build(container): standardize ContainerFiles and improve Podman compatibility

Author: observerw

container/README.md

@@ -27,11 +27,11 @@ Create a new directory with the server name and add a `ContainerFile`:
 ```dockerfile
 # Example ContainerFile for a Node.js based LSP server
 ARG VERSION=1.0.0
-FROM node:22-slim AS builder
+FROM docker.io/library/node:22-slim AS builder
 ARG VERSION
 RUN npm install -g <package-name>@${VERSION}
 
-FROM node:22-slim
+FROM docker.io/library/node:22-slim
 ARG VERSION
 LABEL org.opencontainers.image.version="${VERSION}"
 COPY --from=builder /usr/local/lib/node_modules /usr/local/lib/node_modules
@@ -104,8 +104,11 @@ The CI system will automatically:
 
 To manually test:
 ```bash
-# Build container
+# Build container (works with both Docker and Podman)
+# Podman will automatically pick up 'ContainerFile'
 docker build -f container/<server-name>/ContainerFile -t lsp/<server-name>:latest .
+# or
+podman build -t lsp/<server-name>:latest container/<server-name>/
 
 # Test the container
 docker run --rm lsp/<server-name>:latest --version

container/deno/ContainerFile

@@ -1,8 +1,13 @@
 # Deno has built-in LSP
 ARG VERSION=2.6.3
-FROM denoland/deno:alpine-${VERSION}
+FROM docker.io/denoland/deno:alpine-${VERSION}
 ARG VERSION
-LABEL org.opencontainers.image.version="${VERSION}"
+LABEL org.opencontainers.image.title="Deno LSP" \
+      org.opencontainers.image.description="Deno Language Server" \
+      org.opencontainers.image.version="${VERSION}" \
+      org.opencontainers.image.source="https://github.com/wangbowei/lsp-client" \
+      org.opencontainers.image.licenses="MIT"
 
 WORKDIR /workspace
+USER deno
 ENTRYPOINT ["deno", "lsp"]

container/pyrefly/ContainerFile

@@ -5,7 +5,15 @@ ARG VERSION
 RUN uv tool install pyrefly==${VERSION}
 
 FROM gcr.io/distroless/cc-debian12
+ARG VERSION
+LABEL org.opencontainers.image.title="Pyrefly LSP" \
+      org.opencontainers.image.description="Pyrefly Language Server" \
+      org.opencontainers.image.version="${VERSION}" \
+      org.opencontainers.image.source="https://github.com/wangbowei/lsp-client" \
+      org.opencontainers.image.licenses="MIT"
+
 COPY --from=builder /usr/local/bin/pyrefly /usr/local/bin/pyrefly
 
 WORKDIR /workspace
+USER 65532:65532
 ENTRYPOINT ["/usr/local/bin/pyrefly", "lsp"]

container/pyright/ContainerFile

@@ -1,5 +1,5 @@
 ARG VERSION=1.1.407
-FROM node:22-alpine AS builder
+FROM docker.io/library/node:22-alpine AS builder
 ARG VERSION
 WORKDIR /app
 RUN apk add --no-cache curl && \
@@ -8,12 +8,18 @@ RUN apk add --no-cache curl && \
     npm prune --production && \
     /usr/local/bin/node-prune
 
-FROM node:22-alpine
+FROM docker.io/library/node:22-alpine
 ARG VERSION
-LABEL org.opencontainers.image.version="${VERSION}"
+LABEL org.opencontainers.image.title="Pyright LSP" \
+      org.opencontainers.image.description="Pyright Language Server" \
+      org.opencontainers.image.version="${VERSION}" \
+      org.opencontainers.image.source="https://github.com/wangbowei/lsp-client" \
+      org.opencontainers.image.licenses="MIT"
+
 WORKDIR /app
 COPY --from=builder /app/node_modules ./node_modules
 ENV PATH="/app/node_modules/.bin:${PATH}"
 
 WORKDIR /workspace
+USER node
 ENTRYPOINT ["pyright-langserver", "--stdio"]

container/rust-analyzer/ContainerFile

@@ -1,6 +1,6 @@
 # Multi-stage build for rust-analyzer
 ARG VERSION=2025-12-15
-FROM rust:slim-bookworm AS builder
+FROM docker.io/library/rust:slim-bookworm AS builder
 ARG VERSION
 RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*
 
@@ -18,10 +18,15 @@ RUN set -eux; \
 
 FROM gcr.io/distroless/cc-debian12
 ARG VERSION
-LABEL org.opencontainers.image.version="${VERSION}"
+LABEL org.opencontainers.image.title="rust-analyzer" \
+      org.opencontainers.image.description="Rust Language Server" \
+      org.opencontainers.image.version="${VERSION}" \
+      org.opencontainers.image.source="https://github.com/wangbowei/lsp-client" \
+      org.opencontainers.image.licenses="MIT"
 
 COPY --from=builder /usr/local/bin/rust-analyzer /usr/local/bin/rust-analyzer
 
 WORKDIR /workspace
+USER 65532:65532
 ENTRYPOINT ["/usr/local/bin/rust-analyzer"]
 

container/ty/ContainerFile

@@ -5,7 +5,15 @@ ARG VERSION
 RUN uv tool install ty@${VERSION}
 
 FROM gcr.io/distroless/cc-debian12
+ARG VERSION
+LABEL org.opencontainers.image.title="Ty LSP" \
+      org.opencontainers.image.description="Ty Language Server" \
+      org.opencontainers.image.version="${VERSION}" \
+      org.opencontainers.image.source="https://github.com/wangbowei/lsp-client" \
+      org.opencontainers.image.licenses="MIT"
+
 COPY --from=builder /usr/local/bin/ty /usr/local/bin/ty
 
 WORKDIR /workspace
+USER 65532:65532
 ENTRYPOINT ["/usr/local/bin/ty", "server"]

container/typescript/ContainerFile

@@ -1,5 +1,5 @@
 ARG VERSION=5.1.3
-FROM node:22-alpine AS builder
+FROM docker.io/library/node:22-alpine AS builder
 ARG VERSION
 WORKDIR /app
 RUN apk add --no-cache curl && \
@@ -8,12 +8,18 @@ RUN apk add --no-cache curl && \
     npm prune --production && \
     /usr/local/bin/node-prune
 
-FROM node:22-alpine
+FROM docker.io/library/node:22-alpine
 ARG VERSION
-LABEL org.opencontainers.image.version="${VERSION}"
+LABEL org.opencontainers.image.title="TypeScript LSP" \
+      org.opencontainers.image.description="TypeScript Language Server" \
+      org.opencontainers.image.version="${VERSION}" \
+      org.opencontainers.image.source="https://github.com/wangbowei/lsp-client" \
+      org.opencontainers.image.licenses="MIT"
+
 WORKDIR /app
 COPY --from=builder /app/node_modules ./node_modules
 ENV PATH="/app/node_modules/.bin:${PATH}"
 
 WORKDIR /workspace
+USER node
 ENTRYPOINT ["typescript-language-server", "--stdio"]