Commit 297c4535

commit 297c45357649b5816b9925e32888a2203e023207
Author: Ben Sima <ben@bensima.com>
Date:   Fri Jan 2 00:09:13 2026

    Omni/Agentd: Add git toolchain OCI image
    
    agent-git image contains:
    - agent binary
    - busybox
    - git
    - CA certs
    
    Build and load:
      bild Omni/Agentd/Images/Git.nix
      docker load < _/nix/Omni/Agentd/Images/Git.nix
    
    Task-Id: t-320.3

diff --git a/Omni/Agentd/Images/Git.nix b/Omni/Agentd/Images/Git.nix
new file mode 100644
index 00000000..4fe7fd43
--- /dev/null
+++ b/Omni/Agentd/Images/Git.nix
@@ -0,0 +1,39 @@
+#!/usr/bin/env run.sh
+# Git toolchain OCI image for agentd
+#
+# Contains: agent + busybox + git + certs
+#
+# Build:
+#   bild Omni/Agentd/Images/Git.nix
+#
+# Load into docker:
+#   docker load < _/nix/Omni/Agentd/Images/Git.nix
+#
+# Test:
+#   docker run -it agent-git git --version
+#
+{
+  bild,
+  packages ? import ../Packages.nix {inherit bild;},
+}:
+bild.image {
+  name = "agent-git";
+  tag = "latest";
+  fromImage = null;
+  contents = [
+    packages.agent
+    bild.pkgs.busybox
+    bild.pkgs.git
+    bild.pkgs.cacert
+  ];
+  config = {
+    Cmd = ["/bin/agent"];
+    WorkingDir = "/workspace";
+    Env = [
+      "PATH=/bin"
+      "SSL_CERT_FILE=${bild.pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+      "HOME=/root"
+      "GIT_SSL_CAINFO=${bild.pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+    ];
+  };
+}