefix.dev + # then run your standard OpenHands build/run flow that triggers runtime image build + +- With this set, our Dockerfile sets: + micromamba config set channel_alias https://repo.prefix.dev + +- We continue to reference -c conda-forge for packages, which will resolve under the configured host (e.g., repo.prefix.dev) instead of anaconda.org + +- You can point channel_alias to: + - A public alternative such as https://repo.prefix.dev + - An internal corporate mirror/proxy (e.g., Artifactory) that fronts conda-forge + +Notes +- We remove the defaults channel, so no packages are pulled from Anaconda's defaults repo +- However, without channel_alias, conda-forge still resolves under the anaconda.org domain by default, which is why you may see requests there + +References +- Conda channels and alias docs: https://www.anaconda.com/docs/getting-started/working-with-conda/channels +- Background: https://github.com/conda-forge/miniforge/issues/784 From fe736ff13e47cfb8debea3795271b84deb8c44a3 Mon Sep 17 00:00:00 2001 From: all-hands-bot Date: Sun, 26 Oct 2025 19:43:21 +0000 Subject: [PATCH 2/2] sync(openapi): agent-sdk/main 1f905f6 --- openapi/agent-sdk.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/openapi/agent-sdk.json b/openapi/agent-sdk.json index d818e24..8d81485 100644 --- a/openapi/agent-sdk.json +++ b/openapi/agent-sdk.json @@ -5171,7 +5171,7 @@ "version": { "type": "string", "title": "Version", - "default": "1.0.0a3" + "default": "1.0.0a4" }, "docs": { "type": "string",