feat: initial bridge image (alpine multi-arch) with Node+npm+tsx and Python+mcp-proxy; build/push via GH Actions

Author: masterkain

.github/workflows/docker.yml

@@ -0,0 +1,55 @@
+name: build-and-push
+
+on:
+  push:
+    branches: [ main, master ]
+    tags: [ 'v*.*.*' ]
+  workflow_dispatch: {}
+
+env:
+  IMAGE_NAME: ghcr.io/icoretech/mcp-stdio-bridge
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Docker metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE_NAME }}
+          tags: |
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          provenance: false

.gitignore

@@ -0,0 +1,11 @@
+# general
+.dockerignore
+.DS_Store
+
+# node
+node_modules
+
+# python
+__pycache__
+*.pyc
+

Dockerfile

@@ -0,0 +1,26 @@
+FROM alpine:3.20
+
+ARG NODE_MAJOR=22
+ENV PIP_DISABLE_PIP_VERSION_CHECK=1 \
+    PIP_NO_CACHE_DIR=1 \
+    UV_SYSTEM_PYTHON=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1
+
+# Multi-arch compatible: install Node.js, Python, pip, git; then python mcp-proxy and node tsx
+RUN set -eux; \
+    apk add --no-cache \
+      nodejs npm python3 py3-pip git bash tini ca-certificates; \
+    npm i -g --omit=dev tsx; \
+    python3 -m pip install --no-cache-dir --upgrade pip; \
+    python3 -m pip install --no-cache-dir mcp-proxy;
+
+# Use tini for proper signal handling (PID 1)
+ENTRYPOINT ["/sbin/tini","--","mcp-proxy"]
+
+# Default to SSE on 3000; helm chart passes args; left here as documentation
+EXPOSE 3000
+
+LABEL org.opencontainers.image.source="https://github.com/icoretech/mcp-stdio-bridge" \
+      org.opencontainers.image.description="Universal stdio→HTTP(SSE) bridge for MCP servers with Node (npx/tsx) and Python envs" \
+      org.opencontainers.image.licenses="MIT"

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Icoretech
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

@@ -0,0 +1,16 @@
+REG ?= ghcr.io
+ORG ?= icoretech
+IMG ?= mcp-stdio-bridge
+IMAGE ?= $(REG)/$(ORG)/$(IMG)
+PLATFORMS ?= linux/amd64,linux/arm64
+TAG ?= dev
+
+.PHONY: build push all
+
+build:
+	docker buildx build --platform $(PLATFORMS) -t $(IMAGE):$(TAG) --load .
+
+push:
+	docker buildx build --platform $(PLATFORMS) -t $(IMAGE):$(TAG) --push .
+
+all: build

README.md

@@ -0,0 +1,36 @@
+# mcp-stdio-bridge
+
+Universal stdio → HTTP(SSE) bridge image for MCP servers on Kubernetes.
+
+- Includes Node.js (with `npx`/`tsx`) and Python (`pip`).
+- Entrypoint is `mcp-proxy`, converting stdio MCP servers to SSE over HTTP.
+- Multi-arch (amd64/arm64) via GH Actions.
+
+## Usage with Helm `mcp-server`
+
+Example values snippet:
+
+```yaml
+servers:
+  - name: chrome-devtools
+    port: 3000
+    stdioBridge:
+      enabled: true
+      image: ghcr.io/icoretech/mcp-stdio-bridge
+      tag: latest
+      port: 3000
+      passEnvironment: true
+      serverCommand: ["npx","chrome-devtools-mcp"]
+      serverArgs: []
+    register:
+      enabled: true
+      type: sse
+      path: /sse
+```
+
+## Local build
+
+```bash
+docker buildx build --platform linux/amd64,linux/arm64 -t ghcr.io/icoretech/mcp-stdio-bridge:dev --load .
+```
+