From 6a2814277e31fa8523382eb40b9e858388d0737d Mon Sep 17 00:00:00 2001 From: The Oh Brothers Bot Date: Fri, 22 Dec 2023 09:58:31 +0000 Subject: [PATCH] Enhancement: Add code-server 4.20.0 variants Signed-off-by: The Oh Brothers Bot --- .github/workflows/ci-master-pr.yml | 392 +++++++++++++++++- README.md | 21 +- generate/definitions/versions.json | 1 + variants/4.20.0-docker-go-1.20.12/Dockerfile | 335 +++++++++++++++ .../docker-entrypoint.sh | 16 + .../4.20.0-docker-go-1.20.12/settings.json | 24 ++ .../Dockerfile | 379 +++++++++++++++++ .../docker-entrypoint.sh | 27 ++ .../settings.json | 24 ++ variants/4.20.0-docker-rootless/Dockerfile | 358 ++++++++++++++++ .../docker-entrypoint.sh | 27 ++ variants/4.20.0-docker-rootless/settings.json | 24 ++ variants/4.20.0-docker/Dockerfile | 314 ++++++++++++++ variants/4.20.0-docker/docker-entrypoint.sh | 16 + variants/4.20.0-docker/settings.json | 24 ++ variants/4.20.0/Dockerfile | 133 ++++++ variants/4.20.0/docker-entrypoint.sh | 13 + variants/4.20.0/settings.json | 24 ++ 18 files changed, 2143 insertions(+), 9 deletions(-) create mode 100644 variants/4.20.0-docker-go-1.20.12/Dockerfile create mode 100644 variants/4.20.0-docker-go-1.20.12/docker-entrypoint.sh create mode 100644 variants/4.20.0-docker-go-1.20.12/settings.json create mode 100644 variants/4.20.0-docker-rootless-go-1.20.12/Dockerfile create mode 100644 variants/4.20.0-docker-rootless-go-1.20.12/docker-entrypoint.sh create mode 100644 variants/4.20.0-docker-rootless-go-1.20.12/settings.json create mode 100644 variants/4.20.0-docker-rootless/Dockerfile create mode 100644 variants/4.20.0-docker-rootless/docker-entrypoint.sh create mode 100644 variants/4.20.0-docker-rootless/settings.json create mode 100644 variants/4.20.0-docker/Dockerfile create mode 100644 variants/4.20.0-docker/docker-entrypoint.sh create mode 100644 variants/4.20.0-docker/settings.json create mode 100644 variants/4.20.0/Dockerfile create mode 100644 variants/4.20.0/docker-entrypoint.sh create mode 100644 variants/4.20.0/settings.json diff --git a/.github/workflows/ci-master-pr.yml b/.github/workflows/ci-master-pr.yml index 715eb7e4..6fbef6a8 100644 --- a/.github/workflows/ci-master-pr.yml +++ b/.github/workflows/ci-master-pr.yml @@ -33,6 +33,394 @@ jobs: run: | git diff --exit-code + build-4-20-0: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + + - name: Display system info (linux) + run: | + set -e + hostname + whoami + cat /etc/*release + lscpu + free + df -h + pwd + docker info + docker version + + # See: https://github.com/docker/build-push-action/blob/v2.6.1/docs/advanced/cache.md#github-cache + - name: Set up QEMU + uses: docker/setup-qemu-action@v2 + + - name: Set up Docker Buildx + id: buildx + uses: docker/setup-buildx-action@v2 + + - name: Cache Docker layers + uses: actions/cache@v3 + with: + path: /tmp/.buildx-cache + key: ${{ runner.os }}-buildx-4.20.0-${{ github.sha }} + restore-keys: | + ${{ runner.os }}-buildx-4.20.0- + ${{ runner.os }}-buildx- + + - name: Login to Docker Hub registry + # Run on master and tags + if: github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/') + uses: docker/login-action@v2 + with: + username: ${{ secrets.DOCKERHUB_REGISTRY_USER }} + password: ${{ secrets.DOCKERHUB_REGISTRY_PASSWORD }} + + # This step generates the docker tags + - name: Prepare + id: prep-4-20-0 + run: | + set -e + + # Get ref, i.e. from refs/heads/, or from refs/tags/. E.g. 'master' or 'v0.0.0' + REF=$( echo "${GITHUB_REF}" | rev | cut -d '/' -f 1 | rev ) + + # Get short commit hash E.g. 'abc0123' + SHA=$( echo "${GITHUB_SHA}" | cut -c1-7 ) + + # Generate docker image tags + # E.g. 'v0.0.0-' and 'v0.0.0-abc0123-' + # E.g. 'master-' and 'master-abc0123-' + VARIANT="4.20.0" + REF_VARIANT="${REF}-${VARIANT}" + REF_SHA_VARIANT="${REF}-${SHA}-${VARIANT}" + + # Pass variables to next step + echo "VARIANT_BUILD_DIR=$VARIANT_BUILD_DIR" >> $GITHUB_OUTPUT + echo "VARIANT=$VARIANT" >> $GITHUB_OUTPUT + echo "REF_VARIANT=$REF_VARIANT" >> $GITHUB_OUTPUT + echo "REF_SHA_VARIANT=$REF_SHA_VARIANT" >> $GITHUB_OUTPUT + + - name: 4.20.0 - Build (PRs) + # Run only on pull requests + if: github.event_name == 'pull_request' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0 + platforms: linux/amd64 + push: false + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0 - Build and push (master) + # Run only on master + if: github.ref == 'refs/heads/master' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0 + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0 - Build and push (release) + if: startsWith(github.ref, 'refs/tags/') + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0 + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0.outputs.VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0.outputs.REF_SHA_VARIANT }} + ${{ github.repository }}:latest + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + # This step generates the docker tags + - name: Prepare + id: prep-4-20-0-docker + run: | + set -e + + # Get ref, i.e. from refs/heads/, or from refs/tags/. E.g. 'master' or 'v0.0.0' + REF=$( echo "${GITHUB_REF}" | rev | cut -d '/' -f 1 | rev ) + + # Get short commit hash E.g. 'abc0123' + SHA=$( echo "${GITHUB_SHA}" | cut -c1-7 ) + + # Generate docker image tags + # E.g. 'v0.0.0-' and 'v0.0.0-abc0123-' + # E.g. 'master-' and 'master-abc0123-' + VARIANT="4.20.0-docker" + REF_VARIANT="${REF}-${VARIANT}" + REF_SHA_VARIANT="${REF}-${SHA}-${VARIANT}" + + # Pass variables to next step + echo "VARIANT_BUILD_DIR=$VARIANT_BUILD_DIR" >> $GITHUB_OUTPUT + echo "VARIANT=$VARIANT" >> $GITHUB_OUTPUT + echo "REF_VARIANT=$REF_VARIANT" >> $GITHUB_OUTPUT + echo "REF_SHA_VARIANT=$REF_SHA_VARIANT" >> $GITHUB_OUTPUT + + - name: 4.20.0-docker - Build (PRs) + # Run only on pull requests + if: github.event_name == 'pull_request' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker + platforms: linux/amd64 + push: false + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0-docker - Build and push (master) + # Run only on master + if: github.ref == 'refs/heads/master' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0-docker - Build and push (release) + if: startsWith(github.ref, 'refs/tags/') + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker.outputs.VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + # This step generates the docker tags + - name: Prepare + id: prep-4-20-0-docker-go-1-20-12 + run: | + set -e + + # Get ref, i.e. from refs/heads/, or from refs/tags/. E.g. 'master' or 'v0.0.0' + REF=$( echo "${GITHUB_REF}" | rev | cut -d '/' -f 1 | rev ) + + # Get short commit hash E.g. 'abc0123' + SHA=$( echo "${GITHUB_SHA}" | cut -c1-7 ) + + # Generate docker image tags + # E.g. 'v0.0.0-' and 'v0.0.0-abc0123-' + # E.g. 'master-' and 'master-abc0123-' + VARIANT="4.20.0-docker-go-1.20.12" + REF_VARIANT="${REF}-${VARIANT}" + REF_SHA_VARIANT="${REF}-${SHA}-${VARIANT}" + + # Pass variables to next step + echo "VARIANT_BUILD_DIR=$VARIANT_BUILD_DIR" >> $GITHUB_OUTPUT + echo "VARIANT=$VARIANT" >> $GITHUB_OUTPUT + echo "REF_VARIANT=$REF_VARIANT" >> $GITHUB_OUTPUT + echo "REF_SHA_VARIANT=$REF_SHA_VARIANT" >> $GITHUB_OUTPUT + + - name: 4.20.0-docker-go-1.20.12 - Build (PRs) + # Run only on pull requests + if: github.event_name == 'pull_request' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-go-1.20.12 + platforms: linux/amd64 + push: false + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-go-1-20-12.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-go-1-20-12.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0-docker-go-1.20.12 - Build and push (master) + # Run only on master + if: github.ref == 'refs/heads/master' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-go-1.20.12 + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-go-1-20-12.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-go-1-20-12.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0-docker-go-1.20.12 - Build and push (release) + if: startsWith(github.ref, 'refs/tags/') + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-go-1.20.12 + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-go-1-20-12.outputs.VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-go-1-20-12.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-go-1-20-12.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + # This step generates the docker tags + - name: Prepare + id: prep-4-20-0-docker-rootless + run: | + set -e + + # Get ref, i.e. from refs/heads/, or from refs/tags/. E.g. 'master' or 'v0.0.0' + REF=$( echo "${GITHUB_REF}" | rev | cut -d '/' -f 1 | rev ) + + # Get short commit hash E.g. 'abc0123' + SHA=$( echo "${GITHUB_SHA}" | cut -c1-7 ) + + # Generate docker image tags + # E.g. 'v0.0.0-' and 'v0.0.0-abc0123-' + # E.g. 'master-' and 'master-abc0123-' + VARIANT="4.20.0-docker-rootless" + REF_VARIANT="${REF}-${VARIANT}" + REF_SHA_VARIANT="${REF}-${SHA}-${VARIANT}" + + # Pass variables to next step + echo "VARIANT_BUILD_DIR=$VARIANT_BUILD_DIR" >> $GITHUB_OUTPUT + echo "VARIANT=$VARIANT" >> $GITHUB_OUTPUT + echo "REF_VARIANT=$REF_VARIANT" >> $GITHUB_OUTPUT + echo "REF_SHA_VARIANT=$REF_SHA_VARIANT" >> $GITHUB_OUTPUT + + - name: 4.20.0-docker-rootless - Build (PRs) + # Run only on pull requests + if: github.event_name == 'pull_request' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-rootless + platforms: linux/amd64 + push: false + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0-docker-rootless - Build and push (master) + # Run only on master + if: github.ref == 'refs/heads/master' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-rootless + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0-docker-rootless - Build and push (release) + if: startsWith(github.ref, 'refs/tags/') + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-rootless + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless.outputs.VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + # This step generates the docker tags + - name: Prepare + id: prep-4-20-0-docker-rootless-go-1-20-12 + run: | + set -e + + # Get ref, i.e. from refs/heads/, or from refs/tags/. E.g. 'master' or 'v0.0.0' + REF=$( echo "${GITHUB_REF}" | rev | cut -d '/' -f 1 | rev ) + + # Get short commit hash E.g. 'abc0123' + SHA=$( echo "${GITHUB_SHA}" | cut -c1-7 ) + + # Generate docker image tags + # E.g. 'v0.0.0-' and 'v0.0.0-abc0123-' + # E.g. 'master-' and 'master-abc0123-' + VARIANT="4.20.0-docker-rootless-go-1.20.12" + REF_VARIANT="${REF}-${VARIANT}" + REF_SHA_VARIANT="${REF}-${SHA}-${VARIANT}" + + # Pass variables to next step + echo "VARIANT_BUILD_DIR=$VARIANT_BUILD_DIR" >> $GITHUB_OUTPUT + echo "VARIANT=$VARIANT" >> $GITHUB_OUTPUT + echo "REF_VARIANT=$REF_VARIANT" >> $GITHUB_OUTPUT + echo "REF_SHA_VARIANT=$REF_SHA_VARIANT" >> $GITHUB_OUTPUT + + - name: 4.20.0-docker-rootless-go-1.20.12 - Build (PRs) + # Run only on pull requests + if: github.event_name == 'pull_request' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-rootless-go-1.20.12 + platforms: linux/amd64 + push: false + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless-go-1-20-12.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless-go-1-20-12.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0-docker-rootless-go-1.20.12 - Build and push (master) + # Run only on master + if: github.ref == 'refs/heads/master' + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-rootless-go-1.20.12 + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless-go-1-20-12.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless-go-1-20-12.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + - name: 4.20.0-docker-rootless-go-1.20.12 - Build and push (release) + if: startsWith(github.ref, 'refs/tags/') + uses: docker/build-push-action@v3 + with: + context: variants/4.20.0-docker-rootless-go-1.20.12 + platforms: linux/amd64 + push: true + tags: | + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless-go-1-20-12.outputs.VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless-go-1-20-12.outputs.REF_VARIANT }} + ${{ github.repository }}:${{ steps.prep-4-20-0-docker-rootless-go-1-20-12.outputs.REF_SHA_VARIANT }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max + + # Temp fix + # https://github.com/docker/build-push-action/issues/252 + # https://github.com/moby/buildkit/issues/1896 + - name: Move cache + run: | + rm -rf /tmp/.buildx-cache + mv /tmp/.buildx-cache-new /tmp/.buildx-cache + build-4-19-1: runs-on: ubuntu-latest steps: @@ -141,7 +529,6 @@ jobs: ${{ github.repository }}:${{ steps.prep-4-19-1.outputs.VARIANT }} ${{ github.repository }}:${{ steps.prep-4-19-1.outputs.REF_VARIANT }} ${{ github.repository }}:${{ steps.prep-4-19-1.outputs.REF_SHA_VARIANT }} - ${{ github.repository }}:latest cache-from: type=local,src=/tmp/.buildx-cache cache-to: type=local,dest=/tmp/.buildx-cache-new,mode=max @@ -3519,6 +3906,7 @@ jobs: update-draft-release: needs: + - build-4-20-0 - build-4-19-1 - build-4-18-0 - build-4-17-1 @@ -3541,6 +3929,7 @@ jobs: publish-draft-release: needs: + - build-4-20-0 - build-4-19-1 - build-4-18-0 - build-4-17-1 @@ -3565,6 +3954,7 @@ jobs: update-dockerhub-description: needs: + - build-4-20-0 - build-4-19-1 - build-4-18-0 - build-4-17-1 diff --git a/README.md b/README.md index f9fc7466..19581a8c 100644 --- a/README.md +++ b/README.md @@ -10,7 +10,12 @@ Dockerized [`code-server`](https://github.com/coder/code-server). | Tag | Dockerfile Build Context | |:-------:|:---------:| -| `:4.19.1`, `:latest` | [View](variants/4.19.1) | +| `:4.20.0`, `:latest` | [View](variants/4.20.0) | +| `:4.20.0-docker` | [View](variants/4.20.0-docker) | +| `:4.20.0-docker-go-1.20.12` | [View](variants/4.20.0-docker-go-1.20.12) | +| `:4.20.0-docker-rootless` | [View](variants/4.20.0-docker-rootless) | +| `:4.20.0-docker-rootless-go-1.20.12` | [View](variants/4.20.0-docker-rootless-go-1.20.12) | +| `:4.19.1` | [View](variants/4.19.1) | | `:4.19.1-docker` | [View](variants/4.19.1-docker) | | `:4.19.1-docker-go-1.20.12` | [View](variants/4.19.1-docker-go-1.20.12) | | `:4.19.1-docker-rootless` | [View](variants/4.19.1-docker-rootless) | @@ -56,7 +61,7 @@ Dockerized [`code-server`](https://github.com/coder/code-server). | `:4.11.0-docker-rootless` | [View](variants/4.11.0-docker-rootless) | | `:4.11.0-docker-rootless-go-1.20.12` | [View](variants/4.11.0-docker-rootless-go-1.20.12) | -Base variants are based on `alpine`, and include `npm 8` and `nodejs 16` (to run `code-server`), `pwsh`, and basic tools. E.g. `4.19.1` +Base variants are based on `alpine`, and include `npm 8` and `nodejs 16` (to run `code-server`), `pwsh`, and basic tools. E.g. `4.20.0` Incremental variants include additional tools and their `code` extensions: @@ -69,7 +74,7 @@ Incremental variants include additional tools and their `code` extensions: ### Base variant(s) ```sh -docker run --name code-server --rm -it -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.19.1 +docker run --name code-server --rm -it -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.20.0 # code-server is now available at http://127.0.0.1:8080. To login, use the password in the config file: docker exec code-server sh -c 'cat ~/.config/code-server/config.yaml' ``` @@ -77,13 +82,13 @@ docker exec code-server sh -c 'cat ~/.config/code-server/config.yaml' To disable password authentication, use `--auth=none`: ```sh -docker run --name code-server --rm -it -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.19.1 --bind-addr=0.0.0.0:8080 --auth=none --disable-telemetry --disable-update-check +docker run --name code-server --rm -it -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.20.0 --bind-addr=0.0.0.0:8080 --auth=none --disable-telemetry --disable-update-check ``` ### `docker` variant(s) ```sh -docker run --name code-server --rm -it --privileged -v docker:/var/lib/docker -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.19.1-docker +docker run --name code-server --rm -it --privileged -v docker:/var/lib/docker -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.20.0-docker # code-server is now available at http://127.0.0.1:8080. To login, use the password in the config file: docker exec code-server sh -c 'cat ~/.config/code-server/config.yaml' ``` @@ -91,7 +96,7 @@ docker exec code-server sh -c 'cat ~/.config/code-server/config.yaml' To disable password authentication, use `--auth=none`: ```sh -docker run --name code-server --rm -it -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.19.1-docker --bind-addr=0.0.0.0:8080 --auth=none --disable-telemetry --disable-update-check +docker run --name code-server --rm -it -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.20.0-docker --bind-addr=0.0.0.0:8080 --auth=none --disable-telemetry --disable-update-check ``` #### docker buildx @@ -119,7 +124,7 @@ docker buildx build ... ### `docker-rootless` variant(s) ```sh -docker run --name code-server --rm -it --privileged -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.19.1-docker-rootless +docker run --name code-server --rm -it --privileged -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.20.0-docker-rootless # code-server is now available at http://127.0.0.1:8080. To login, use the password in the config file: docker exec code-server sh -c 'cat ~/.config/code-server/config.yaml' ``` @@ -127,7 +132,7 @@ docker exec code-server sh -c 'cat ~/.config/code-server/config.yaml' To start code-server without password authentication, use `--auth=none`: ```sh -docker run --name code-server --rm -it -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.19.1-docker-rootless --bind-addr=0.0.0.0:8080 --auth=none --disable-telemetry --disable-update-check +docker run --name code-server --rm -it -p 127.0.0.1:8080:8080 theohbrothers/docker-code-server:4.20.0-docker-rootless --bind-addr=0.0.0.0:8080 --auth=none --disable-telemetry --disable-update-check ``` To build multi-arch images using `docker buildx`, see [here](#docker-buildx). diff --git a/generate/definitions/versions.json b/generate/definitions/versions.json index f6d3c640..70b6f624 100644 --- a/generate/definitions/versions.json +++ b/generate/definitions/versions.json @@ -1,6 +1,7 @@ { "code-server": { "versions": [ + "4.20.0", "4.19.1", "4.18.0", "4.17.1", diff --git a/variants/4.20.0-docker-go-1.20.12/Dockerfile b/variants/4.20.0-docker-go-1.20.12/Dockerfile new file mode 100644 index 00000000..3e4bf73e --- /dev/null +++ b/variants/4.20.0-docker-go-1.20.12/Dockerfile @@ -0,0 +1,335 @@ +# syntax=docker/dockerfile:1 +FROM alpine:3.17 +ARG TARGETPLATFORM +ARG TARGETOS +ARG TARGETARCH +ARG TARGETVARIANT +ARG BUILDPLATFORM +ARG BUILDOS +ARG BUILDARCH +ARG BUILDVARIANT +RUN set -eu; \ + echo "TARGETPLATFORM=$TARGETPLATFORM"; \ + echo "TARGETOS=$TARGETOS"; \ + echo "TARGETARCH=$TARGETARCH"; \ + echo "TARGETVARIANT=$TARGETVARIANT"; \ + echo "BUILDPLATFORM=$BUILDPLATFORM"; \ + echo "BUILDOS=$BUILDOS"; \ + echo "BUILDARCH=$BUILDARCH"; \ + echo "BUILDVARIANT=$BUILDVARIANT"; + +RUN --mount=type=secret,id=GITHUB_TOKEN \ + DEPS='alpine-sdk bash libstdc++ libc6-compat python3' \ + && apk add --no-cache $DEPS \ + # Constraint to npm 8, or else npm will fail with 'npm ERR! python is not a valid npm option'. See: https://stackoverflow.com/questions/74522956/python-is-not-a-valid-npm-option and https://jubianchi.github.io/semver-check/#/~8/8 + && apk add --no-cache --repository=https://dl-cdn.alpinelinux.org/alpine/v3.15/main npm~8 && apk add --no-cache nodejs~18 krb5-dev \ + && npm config set python python3 \ + && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --global code-server@4.20.0 --unsafe-perm \ + # Fix missing dependencies. See: https://github.com/coder/code-server/issues/5530 + && cd /usr/local/lib/node_modules/code-server/lib/vscode && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --legacy-peer-deps \ + && code-server --version \ + && apk del $DEPS + +# Install tools +RUN apk add --no-cache bash bash-completion ca-certificates curl gnupg git git-lfs github-cli iotop jq less lsblk make nano openssh-client openssl p7zip rsync tree yq + +# Install pwsh +# See: https://learn.microsoft.com/en-us/powershell/scripting/install/install-alpine?view=powershell-7.3 +RUN apk add --no-cache \ + ca-certificates \ + less \ + ncurses-terminfo-base \ + krb5-libs \ + libgcc \ + libintl \ + libssl1.1 \ + libstdc++ \ + tzdata \ + userspace-rcu \ + zlib \ + icu-libs \ + curl +RUN apk -X https://dl-cdn.alpinelinux.org/alpine/edge/main add --no-cache lttng-ust +RUN mkdir -p /opt/microsoft/powershell/7 \ + && curl -sSL https://github.com/PowerShell/PowerShell/releases/download/v7.2.8/powershell-7.2.8-linux-alpine-x64.tar.gz | tar -C /opt/microsoft/powershell/7 -zxf - \ + && chmod +x /opt/microsoft/powershell/7/pwsh \ + && ln -s /opt/microsoft/powershell/7/pwsh /usr/bin/pwsh +# Disable telemetry for powershell 7.0.0 and above and .NET core: https://github.com/PowerShell/PowerShell/issues/16234#issuecomment-942139350 +ENV POWERSHELL_CLI_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_UPDATECHECK=Off +ENV POWERSHELL_UPDATECHECK_OPTOUT=1 +ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 +ENV DOTNET_TELEMETRY_OPTOUT=1 +ENV COMPlus_EnableDiagnostics=0 +RUN pwsh -version +# Install pwsh module(s) +RUN pwsh -c 'Install-Module Pester -Force -Scope AllUsers -MinimumVersion 4.0.0 -MaximumVersion 4.10.1 -ErrorAction Stop' + +RUN apk add --no-cache sudo +RUN adduser -u 1000 --gecos '' -D user +RUN echo 'user ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/user + +# Install common extensions +USER user +# beautify - code formatter +RUN code-server --install-extension hookyqr.beautify@1.4.11 +# docker +RUN code-server --install-extension ms-azuretools.vscode-docker@1.18.0 +# firefox +RUN code-server --install-extension firefox-devtools.vscode-firefox-debug@2.9.1 +# git +RUN code-server --install-extension donjayamanne.githistory@0.6.19 +RUN code-server --install-extension eamodio.gitlens@11.6.0 +# github. Install the latest compatible version +RUN code-server --install-extension github.vscode-pull-request-github +# gitlab +RUN code-server --install-extension gitlab.gitlab-workflow@3.60.0 +# jinja +RUN code-server --install-extension samuelcolvin.jinjahtml@0.16.0 +RUN code-server --install-extension wholroyd.jinja@0.0.8 +# kubernetes +RUN code-server --install-extension ms-kubernetes-tools.vscode-kubernetes-tools@1.3.11 +# markdown +RUN code-server --install-extension bierner.markdown-preview-github-styles@0.1.6 +RUN code-server --install-extension DavidAnson.vscode-markdownlint@0.43.2 +# prettier - code formatter +RUN code-server --install-extension esbenp.prettier-vscode@9.0.0 +# pwsh +RUN code-server --install-extension ms-vscode.powershell@2021.12.0 +# svg +RUN code-server --install-extension jock.svg@1.4.17 +# terraform +RUN code-server --install-extension hashicorp.terraform@2.14.0 +# toml +RUN code-server --install-extension bungcip.better-toml@0.3.2 +# vscode +RUN code-server --install-extension vscode-icons-team.vscode-icons@11.13.0 +# xml +RUN code-server --install-extension redhat.vscode-xml@0.18.0 +# yaml +RUN code-server --install-extension redhat.vscode-yaml@1.9.1 + +# Install docker +# See: https://github.com/moby/moby/blob/v20.10.22/project/PACKAGERS.md +# Install docker-cli dependencies +USER root +RUN apk add --no-cache \ + ca-certificates \ + git \ + # Workaround for golang 1.15 not producing static binaries. See: https://github.com/containerd/containerd/issues/5824 + libc6-compat \ + openssh-client +# Install dockerd dependencies +RUN apk add --no-cache \ + btrfs-progs \ + e2fsprogs \ + e2fsprogs-extra \ + ip6tables \ + iptables \ + openssl \ + pigz \ + shadow-uidmap \ + xfsprogs \ + xz \ + zfs +# Add userns-remap support. See: https://docs.docker.com/engine/security/userns-remap/ +RUN set -eux; \ + addgroup -S dockremap; \ + adduser -S -G dockremap dockremap; \ + echo 'dockremap:231072:65536' >> /etc/subuid; \ + echo 'dockremap:231072:65536' >> /etc/subgid +# Install docker +RUN set -eux; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL='https://download.docker.com/linux/static/stable/x86_64/docker-24.0.7.tgz'; \ + ;; \ + 'armhf') \ + URL='https://download.docker.com/linux/static/stable/armel/docker-24.0.7.tgz'; \ + ;; \ + 'armv7') \ + URL='https://download.docker.com/linux/static/stable/armhf/docker-24.0.7.tgz'; \ + ;; \ + 'aarch64') \ + URL='https://download.docker.com/linux/static/stable/aarch64/docker-24.0.7.tgz'; \ + ;; \ + # These architectures are no longer supported as of docker 20.10.x + # 'ppc64le') \ + # URL='https://download.docker.com/linux/static/stable/ppc64le/docker-24.0.7.tgz'; \ + # ;; \ + # 's390x') \ + # URL='https://download.docker.com/linux/static/stable/s390x/docker-24.0.7.tgz'; \ + # ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + wget -q "$URL" -O docker.tgz; \ + tar -xvf docker.tgz --strip-components=1 --no-same-owner --no-same-permissions -C /usr/local/bin; \ + ls -al /usr/local/bin; \ + rm -v docker.tgz; \ + containerd --version; \ + ctr --version; \ + docker --version; \ + dockerd --version; \ + runc --version +# Install bash completion +RUN wget -q https://raw.githubusercontent.com/docker/cli/master/contrib/completion/bash/docker -O /usr/share/bash-completion/completions/docker +# Post-install docker. See: https://docs.docker.com/engine/install/linux-postinstall/ +RUN set -eux; \ + addgroup docker; \ + adduser user docker; +VOLUME /var/lib/docker + +# Install docker-compose v1 (deprecated, but for backward compatibility) +USER root +RUN apk add --no-cache docker-compose + +# Install docker-compose +RUN set -eux; \ + DOCKER_COMPOSE_VERSION=v2.23.3; \ + case "$( uname -m )" in \ + 'x86') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64"; \ + SHA256=a836e807951db448f991f303cddcc9a4ec69f4a49d58bc7d536cb91c77c04c33; \ + ;; \ + 'x86_64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64"; \ + SHA256=a836e807951db448f991f303cddcc9a4ec69f4a49d58bc7d536cb91c77c04c33; \ + ;; \ + 'armhf') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-armv6"; \ + SHA256=b712693945360155842b578beace00effa723b604bfe1ccd6421645523e15d86; \ + ;; \ + 'armv7l') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-armv7"; \ + SHA256=4068bcbe1dd90034c8fe8d2c65b600ba793fc19bdb65db3c2dbf80b8a078de6c; \ + ;; \ + 'aarch64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-aarch64"; \ + SHA256=71f38f0923b8a9b80ad02c823ec3207d94677547aa5c618ca41b81d29fe6b9d9; \ + ;; \ + 'ppc64le') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-ppc64le"; \ + SHA256=6110b0d30baee103c98ca5503bea24acb9d52bd333a67d3bf3c57d383c585c62; \ + ;; \ + 'riscv64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-riscv64"; \ + SHA256=3ac26e5f272deb1364c9b8760af44c4dbd87d6faa42fc53bfec95885cfa8ae77; \ + ;; \ + 's390x') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-s390x"; \ + SHA256=2886dd4eddaea1eeb03537bdc596ec8947eb3ef7908c955284f8aad9170d3098; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + FILE=docker-compose; \ + wget -q "$URL" -O "$FILE"; \ + echo "$SHA256 $FILE" | sha256sum -c -; \ + mkdir -pv /usr/libexec/docker/cli-plugins; \ + mv -v docker-compose /usr/libexec/docker/cli-plugins/docker-compose; \ + chmod +x /usr/libexec/docker/cli-plugins/docker-compose; \ + docker compose version; \ + : + +# Install docker-buildx +RUN set -eux; \ + DOCKER_BUILDX_VERSION=v0.12.0; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64"; \ + SHA256=7c393b92c148a0ce26c76a2abc99960be1d1097f0471978d41dc51d0c1a4471e; \ + ;; \ + 'armhf') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6"; \ + SHA256=62d9162f526c3bb7f67768a5b0d81a8b3ad0371406dfc1f0775e4f62dfca7fe1; \ + ;; \ + 'armv7l') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7"; \ + SHA256=d941d6a5b072de775222d31d9f8467b4c1b1f56e3b08d1b78f828a9244c16464; \ + ;; \ + 'aarch64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64"; \ + SHA256=781caebb36551b035cb9dcfaf91088543d09c73c4a2549341e6417d86b8bbb50; \ + ;; \ + 'ppc64le') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le"; \ + SHA256=ab5bda4532528d6b0801c877999fce9def10c6a37624673fd13c668fdcde16b7; \ + ;; \ + 'riscv64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64"; \ + SHA256=a2b846919c44128c6db9165ad24545e7e10035b6f0ad01559fcfbb2a13017127; \ + ;; \ + 's390x') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x"; \ + SHA256=81c2ada65624e2ac6bb4123f3a3bb933d04cfb08aa45fc55dd201ba523d96d30; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + FILE=docker-buildx; \ + wget -q "$URL" -O "$FILE"; \ + echo "$SHA256 $FILE" | sha256sum -c -; \ + mkdir -pv /usr/libexec/docker/cli-plugins; \ + mv -v docker-buildx /usr/libexec/docker/cli-plugins/docker-buildx; \ + chmod +x /usr/libexec/docker/cli-plugins/docker-buildx; \ + docker buildx version; \ + : + +# Install binary tool(s) +RUN set -eux; \ + wget https://github.com/GoogleContainerTools/container-diff/releases/download/v0.17.0/container-diff-linux-amd64 -O container-diff; \ + sha256sum container-diff | grep '^818c219ce9f9670cd5c766b9da5036cf75bbf98bc99eb258f5e8f90e80367c88 '; \ + mv container-diff /usr/local/bin/container-diff; \ + chmod +x /usr/local/bin/container-diff; \ + container-diff version + +# Install golang binaries from official golang image +# See: https://go.dev/dl/ +USER root +ENV GOLANG_VERSION 1.20.12 +ENV PATH=/usr/local/go/bin:$PATH +COPY --from=golang:1.20.12-alpine /usr/local/go /usr/local/go +RUN go version + +# Install development tools +RUN set -eux; \ + export GOBIN=/usr/local/bin; \ + go install github.com/go-delve/delve/cmd/dlv@v1.20.1; \ + dlv version; \ + go install golang.org/x/tools/gopls@v0.11.0; \ + gopls version; \ + rm -rf ~/go; + +# Install extensions +USER user +RUN code-server --install-extension golang.go@0.38.0 + +# Add a default settings.json +USER user +COPY --chown=1000:1000 settings.json /home/user/.local/share/code-server/User/settings.json + +# Remove the default code-server config file created when extensions are installed +USER user +RUN rm -fv ~/.config/code-server/config.yaml + +# Symlink code to code-server +USER root +RUN ln -sfn /usr/local/bin/code-server /usr/local/bin/code + +USER root +COPY docker-entrypoint.sh /docker-entrypoint.sh +RUN chmod +x /docker-entrypoint.sh + +ENV LANG=en_US.UTF-8 +USER user +WORKDIR /home/user +ENTRYPOINT [ "/docker-entrypoint.sh" ] +CMD [ "--bind-addr=0.0.0.0:8080", "--disable-telemetry", "--disable-update-check" ] diff --git a/variants/4.20.0-docker-go-1.20.12/docker-entrypoint.sh b/variants/4.20.0-docker-go-1.20.12/docker-entrypoint.sh new file mode 100644 index 00000000..7e387902 --- /dev/null +++ b/variants/4.20.0-docker-go-1.20.12/docker-entrypoint.sh @@ -0,0 +1,16 @@ +#!/bin/sh +set -eu + +# See: https://github.com/docker-library/official-images#consistency +if [ "$#" -eq 0 ] || [ "${1#-}" != "$1" ]; then + set -- code-server "$@" +fi +if [ "$1" = 'code-server' ]; then + echo "Starting dockerd" + sudo rm -fv /var/run/docker.pid + sudo dockerd & + + echo "Starting code-server" + exec code-server "$@" +fi +exec "$@" diff --git a/variants/4.20.0-docker-go-1.20.12/settings.json b/variants/4.20.0-docker-go-1.20.12/settings.json new file mode 100644 index 00000000..2c0c4607 --- /dev/null +++ b/variants/4.20.0-docker-go-1.20.12/settings.json @@ -0,0 +1,24 @@ +{ + "extensions.autoCheckUpdates": false, + "extensions.autoUpdate": false, + "extensions.ignoreRecommendations": true, + "extensions.showRecommendationsOnlyOnDemand": true, + "npm.fetchOnlinePackageInfo": false, + "telemetry.enableTelemetry": false, + "telemetry.telemetryLevel": "off", + "typescript.check.npmIsInstalled": false, + "typescript.disableAutomaticTypeAcquisition": false, + "typescript.surveys.enabled": false, + "workbench.enableExperiments": false, + "workbench.iconTheme": "vscode-icons", + "workbench.settings.enableNaturalLanguageSearch": false, + "workbench.startupEditor": "none", + "workbench.welcomePage.walkthroughs.openOnInstall": false, + "workbench.tips.enabled": false, + + // Extension-specific + "gitlens.showWelcomeOnInstall": false, + "gitlens.showWhatsNewAfterUpgrades": false, + "redhat.telemetry.enabled": false, + "vsicons.dontShowNewVersionMessage": true, +} \ No newline at end of file diff --git a/variants/4.20.0-docker-rootless-go-1.20.12/Dockerfile b/variants/4.20.0-docker-rootless-go-1.20.12/Dockerfile new file mode 100644 index 00000000..0832c742 --- /dev/null +++ b/variants/4.20.0-docker-rootless-go-1.20.12/Dockerfile @@ -0,0 +1,379 @@ +# syntax=docker/dockerfile:1 +FROM alpine:3.17 +ARG TARGETPLATFORM +ARG TARGETOS +ARG TARGETARCH +ARG TARGETVARIANT +ARG BUILDPLATFORM +ARG BUILDOS +ARG BUILDARCH +ARG BUILDVARIANT +RUN set -eu; \ + echo "TARGETPLATFORM=$TARGETPLATFORM"; \ + echo "TARGETOS=$TARGETOS"; \ + echo "TARGETARCH=$TARGETARCH"; \ + echo "TARGETVARIANT=$TARGETVARIANT"; \ + echo "BUILDPLATFORM=$BUILDPLATFORM"; \ + echo "BUILDOS=$BUILDOS"; \ + echo "BUILDARCH=$BUILDARCH"; \ + echo "BUILDVARIANT=$BUILDVARIANT"; + +RUN --mount=type=secret,id=GITHUB_TOKEN \ + DEPS='alpine-sdk bash libstdc++ libc6-compat python3' \ + && apk add --no-cache $DEPS \ + # Constraint to npm 8, or else npm will fail with 'npm ERR! python is not a valid npm option'. See: https://stackoverflow.com/questions/74522956/python-is-not-a-valid-npm-option and https://jubianchi.github.io/semver-check/#/~8/8 + && apk add --no-cache --repository=https://dl-cdn.alpinelinux.org/alpine/v3.15/main npm~8 && apk add --no-cache nodejs~18 krb5-dev \ + && npm config set python python3 \ + && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --global code-server@4.20.0 --unsafe-perm \ + # Fix missing dependencies. See: https://github.com/coder/code-server/issues/5530 + && cd /usr/local/lib/node_modules/code-server/lib/vscode && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --legacy-peer-deps \ + && code-server --version \ + && apk del $DEPS + +# Install tools +RUN apk add --no-cache bash bash-completion ca-certificates curl gnupg git git-lfs github-cli iotop jq less lsblk make nano openssh-client openssl p7zip rsync tree yq + +# Install pwsh +# See: https://learn.microsoft.com/en-us/powershell/scripting/install/install-alpine?view=powershell-7.3 +RUN apk add --no-cache \ + ca-certificates \ + less \ + ncurses-terminfo-base \ + krb5-libs \ + libgcc \ + libintl \ + libssl1.1 \ + libstdc++ \ + tzdata \ + userspace-rcu \ + zlib \ + icu-libs \ + curl +RUN apk -X https://dl-cdn.alpinelinux.org/alpine/edge/main add --no-cache lttng-ust +RUN mkdir -p /opt/microsoft/powershell/7 \ + && curl -sSL https://github.com/PowerShell/PowerShell/releases/download/v7.2.8/powershell-7.2.8-linux-alpine-x64.tar.gz | tar -C /opt/microsoft/powershell/7 -zxf - \ + && chmod +x /opt/microsoft/powershell/7/pwsh \ + && ln -s /opt/microsoft/powershell/7/pwsh /usr/bin/pwsh +# Disable telemetry for powershell 7.0.0 and above and .NET core: https://github.com/PowerShell/PowerShell/issues/16234#issuecomment-942139350 +ENV POWERSHELL_CLI_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_UPDATECHECK=Off +ENV POWERSHELL_UPDATECHECK_OPTOUT=1 +ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 +ENV DOTNET_TELEMETRY_OPTOUT=1 +ENV COMPlus_EnableDiagnostics=0 +RUN pwsh -version +# Install pwsh module(s) +RUN pwsh -c 'Install-Module Pester -Force -Scope AllUsers -MinimumVersion 4.0.0 -MaximumVersion 4.10.1 -ErrorAction Stop' + +RUN apk add --no-cache sudo +RUN adduser -u 1000 --gecos '' -D user +RUN echo 'user ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/user + +# Install common extensions +USER user +# beautify - code formatter +RUN code-server --install-extension hookyqr.beautify@1.4.11 +# docker +RUN code-server --install-extension ms-azuretools.vscode-docker@1.18.0 +# firefox +RUN code-server --install-extension firefox-devtools.vscode-firefox-debug@2.9.1 +# git +RUN code-server --install-extension donjayamanne.githistory@0.6.19 +RUN code-server --install-extension eamodio.gitlens@11.6.0 +# github. Install the latest compatible version +RUN code-server --install-extension github.vscode-pull-request-github +# gitlab +RUN code-server --install-extension gitlab.gitlab-workflow@3.60.0 +# jinja +RUN code-server --install-extension samuelcolvin.jinjahtml@0.16.0 +RUN code-server --install-extension wholroyd.jinja@0.0.8 +# kubernetes +RUN code-server --install-extension ms-kubernetes-tools.vscode-kubernetes-tools@1.3.11 +# markdown +RUN code-server --install-extension bierner.markdown-preview-github-styles@0.1.6 +RUN code-server --install-extension DavidAnson.vscode-markdownlint@0.43.2 +# prettier - code formatter +RUN code-server --install-extension esbenp.prettier-vscode@9.0.0 +# pwsh +RUN code-server --install-extension ms-vscode.powershell@2021.12.0 +# svg +RUN code-server --install-extension jock.svg@1.4.17 +# terraform +RUN code-server --install-extension hashicorp.terraform@2.14.0 +# toml +RUN code-server --install-extension bungcip.better-toml@0.3.2 +# vscode +RUN code-server --install-extension vscode-icons-team.vscode-icons@11.13.0 +# xml +RUN code-server --install-extension redhat.vscode-xml@0.18.0 +# yaml +RUN code-server --install-extension redhat.vscode-yaml@1.9.1 + +# Install docker +# See: https://github.com/moby/moby/blob/v20.10.22/project/PACKAGERS.md +# Install docker-cli dependencies +USER root +RUN apk add --no-cache \ + ca-certificates \ + git \ + # Workaround for golang 1.15 not producing static binaries. See: https://github.com/containerd/containerd/issues/5824 + libc6-compat \ + openssh-client +# Install dockerd dependencies +RUN apk add --no-cache \ + btrfs-progs \ + e2fsprogs \ + e2fsprogs-extra \ + ip6tables \ + iptables \ + openssl \ + pigz \ + shadow-uidmap \ + xfsprogs \ + xz \ + zfs +# Add userns-remap support. See: https://docs.docker.com/engine/security/userns-remap/ +RUN set -eux; \ + addgroup -S dockremap; \ + adduser -S -G dockremap dockremap; \ + echo 'dockremap:231072:65536' >> /etc/subuid; \ + echo 'dockremap:231072:65536' >> /etc/subgid +# Install docker +RUN set -eux; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL='https://download.docker.com/linux/static/stable/x86_64/docker-24.0.7.tgz'; \ + ;; \ + 'armhf') \ + URL='https://download.docker.com/linux/static/stable/armel/docker-24.0.7.tgz'; \ + ;; \ + 'armv7') \ + URL='https://download.docker.com/linux/static/stable/armhf/docker-24.0.7.tgz'; \ + ;; \ + 'aarch64') \ + URL='https://download.docker.com/linux/static/stable/aarch64/docker-24.0.7.tgz'; \ + ;; \ + # These architectures are no longer supported as of docker 20.10.x + # 'ppc64le') \ + # URL='https://download.docker.com/linux/static/stable/ppc64le/docker-24.0.7.tgz'; \ + # ;; \ + # 's390x') \ + # URL='https://download.docker.com/linux/static/stable/s390x/docker-24.0.7.tgz'; \ + # ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + wget -q "$URL" -O docker.tgz; \ + tar -xvf docker.tgz --strip-components=1 --no-same-owner --no-same-permissions -C /usr/local/bin; \ + ls -al /usr/local/bin; \ + rm -v docker.tgz; \ + containerd --version; \ + ctr --version; \ + docker --version; \ + dockerd --version; \ + runc --version +# Install bash completion +RUN wget -q https://raw.githubusercontent.com/docker/cli/master/contrib/completion/bash/docker -O /usr/share/bash-completion/completions/docker +# Post-install docker. See: https://docs.docker.com/engine/install/linux-postinstall/ +RUN set -eux; \ + addgroup docker; \ + adduser user docker; +VOLUME /var/lib/docker + +# Install rootless docker. See: https://docs.docker.com/engine/security/rootless/ +USER root +RUN apk add --no-cache iproute2 fuse-overlayfs +RUN set -eux; \ + echo user:100000:65536 >> /etc/subuid; \ + echo user:100000:65536 >> /etc/subgid +RUN set -eux; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL='https://download.docker.com/linux/static/stable/x86_64/docker-rootless-extras-24.0.7.tgz'; \ + ;; \ + 'aarch64') \ + URL='https://download.docker.com/linux/static/stable/aarch64/docker-rootless-extras-24.0.7.tgz'; \ + ;; \ + 'armv7') \ + URL='https://download.docker.com/linux/static/stable/armhf/docker-rootless-extras-24.0.7.tgz'; \ + ;; \ + 'aarch64') \ + URL='https://download.docker.com/linux/static/stable/aarch64/docker-rootless-extras-24.0.7.tgz'; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + wget -q "$URL" -O docker-rootless-extras.tgz; \ + tar -xvf docker-rootless-extras.tgz --strip-components=1 --no-same-owner --no-same-permissions -C /usr/local/bin \ + 'docker-rootless-extras/rootlesskit' \ + 'docker-rootless-extras/rootlesskit-docker-proxy' \ + 'docker-rootless-extras/vpnkit' \ + ; \ + ls -al /usr/local/bin; \ + rm -v docker-rootless-extras.tgz; \ + rootlesskit --version; \ + vpnkit --version +# Create XDG_RUNTIME_DIR +RUN mkdir /run/user && chmod 1777 /run/user +# Create /var/lib/docker +RUN mkdir -p /home/user/.local/share/docker && chown user:user /home/user/.local/share/docker +VOLUME /home/user/.local/share/docker +# Set env vars +ENV XDG_RUNTIME_DIR=/run/user/1000 +ENV DOCKER_HOST=unix:///run/user/1000/docker.sock + +# Install docker-compose v1 (deprecated, but for backward compatibility) +USER root +RUN apk add --no-cache docker-compose + +# Install docker-compose +RUN set -eux; \ + DOCKER_COMPOSE_VERSION=v2.23.3; \ + case "$( uname -m )" in \ + 'x86') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64"; \ + SHA256=a836e807951db448f991f303cddcc9a4ec69f4a49d58bc7d536cb91c77c04c33; \ + ;; \ + 'x86_64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64"; \ + SHA256=a836e807951db448f991f303cddcc9a4ec69f4a49d58bc7d536cb91c77c04c33; \ + ;; \ + 'armhf') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-armv6"; \ + SHA256=b712693945360155842b578beace00effa723b604bfe1ccd6421645523e15d86; \ + ;; \ + 'armv7l') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-armv7"; \ + SHA256=4068bcbe1dd90034c8fe8d2c65b600ba793fc19bdb65db3c2dbf80b8a078de6c; \ + ;; \ + 'aarch64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-aarch64"; \ + SHA256=71f38f0923b8a9b80ad02c823ec3207d94677547aa5c618ca41b81d29fe6b9d9; \ + ;; \ + 'ppc64le') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-ppc64le"; \ + SHA256=6110b0d30baee103c98ca5503bea24acb9d52bd333a67d3bf3c57d383c585c62; \ + ;; \ + 'riscv64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-riscv64"; \ + SHA256=3ac26e5f272deb1364c9b8760af44c4dbd87d6faa42fc53bfec95885cfa8ae77; \ + ;; \ + 's390x') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-s390x"; \ + SHA256=2886dd4eddaea1eeb03537bdc596ec8947eb3ef7908c955284f8aad9170d3098; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + FILE=docker-compose; \ + wget -q "$URL" -O "$FILE"; \ + echo "$SHA256 $FILE" | sha256sum -c -; \ + mkdir -pv /usr/libexec/docker/cli-plugins; \ + mv -v docker-compose /usr/libexec/docker/cli-plugins/docker-compose; \ + chmod +x /usr/libexec/docker/cli-plugins/docker-compose; \ + docker compose version; \ + : + +# Install docker-buildx +RUN set -eux; \ + DOCKER_BUILDX_VERSION=v0.12.0; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64"; \ + SHA256=7c393b92c148a0ce26c76a2abc99960be1d1097f0471978d41dc51d0c1a4471e; \ + ;; \ + 'armhf') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6"; \ + SHA256=62d9162f526c3bb7f67768a5b0d81a8b3ad0371406dfc1f0775e4f62dfca7fe1; \ + ;; \ + 'armv7l') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7"; \ + SHA256=d941d6a5b072de775222d31d9f8467b4c1b1f56e3b08d1b78f828a9244c16464; \ + ;; \ + 'aarch64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64"; \ + SHA256=781caebb36551b035cb9dcfaf91088543d09c73c4a2549341e6417d86b8bbb50; \ + ;; \ + 'ppc64le') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le"; \ + SHA256=ab5bda4532528d6b0801c877999fce9def10c6a37624673fd13c668fdcde16b7; \ + ;; \ + 'riscv64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64"; \ + SHA256=a2b846919c44128c6db9165ad24545e7e10035b6f0ad01559fcfbb2a13017127; \ + ;; \ + 's390x') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x"; \ + SHA256=81c2ada65624e2ac6bb4123f3a3bb933d04cfb08aa45fc55dd201ba523d96d30; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + FILE=docker-buildx; \ + wget -q "$URL" -O "$FILE"; \ + echo "$SHA256 $FILE" | sha256sum -c -; \ + mkdir -pv /usr/libexec/docker/cli-plugins; \ + mv -v docker-buildx /usr/libexec/docker/cli-plugins/docker-buildx; \ + chmod +x /usr/libexec/docker/cli-plugins/docker-buildx; \ + docker buildx version; \ + : + +# Install binary tool(s) +RUN set -eux; \ + wget https://github.com/GoogleContainerTools/container-diff/releases/download/v0.17.0/container-diff-linux-amd64 -O container-diff; \ + sha256sum container-diff | grep '^818c219ce9f9670cd5c766b9da5036cf75bbf98bc99eb258f5e8f90e80367c88 '; \ + mv container-diff /usr/local/bin/container-diff; \ + chmod +x /usr/local/bin/container-diff; \ + container-diff version + +# Install golang binaries from official golang image +# See: https://go.dev/dl/ +USER root +ENV GOLANG_VERSION 1.20.12 +ENV PATH=/usr/local/go/bin:$PATH +COPY --from=golang:1.20.12-alpine /usr/local/go /usr/local/go +RUN go version + +# Install development tools +RUN set -eux; \ + export GOBIN=/usr/local/bin; \ + go install github.com/go-delve/delve/cmd/dlv@v1.20.1; \ + dlv version; \ + go install golang.org/x/tools/gopls@v0.11.0; \ + gopls version; \ + rm -rf ~/go; + +# Install extensions +USER user +RUN code-server --install-extension golang.go@0.38.0 + +# Add a default settings.json +USER user +COPY --chown=1000:1000 settings.json /home/user/.local/share/code-server/User/settings.json + +# Remove the default code-server config file created when extensions are installed +USER user +RUN rm -fv ~/.config/code-server/config.yaml + +# Symlink code to code-server +USER root +RUN ln -sfn /usr/local/bin/code-server /usr/local/bin/code + +USER root +COPY docker-entrypoint.sh /docker-entrypoint.sh +RUN chmod +x /docker-entrypoint.sh + +ENV LANG=en_US.UTF-8 +USER user +WORKDIR /home/user +ENTRYPOINT [ "/docker-entrypoint.sh" ] +CMD [ "--bind-addr=0.0.0.0:8080", "--disable-telemetry", "--disable-update-check" ] diff --git a/variants/4.20.0-docker-rootless-go-1.20.12/docker-entrypoint.sh b/variants/4.20.0-docker-rootless-go-1.20.12/docker-entrypoint.sh new file mode 100644 index 00000000..e3f7fd09 --- /dev/null +++ b/variants/4.20.0-docker-rootless-go-1.20.12/docker-entrypoint.sh @@ -0,0 +1,27 @@ +#!/bin/sh +set -eu + +# See: https://github.com/docker-library/official-images#consistency +if [ "$#" -eq 0 ] || [ "${1#-}" != "$1" ]; then + set -- code-server "$@" +fi +if [ "$1" = 'code-server' ]; then + # Start rootless docker + # See: https://github.com/moby/moby/blob/v20.10.22/contrib/dockerd-rootless.sh + # See: https://github.com/docker-library/docker/blob/master/20.10/dind/dockerd-entrypoint.sh + echo "Starting rootless dockerd" + rootlesskit \ + --net="${DOCKERD_ROOTLESS_ROOTLESSKIT_NET:-vpnkit}" \ + --mtu="${DOCKERD_ROOTLESS_ROOTLESSKIT_MTU:-1500}" \ + --disable-host-loopback \ + --port-driver="${DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER:-builtin}" \ + --copy-up=/etc \ + --copy-up=/run \ + --propagation=rslave \ + ${DOCKERD_ROOTLESS_ROOTLESSKIT_FLAGS:-} \ + dockerd & + + echo "Starting code-server" + exec code-server "$@" +fi +exec "$@" diff --git a/variants/4.20.0-docker-rootless-go-1.20.12/settings.json b/variants/4.20.0-docker-rootless-go-1.20.12/settings.json new file mode 100644 index 00000000..2c0c4607 --- /dev/null +++ b/variants/4.20.0-docker-rootless-go-1.20.12/settings.json @@ -0,0 +1,24 @@ +{ + "extensions.autoCheckUpdates": false, + "extensions.autoUpdate": false, + "extensions.ignoreRecommendations": true, + "extensions.showRecommendationsOnlyOnDemand": true, + "npm.fetchOnlinePackageInfo": false, + "telemetry.enableTelemetry": false, + "telemetry.telemetryLevel": "off", + "typescript.check.npmIsInstalled": false, + "typescript.disableAutomaticTypeAcquisition": false, + "typescript.surveys.enabled": false, + "workbench.enableExperiments": false, + "workbench.iconTheme": "vscode-icons", + "workbench.settings.enableNaturalLanguageSearch": false, + "workbench.startupEditor": "none", + "workbench.welcomePage.walkthroughs.openOnInstall": false, + "workbench.tips.enabled": false, + + // Extension-specific + "gitlens.showWelcomeOnInstall": false, + "gitlens.showWhatsNewAfterUpgrades": false, + "redhat.telemetry.enabled": false, + "vsicons.dontShowNewVersionMessage": true, +} \ No newline at end of file diff --git a/variants/4.20.0-docker-rootless/Dockerfile b/variants/4.20.0-docker-rootless/Dockerfile new file mode 100644 index 00000000..b3fcfc8b --- /dev/null +++ b/variants/4.20.0-docker-rootless/Dockerfile @@ -0,0 +1,358 @@ +# syntax=docker/dockerfile:1 +FROM alpine:3.17 +ARG TARGETPLATFORM +ARG TARGETOS +ARG TARGETARCH +ARG TARGETVARIANT +ARG BUILDPLATFORM +ARG BUILDOS +ARG BUILDARCH +ARG BUILDVARIANT +RUN set -eu; \ + echo "TARGETPLATFORM=$TARGETPLATFORM"; \ + echo "TARGETOS=$TARGETOS"; \ + echo "TARGETARCH=$TARGETARCH"; \ + echo "TARGETVARIANT=$TARGETVARIANT"; \ + echo "BUILDPLATFORM=$BUILDPLATFORM"; \ + echo "BUILDOS=$BUILDOS"; \ + echo "BUILDARCH=$BUILDARCH"; \ + echo "BUILDVARIANT=$BUILDVARIANT"; + +RUN --mount=type=secret,id=GITHUB_TOKEN \ + DEPS='alpine-sdk bash libstdc++ libc6-compat python3' \ + && apk add --no-cache $DEPS \ + # Constraint to npm 8, or else npm will fail with 'npm ERR! python is not a valid npm option'. See: https://stackoverflow.com/questions/74522956/python-is-not-a-valid-npm-option and https://jubianchi.github.io/semver-check/#/~8/8 + && apk add --no-cache --repository=https://dl-cdn.alpinelinux.org/alpine/v3.15/main npm~8 && apk add --no-cache nodejs~18 krb5-dev \ + && npm config set python python3 \ + && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --global code-server@4.20.0 --unsafe-perm \ + # Fix missing dependencies. See: https://github.com/coder/code-server/issues/5530 + && cd /usr/local/lib/node_modules/code-server/lib/vscode && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --legacy-peer-deps \ + && code-server --version \ + && apk del $DEPS + +# Install tools +RUN apk add --no-cache bash bash-completion ca-certificates curl gnupg git git-lfs github-cli iotop jq less lsblk make nano openssh-client openssl p7zip rsync tree yq + +# Install pwsh +# See: https://learn.microsoft.com/en-us/powershell/scripting/install/install-alpine?view=powershell-7.3 +RUN apk add --no-cache \ + ca-certificates \ + less \ + ncurses-terminfo-base \ + krb5-libs \ + libgcc \ + libintl \ + libssl1.1 \ + libstdc++ \ + tzdata \ + userspace-rcu \ + zlib \ + icu-libs \ + curl +RUN apk -X https://dl-cdn.alpinelinux.org/alpine/edge/main add --no-cache lttng-ust +RUN mkdir -p /opt/microsoft/powershell/7 \ + && curl -sSL https://github.com/PowerShell/PowerShell/releases/download/v7.2.8/powershell-7.2.8-linux-alpine-x64.tar.gz | tar -C /opt/microsoft/powershell/7 -zxf - \ + && chmod +x /opt/microsoft/powershell/7/pwsh \ + && ln -s /opt/microsoft/powershell/7/pwsh /usr/bin/pwsh +# Disable telemetry for powershell 7.0.0 and above and .NET core: https://github.com/PowerShell/PowerShell/issues/16234#issuecomment-942139350 +ENV POWERSHELL_CLI_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_UPDATECHECK=Off +ENV POWERSHELL_UPDATECHECK_OPTOUT=1 +ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 +ENV DOTNET_TELEMETRY_OPTOUT=1 +ENV COMPlus_EnableDiagnostics=0 +RUN pwsh -version +# Install pwsh module(s) +RUN pwsh -c 'Install-Module Pester -Force -Scope AllUsers -MinimumVersion 4.0.0 -MaximumVersion 4.10.1 -ErrorAction Stop' + +RUN apk add --no-cache sudo +RUN adduser -u 1000 --gecos '' -D user +RUN echo 'user ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/user + +# Install common extensions +USER user +# beautify - code formatter +RUN code-server --install-extension hookyqr.beautify@1.4.11 +# docker +RUN code-server --install-extension ms-azuretools.vscode-docker@1.18.0 +# firefox +RUN code-server --install-extension firefox-devtools.vscode-firefox-debug@2.9.1 +# git +RUN code-server --install-extension donjayamanne.githistory@0.6.19 +RUN code-server --install-extension eamodio.gitlens@11.6.0 +# github. Install the latest compatible version +RUN code-server --install-extension github.vscode-pull-request-github +# gitlab +RUN code-server --install-extension gitlab.gitlab-workflow@3.60.0 +# jinja +RUN code-server --install-extension samuelcolvin.jinjahtml@0.16.0 +RUN code-server --install-extension wholroyd.jinja@0.0.8 +# kubernetes +RUN code-server --install-extension ms-kubernetes-tools.vscode-kubernetes-tools@1.3.11 +# markdown +RUN code-server --install-extension bierner.markdown-preview-github-styles@0.1.6 +RUN code-server --install-extension DavidAnson.vscode-markdownlint@0.43.2 +# prettier - code formatter +RUN code-server --install-extension esbenp.prettier-vscode@9.0.0 +# pwsh +RUN code-server --install-extension ms-vscode.powershell@2021.12.0 +# svg +RUN code-server --install-extension jock.svg@1.4.17 +# terraform +RUN code-server --install-extension hashicorp.terraform@2.14.0 +# toml +RUN code-server --install-extension bungcip.better-toml@0.3.2 +# vscode +RUN code-server --install-extension vscode-icons-team.vscode-icons@11.13.0 +# xml +RUN code-server --install-extension redhat.vscode-xml@0.18.0 +# yaml +RUN code-server --install-extension redhat.vscode-yaml@1.9.1 + +# Install docker +# See: https://github.com/moby/moby/blob/v20.10.22/project/PACKAGERS.md +# Install docker-cli dependencies +USER root +RUN apk add --no-cache \ + ca-certificates \ + git \ + # Workaround for golang 1.15 not producing static binaries. See: https://github.com/containerd/containerd/issues/5824 + libc6-compat \ + openssh-client +# Install dockerd dependencies +RUN apk add --no-cache \ + btrfs-progs \ + e2fsprogs \ + e2fsprogs-extra \ + ip6tables \ + iptables \ + openssl \ + pigz \ + shadow-uidmap \ + xfsprogs \ + xz \ + zfs +# Add userns-remap support. See: https://docs.docker.com/engine/security/userns-remap/ +RUN set -eux; \ + addgroup -S dockremap; \ + adduser -S -G dockremap dockremap; \ + echo 'dockremap:231072:65536' >> /etc/subuid; \ + echo 'dockremap:231072:65536' >> /etc/subgid +# Install docker +RUN set -eux; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL='https://download.docker.com/linux/static/stable/x86_64/docker-24.0.7.tgz'; \ + ;; \ + 'armhf') \ + URL='https://download.docker.com/linux/static/stable/armel/docker-24.0.7.tgz'; \ + ;; \ + 'armv7') \ + URL='https://download.docker.com/linux/static/stable/armhf/docker-24.0.7.tgz'; \ + ;; \ + 'aarch64') \ + URL='https://download.docker.com/linux/static/stable/aarch64/docker-24.0.7.tgz'; \ + ;; \ + # These architectures are no longer supported as of docker 20.10.x + # 'ppc64le') \ + # URL='https://download.docker.com/linux/static/stable/ppc64le/docker-24.0.7.tgz'; \ + # ;; \ + # 's390x') \ + # URL='https://download.docker.com/linux/static/stable/s390x/docker-24.0.7.tgz'; \ + # ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + wget -q "$URL" -O docker.tgz; \ + tar -xvf docker.tgz --strip-components=1 --no-same-owner --no-same-permissions -C /usr/local/bin; \ + ls -al /usr/local/bin; \ + rm -v docker.tgz; \ + containerd --version; \ + ctr --version; \ + docker --version; \ + dockerd --version; \ + runc --version +# Install bash completion +RUN wget -q https://raw.githubusercontent.com/docker/cli/master/contrib/completion/bash/docker -O /usr/share/bash-completion/completions/docker +# Post-install docker. See: https://docs.docker.com/engine/install/linux-postinstall/ +RUN set -eux; \ + addgroup docker; \ + adduser user docker; +VOLUME /var/lib/docker + +# Install rootless docker. See: https://docs.docker.com/engine/security/rootless/ +USER root +RUN apk add --no-cache iproute2 fuse-overlayfs +RUN set -eux; \ + echo user:100000:65536 >> /etc/subuid; \ + echo user:100000:65536 >> /etc/subgid +RUN set -eux; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL='https://download.docker.com/linux/static/stable/x86_64/docker-rootless-extras-24.0.7.tgz'; \ + ;; \ + 'aarch64') \ + URL='https://download.docker.com/linux/static/stable/aarch64/docker-rootless-extras-24.0.7.tgz'; \ + ;; \ + 'armv7') \ + URL='https://download.docker.com/linux/static/stable/armhf/docker-rootless-extras-24.0.7.tgz'; \ + ;; \ + 'aarch64') \ + URL='https://download.docker.com/linux/static/stable/aarch64/docker-rootless-extras-24.0.7.tgz'; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + wget -q "$URL" -O docker-rootless-extras.tgz; \ + tar -xvf docker-rootless-extras.tgz --strip-components=1 --no-same-owner --no-same-permissions -C /usr/local/bin \ + 'docker-rootless-extras/rootlesskit' \ + 'docker-rootless-extras/rootlesskit-docker-proxy' \ + 'docker-rootless-extras/vpnkit' \ + ; \ + ls -al /usr/local/bin; \ + rm -v docker-rootless-extras.tgz; \ + rootlesskit --version; \ + vpnkit --version +# Create XDG_RUNTIME_DIR +RUN mkdir /run/user && chmod 1777 /run/user +# Create /var/lib/docker +RUN mkdir -p /home/user/.local/share/docker && chown user:user /home/user/.local/share/docker +VOLUME /home/user/.local/share/docker +# Set env vars +ENV XDG_RUNTIME_DIR=/run/user/1000 +ENV DOCKER_HOST=unix:///run/user/1000/docker.sock + +# Install docker-compose v1 (deprecated, but for backward compatibility) +USER root +RUN apk add --no-cache docker-compose + +# Install docker-compose +RUN set -eux; \ + DOCKER_COMPOSE_VERSION=v2.23.3; \ + case "$( uname -m )" in \ + 'x86') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64"; \ + SHA256=a836e807951db448f991f303cddcc9a4ec69f4a49d58bc7d536cb91c77c04c33; \ + ;; \ + 'x86_64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64"; \ + SHA256=a836e807951db448f991f303cddcc9a4ec69f4a49d58bc7d536cb91c77c04c33; \ + ;; \ + 'armhf') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-armv6"; \ + SHA256=b712693945360155842b578beace00effa723b604bfe1ccd6421645523e15d86; \ + ;; \ + 'armv7l') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-armv7"; \ + SHA256=4068bcbe1dd90034c8fe8d2c65b600ba793fc19bdb65db3c2dbf80b8a078de6c; \ + ;; \ + 'aarch64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-aarch64"; \ + SHA256=71f38f0923b8a9b80ad02c823ec3207d94677547aa5c618ca41b81d29fe6b9d9; \ + ;; \ + 'ppc64le') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-ppc64le"; \ + SHA256=6110b0d30baee103c98ca5503bea24acb9d52bd333a67d3bf3c57d383c585c62; \ + ;; \ + 'riscv64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-riscv64"; \ + SHA256=3ac26e5f272deb1364c9b8760af44c4dbd87d6faa42fc53bfec95885cfa8ae77; \ + ;; \ + 's390x') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-s390x"; \ + SHA256=2886dd4eddaea1eeb03537bdc596ec8947eb3ef7908c955284f8aad9170d3098; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + FILE=docker-compose; \ + wget -q "$URL" -O "$FILE"; \ + echo "$SHA256 $FILE" | sha256sum -c -; \ + mkdir -pv /usr/libexec/docker/cli-plugins; \ + mv -v docker-compose /usr/libexec/docker/cli-plugins/docker-compose; \ + chmod +x /usr/libexec/docker/cli-plugins/docker-compose; \ + docker compose version; \ + : + +# Install docker-buildx +RUN set -eux; \ + DOCKER_BUILDX_VERSION=v0.12.0; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64"; \ + SHA256=7c393b92c148a0ce26c76a2abc99960be1d1097f0471978d41dc51d0c1a4471e; \ + ;; \ + 'armhf') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6"; \ + SHA256=62d9162f526c3bb7f67768a5b0d81a8b3ad0371406dfc1f0775e4f62dfca7fe1; \ + ;; \ + 'armv7l') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7"; \ + SHA256=d941d6a5b072de775222d31d9f8467b4c1b1f56e3b08d1b78f828a9244c16464; \ + ;; \ + 'aarch64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64"; \ + SHA256=781caebb36551b035cb9dcfaf91088543d09c73c4a2549341e6417d86b8bbb50; \ + ;; \ + 'ppc64le') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le"; \ + SHA256=ab5bda4532528d6b0801c877999fce9def10c6a37624673fd13c668fdcde16b7; \ + ;; \ + 'riscv64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64"; \ + SHA256=a2b846919c44128c6db9165ad24545e7e10035b6f0ad01559fcfbb2a13017127; \ + ;; \ + 's390x') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x"; \ + SHA256=81c2ada65624e2ac6bb4123f3a3bb933d04cfb08aa45fc55dd201ba523d96d30; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + FILE=docker-buildx; \ + wget -q "$URL" -O "$FILE"; \ + echo "$SHA256 $FILE" | sha256sum -c -; \ + mkdir -pv /usr/libexec/docker/cli-plugins; \ + mv -v docker-buildx /usr/libexec/docker/cli-plugins/docker-buildx; \ + chmod +x /usr/libexec/docker/cli-plugins/docker-buildx; \ + docker buildx version; \ + : + +# Install binary tool(s) +RUN set -eux; \ + wget https://github.com/GoogleContainerTools/container-diff/releases/download/v0.17.0/container-diff-linux-amd64 -O container-diff; \ + sha256sum container-diff | grep '^818c219ce9f9670cd5c766b9da5036cf75bbf98bc99eb258f5e8f90e80367c88 '; \ + mv container-diff /usr/local/bin/container-diff; \ + chmod +x /usr/local/bin/container-diff; \ + container-diff version + +# Add a default settings.json +USER user +COPY --chown=1000:1000 settings.json /home/user/.local/share/code-server/User/settings.json + +# Remove the default code-server config file created when extensions are installed +USER user +RUN rm -fv ~/.config/code-server/config.yaml + +# Symlink code to code-server +USER root +RUN ln -sfn /usr/local/bin/code-server /usr/local/bin/code + +USER root +COPY docker-entrypoint.sh /docker-entrypoint.sh +RUN chmod +x /docker-entrypoint.sh + +ENV LANG=en_US.UTF-8 +USER user +WORKDIR /home/user +ENTRYPOINT [ "/docker-entrypoint.sh" ] +CMD [ "--bind-addr=0.0.0.0:8080", "--disable-telemetry", "--disable-update-check" ] diff --git a/variants/4.20.0-docker-rootless/docker-entrypoint.sh b/variants/4.20.0-docker-rootless/docker-entrypoint.sh new file mode 100644 index 00000000..e3f7fd09 --- /dev/null +++ b/variants/4.20.0-docker-rootless/docker-entrypoint.sh @@ -0,0 +1,27 @@ +#!/bin/sh +set -eu + +# See: https://github.com/docker-library/official-images#consistency +if [ "$#" -eq 0 ] || [ "${1#-}" != "$1" ]; then + set -- code-server "$@" +fi +if [ "$1" = 'code-server' ]; then + # Start rootless docker + # See: https://github.com/moby/moby/blob/v20.10.22/contrib/dockerd-rootless.sh + # See: https://github.com/docker-library/docker/blob/master/20.10/dind/dockerd-entrypoint.sh + echo "Starting rootless dockerd" + rootlesskit \ + --net="${DOCKERD_ROOTLESS_ROOTLESSKIT_NET:-vpnkit}" \ + --mtu="${DOCKERD_ROOTLESS_ROOTLESSKIT_MTU:-1500}" \ + --disable-host-loopback \ + --port-driver="${DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER:-builtin}" \ + --copy-up=/etc \ + --copy-up=/run \ + --propagation=rslave \ + ${DOCKERD_ROOTLESS_ROOTLESSKIT_FLAGS:-} \ + dockerd & + + echo "Starting code-server" + exec code-server "$@" +fi +exec "$@" diff --git a/variants/4.20.0-docker-rootless/settings.json b/variants/4.20.0-docker-rootless/settings.json new file mode 100644 index 00000000..2c0c4607 --- /dev/null +++ b/variants/4.20.0-docker-rootless/settings.json @@ -0,0 +1,24 @@ +{ + "extensions.autoCheckUpdates": false, + "extensions.autoUpdate": false, + "extensions.ignoreRecommendations": true, + "extensions.showRecommendationsOnlyOnDemand": true, + "npm.fetchOnlinePackageInfo": false, + "telemetry.enableTelemetry": false, + "telemetry.telemetryLevel": "off", + "typescript.check.npmIsInstalled": false, + "typescript.disableAutomaticTypeAcquisition": false, + "typescript.surveys.enabled": false, + "workbench.enableExperiments": false, + "workbench.iconTheme": "vscode-icons", + "workbench.settings.enableNaturalLanguageSearch": false, + "workbench.startupEditor": "none", + "workbench.welcomePage.walkthroughs.openOnInstall": false, + "workbench.tips.enabled": false, + + // Extension-specific + "gitlens.showWelcomeOnInstall": false, + "gitlens.showWhatsNewAfterUpgrades": false, + "redhat.telemetry.enabled": false, + "vsicons.dontShowNewVersionMessage": true, +} \ No newline at end of file diff --git a/variants/4.20.0-docker/Dockerfile b/variants/4.20.0-docker/Dockerfile new file mode 100644 index 00000000..2084d961 --- /dev/null +++ b/variants/4.20.0-docker/Dockerfile @@ -0,0 +1,314 @@ +# syntax=docker/dockerfile:1 +FROM alpine:3.17 +ARG TARGETPLATFORM +ARG TARGETOS +ARG TARGETARCH +ARG TARGETVARIANT +ARG BUILDPLATFORM +ARG BUILDOS +ARG BUILDARCH +ARG BUILDVARIANT +RUN set -eu; \ + echo "TARGETPLATFORM=$TARGETPLATFORM"; \ + echo "TARGETOS=$TARGETOS"; \ + echo "TARGETARCH=$TARGETARCH"; \ + echo "TARGETVARIANT=$TARGETVARIANT"; \ + echo "BUILDPLATFORM=$BUILDPLATFORM"; \ + echo "BUILDOS=$BUILDOS"; \ + echo "BUILDARCH=$BUILDARCH"; \ + echo "BUILDVARIANT=$BUILDVARIANT"; + +RUN --mount=type=secret,id=GITHUB_TOKEN \ + DEPS='alpine-sdk bash libstdc++ libc6-compat python3' \ + && apk add --no-cache $DEPS \ + # Constraint to npm 8, or else npm will fail with 'npm ERR! python is not a valid npm option'. See: https://stackoverflow.com/questions/74522956/python-is-not-a-valid-npm-option and https://jubianchi.github.io/semver-check/#/~8/8 + && apk add --no-cache --repository=https://dl-cdn.alpinelinux.org/alpine/v3.15/main npm~8 && apk add --no-cache nodejs~18 krb5-dev \ + && npm config set python python3 \ + && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --global code-server@4.20.0 --unsafe-perm \ + # Fix missing dependencies. See: https://github.com/coder/code-server/issues/5530 + && cd /usr/local/lib/node_modules/code-server/lib/vscode && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --legacy-peer-deps \ + && code-server --version \ + && apk del $DEPS + +# Install tools +RUN apk add --no-cache bash bash-completion ca-certificates curl gnupg git git-lfs github-cli iotop jq less lsblk make nano openssh-client openssl p7zip rsync tree yq + +# Install pwsh +# See: https://learn.microsoft.com/en-us/powershell/scripting/install/install-alpine?view=powershell-7.3 +RUN apk add --no-cache \ + ca-certificates \ + less \ + ncurses-terminfo-base \ + krb5-libs \ + libgcc \ + libintl \ + libssl1.1 \ + libstdc++ \ + tzdata \ + userspace-rcu \ + zlib \ + icu-libs \ + curl +RUN apk -X https://dl-cdn.alpinelinux.org/alpine/edge/main add --no-cache lttng-ust +RUN mkdir -p /opt/microsoft/powershell/7 \ + && curl -sSL https://github.com/PowerShell/PowerShell/releases/download/v7.2.8/powershell-7.2.8-linux-alpine-x64.tar.gz | tar -C /opt/microsoft/powershell/7 -zxf - \ + && chmod +x /opt/microsoft/powershell/7/pwsh \ + && ln -s /opt/microsoft/powershell/7/pwsh /usr/bin/pwsh +# Disable telemetry for powershell 7.0.0 and above and .NET core: https://github.com/PowerShell/PowerShell/issues/16234#issuecomment-942139350 +ENV POWERSHELL_CLI_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_UPDATECHECK=Off +ENV POWERSHELL_UPDATECHECK_OPTOUT=1 +ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 +ENV DOTNET_TELEMETRY_OPTOUT=1 +ENV COMPlus_EnableDiagnostics=0 +RUN pwsh -version +# Install pwsh module(s) +RUN pwsh -c 'Install-Module Pester -Force -Scope AllUsers -MinimumVersion 4.0.0 -MaximumVersion 4.10.1 -ErrorAction Stop' + +RUN apk add --no-cache sudo +RUN adduser -u 1000 --gecos '' -D user +RUN echo 'user ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/user + +# Install common extensions +USER user +# beautify - code formatter +RUN code-server --install-extension hookyqr.beautify@1.4.11 +# docker +RUN code-server --install-extension ms-azuretools.vscode-docker@1.18.0 +# firefox +RUN code-server --install-extension firefox-devtools.vscode-firefox-debug@2.9.1 +# git +RUN code-server --install-extension donjayamanne.githistory@0.6.19 +RUN code-server --install-extension eamodio.gitlens@11.6.0 +# github. Install the latest compatible version +RUN code-server --install-extension github.vscode-pull-request-github +# gitlab +RUN code-server --install-extension gitlab.gitlab-workflow@3.60.0 +# jinja +RUN code-server --install-extension samuelcolvin.jinjahtml@0.16.0 +RUN code-server --install-extension wholroyd.jinja@0.0.8 +# kubernetes +RUN code-server --install-extension ms-kubernetes-tools.vscode-kubernetes-tools@1.3.11 +# markdown +RUN code-server --install-extension bierner.markdown-preview-github-styles@0.1.6 +RUN code-server --install-extension DavidAnson.vscode-markdownlint@0.43.2 +# prettier - code formatter +RUN code-server --install-extension esbenp.prettier-vscode@9.0.0 +# pwsh +RUN code-server --install-extension ms-vscode.powershell@2021.12.0 +# svg +RUN code-server --install-extension jock.svg@1.4.17 +# terraform +RUN code-server --install-extension hashicorp.terraform@2.14.0 +# toml +RUN code-server --install-extension bungcip.better-toml@0.3.2 +# vscode +RUN code-server --install-extension vscode-icons-team.vscode-icons@11.13.0 +# xml +RUN code-server --install-extension redhat.vscode-xml@0.18.0 +# yaml +RUN code-server --install-extension redhat.vscode-yaml@1.9.1 + +# Install docker +# See: https://github.com/moby/moby/blob/v20.10.22/project/PACKAGERS.md +# Install docker-cli dependencies +USER root +RUN apk add --no-cache \ + ca-certificates \ + git \ + # Workaround for golang 1.15 not producing static binaries. See: https://github.com/containerd/containerd/issues/5824 + libc6-compat \ + openssh-client +# Install dockerd dependencies +RUN apk add --no-cache \ + btrfs-progs \ + e2fsprogs \ + e2fsprogs-extra \ + ip6tables \ + iptables \ + openssl \ + pigz \ + shadow-uidmap \ + xfsprogs \ + xz \ + zfs +# Add userns-remap support. See: https://docs.docker.com/engine/security/userns-remap/ +RUN set -eux; \ + addgroup -S dockremap; \ + adduser -S -G dockremap dockremap; \ + echo 'dockremap:231072:65536' >> /etc/subuid; \ + echo 'dockremap:231072:65536' >> /etc/subgid +# Install docker +RUN set -eux; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL='https://download.docker.com/linux/static/stable/x86_64/docker-24.0.7.tgz'; \ + ;; \ + 'armhf') \ + URL='https://download.docker.com/linux/static/stable/armel/docker-24.0.7.tgz'; \ + ;; \ + 'armv7') \ + URL='https://download.docker.com/linux/static/stable/armhf/docker-24.0.7.tgz'; \ + ;; \ + 'aarch64') \ + URL='https://download.docker.com/linux/static/stable/aarch64/docker-24.0.7.tgz'; \ + ;; \ + # These architectures are no longer supported as of docker 20.10.x + # 'ppc64le') \ + # URL='https://download.docker.com/linux/static/stable/ppc64le/docker-24.0.7.tgz'; \ + # ;; \ + # 's390x') \ + # URL='https://download.docker.com/linux/static/stable/s390x/docker-24.0.7.tgz'; \ + # ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + wget -q "$URL" -O docker.tgz; \ + tar -xvf docker.tgz --strip-components=1 --no-same-owner --no-same-permissions -C /usr/local/bin; \ + ls -al /usr/local/bin; \ + rm -v docker.tgz; \ + containerd --version; \ + ctr --version; \ + docker --version; \ + dockerd --version; \ + runc --version +# Install bash completion +RUN wget -q https://raw.githubusercontent.com/docker/cli/master/contrib/completion/bash/docker -O /usr/share/bash-completion/completions/docker +# Post-install docker. See: https://docs.docker.com/engine/install/linux-postinstall/ +RUN set -eux; \ + addgroup docker; \ + adduser user docker; +VOLUME /var/lib/docker + +# Install docker-compose v1 (deprecated, but for backward compatibility) +USER root +RUN apk add --no-cache docker-compose + +# Install docker-compose +RUN set -eux; \ + DOCKER_COMPOSE_VERSION=v2.23.3; \ + case "$( uname -m )" in \ + 'x86') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64"; \ + SHA256=a836e807951db448f991f303cddcc9a4ec69f4a49d58bc7d536cb91c77c04c33; \ + ;; \ + 'x86_64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-x86_64"; \ + SHA256=a836e807951db448f991f303cddcc9a4ec69f4a49d58bc7d536cb91c77c04c33; \ + ;; \ + 'armhf') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-armv6"; \ + SHA256=b712693945360155842b578beace00effa723b604bfe1ccd6421645523e15d86; \ + ;; \ + 'armv7l') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-armv7"; \ + SHA256=4068bcbe1dd90034c8fe8d2c65b600ba793fc19bdb65db3c2dbf80b8a078de6c; \ + ;; \ + 'aarch64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-aarch64"; \ + SHA256=71f38f0923b8a9b80ad02c823ec3207d94677547aa5c618ca41b81d29fe6b9d9; \ + ;; \ + 'ppc64le') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-ppc64le"; \ + SHA256=6110b0d30baee103c98ca5503bea24acb9d52bd333a67d3bf3c57d383c585c62; \ + ;; \ + 'riscv64') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-riscv64"; \ + SHA256=3ac26e5f272deb1364c9b8760af44c4dbd87d6faa42fc53bfec95885cfa8ae77; \ + ;; \ + 's390x') \ + URL="https://github.com/docker/compose/releases/download/v2.23.3/docker-compose-linux-s390x"; \ + SHA256=2886dd4eddaea1eeb03537bdc596ec8947eb3ef7908c955284f8aad9170d3098; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + FILE=docker-compose; \ + wget -q "$URL" -O "$FILE"; \ + echo "$SHA256 $FILE" | sha256sum -c -; \ + mkdir -pv /usr/libexec/docker/cli-plugins; \ + mv -v docker-compose /usr/libexec/docker/cli-plugins/docker-compose; \ + chmod +x /usr/libexec/docker/cli-plugins/docker-compose; \ + docker compose version; \ + : + +# Install docker-buildx +RUN set -eux; \ + DOCKER_BUILDX_VERSION=v0.12.0; \ + case "$( uname -m )" in \ + 'x86_64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-amd64"; \ + SHA256=7c393b92c148a0ce26c76a2abc99960be1d1097f0471978d41dc51d0c1a4471e; \ + ;; \ + 'armhf') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v6"; \ + SHA256=62d9162f526c3bb7f67768a5b0d81a8b3ad0371406dfc1f0775e4f62dfca7fe1; \ + ;; \ + 'armv7l') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm-v7"; \ + SHA256=d941d6a5b072de775222d31d9f8467b4c1b1f56e3b08d1b78f828a9244c16464; \ + ;; \ + 'aarch64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-arm64"; \ + SHA256=781caebb36551b035cb9dcfaf91088543d09c73c4a2549341e6417d86b8bbb50; \ + ;; \ + 'ppc64le') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-ppc64le"; \ + SHA256=ab5bda4532528d6b0801c877999fce9def10c6a37624673fd13c668fdcde16b7; \ + ;; \ + 'riscv64') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-riscv64"; \ + SHA256=a2b846919c44128c6db9165ad24545e7e10035b6f0ad01559fcfbb2a13017127; \ + ;; \ + 's390x') \ + URL="https://github.com/docker/buildx/releases/download/v0.12.0/buildx-v0.12.0.linux-s390x"; \ + SHA256=81c2ada65624e2ac6bb4123f3a3bb933d04cfb08aa45fc55dd201ba523d96d30; \ + ;; \ + *) \ + echo "Architecture not supported"; \ + exit 1; \ + ;; \ + esac; \ + FILE=docker-buildx; \ + wget -q "$URL" -O "$FILE"; \ + echo "$SHA256 $FILE" | sha256sum -c -; \ + mkdir -pv /usr/libexec/docker/cli-plugins; \ + mv -v docker-buildx /usr/libexec/docker/cli-plugins/docker-buildx; \ + chmod +x /usr/libexec/docker/cli-plugins/docker-buildx; \ + docker buildx version; \ + : + +# Install binary tool(s) +RUN set -eux; \ + wget https://github.com/GoogleContainerTools/container-diff/releases/download/v0.17.0/container-diff-linux-amd64 -O container-diff; \ + sha256sum container-diff | grep '^818c219ce9f9670cd5c766b9da5036cf75bbf98bc99eb258f5e8f90e80367c88 '; \ + mv container-diff /usr/local/bin/container-diff; \ + chmod +x /usr/local/bin/container-diff; \ + container-diff version + +# Add a default settings.json +USER user +COPY --chown=1000:1000 settings.json /home/user/.local/share/code-server/User/settings.json + +# Remove the default code-server config file created when extensions are installed +USER user +RUN rm -fv ~/.config/code-server/config.yaml + +# Symlink code to code-server +USER root +RUN ln -sfn /usr/local/bin/code-server /usr/local/bin/code + +USER root +COPY docker-entrypoint.sh /docker-entrypoint.sh +RUN chmod +x /docker-entrypoint.sh + +ENV LANG=en_US.UTF-8 +USER user +WORKDIR /home/user +ENTRYPOINT [ "/docker-entrypoint.sh" ] +CMD [ "--bind-addr=0.0.0.0:8080", "--disable-telemetry", "--disable-update-check" ] diff --git a/variants/4.20.0-docker/docker-entrypoint.sh b/variants/4.20.0-docker/docker-entrypoint.sh new file mode 100644 index 00000000..7e387902 --- /dev/null +++ b/variants/4.20.0-docker/docker-entrypoint.sh @@ -0,0 +1,16 @@ +#!/bin/sh +set -eu + +# See: https://github.com/docker-library/official-images#consistency +if [ "$#" -eq 0 ] || [ "${1#-}" != "$1" ]; then + set -- code-server "$@" +fi +if [ "$1" = 'code-server' ]; then + echo "Starting dockerd" + sudo rm -fv /var/run/docker.pid + sudo dockerd & + + echo "Starting code-server" + exec code-server "$@" +fi +exec "$@" diff --git a/variants/4.20.0-docker/settings.json b/variants/4.20.0-docker/settings.json new file mode 100644 index 00000000..2c0c4607 --- /dev/null +++ b/variants/4.20.0-docker/settings.json @@ -0,0 +1,24 @@ +{ + "extensions.autoCheckUpdates": false, + "extensions.autoUpdate": false, + "extensions.ignoreRecommendations": true, + "extensions.showRecommendationsOnlyOnDemand": true, + "npm.fetchOnlinePackageInfo": false, + "telemetry.enableTelemetry": false, + "telemetry.telemetryLevel": "off", + "typescript.check.npmIsInstalled": false, + "typescript.disableAutomaticTypeAcquisition": false, + "typescript.surveys.enabled": false, + "workbench.enableExperiments": false, + "workbench.iconTheme": "vscode-icons", + "workbench.settings.enableNaturalLanguageSearch": false, + "workbench.startupEditor": "none", + "workbench.welcomePage.walkthroughs.openOnInstall": false, + "workbench.tips.enabled": false, + + // Extension-specific + "gitlens.showWelcomeOnInstall": false, + "gitlens.showWhatsNewAfterUpgrades": false, + "redhat.telemetry.enabled": false, + "vsicons.dontShowNewVersionMessage": true, +} \ No newline at end of file diff --git a/variants/4.20.0/Dockerfile b/variants/4.20.0/Dockerfile new file mode 100644 index 00000000..7c25eb2a --- /dev/null +++ b/variants/4.20.0/Dockerfile @@ -0,0 +1,133 @@ +# syntax=docker/dockerfile:1 +FROM alpine:3.17 +ARG TARGETPLATFORM +ARG TARGETOS +ARG TARGETARCH +ARG TARGETVARIANT +ARG BUILDPLATFORM +ARG BUILDOS +ARG BUILDARCH +ARG BUILDVARIANT +RUN set -eu; \ + echo "TARGETPLATFORM=$TARGETPLATFORM"; \ + echo "TARGETOS=$TARGETOS"; \ + echo "TARGETARCH=$TARGETARCH"; \ + echo "TARGETVARIANT=$TARGETVARIANT"; \ + echo "BUILDPLATFORM=$BUILDPLATFORM"; \ + echo "BUILDOS=$BUILDOS"; \ + echo "BUILDARCH=$BUILDARCH"; \ + echo "BUILDVARIANT=$BUILDVARIANT"; + +RUN --mount=type=secret,id=GITHUB_TOKEN \ + DEPS='alpine-sdk bash libstdc++ libc6-compat python3' \ + && apk add --no-cache $DEPS \ + # Constraint to npm 8, or else npm will fail with 'npm ERR! python is not a valid npm option'. See: https://stackoverflow.com/questions/74522956/python-is-not-a-valid-npm-option and https://jubianchi.github.io/semver-check/#/~8/8 + && apk add --no-cache --repository=https://dl-cdn.alpinelinux.org/alpine/v3.15/main npm~8 && apk add --no-cache nodejs~18 krb5-dev \ + && npm config set python python3 \ + && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --global code-server@4.20.0 --unsafe-perm \ + # Fix missing dependencies. See: https://github.com/coder/code-server/issues/5530 + && cd /usr/local/lib/node_modules/code-server/lib/vscode && GITHUB_TOKEN=$( cat /run/secrets/GITHUB_TOKEN ) npm install --legacy-peer-deps \ + && code-server --version \ + && apk del $DEPS + +# Install tools +RUN apk add --no-cache bash bash-completion ca-certificates curl gnupg git git-lfs github-cli iotop jq less lsblk make nano openssh-client openssl p7zip rsync tree yq + +# Install pwsh +# See: https://learn.microsoft.com/en-us/powershell/scripting/install/install-alpine?view=powershell-7.3 +RUN apk add --no-cache \ + ca-certificates \ + less \ + ncurses-terminfo-base \ + krb5-libs \ + libgcc \ + libintl \ + libssl1.1 \ + libstdc++ \ + tzdata \ + userspace-rcu \ + zlib \ + icu-libs \ + curl +RUN apk -X https://dl-cdn.alpinelinux.org/alpine/edge/main add --no-cache lttng-ust +RUN mkdir -p /opt/microsoft/powershell/7 \ + && curl -sSL https://github.com/PowerShell/PowerShell/releases/download/v7.2.8/powershell-7.2.8-linux-alpine-x64.tar.gz | tar -C /opt/microsoft/powershell/7 -zxf - \ + && chmod +x /opt/microsoft/powershell/7/pwsh \ + && ln -s /opt/microsoft/powershell/7/pwsh /usr/bin/pwsh +# Disable telemetry for powershell 7.0.0 and above and .NET core: https://github.com/PowerShell/PowerShell/issues/16234#issuecomment-942139350 +ENV POWERSHELL_CLI_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_TELEMETRY_OPTOUT=1 +ENV POWERSHELL_UPDATECHECK=Off +ENV POWERSHELL_UPDATECHECK_OPTOUT=1 +ENV DOTNET_CLI_TELEMETRY_OPTOUT=1 +ENV DOTNET_TELEMETRY_OPTOUT=1 +ENV COMPlus_EnableDiagnostics=0 +RUN pwsh -version +# Install pwsh module(s) +RUN pwsh -c 'Install-Module Pester -Force -Scope AllUsers -MinimumVersion 4.0.0 -MaximumVersion 4.10.1 -ErrorAction Stop' + +RUN apk add --no-cache sudo +RUN adduser -u 1000 --gecos '' -D user +RUN echo 'user ALL=(ALL) NOPASSWD:ALL' > /etc/sudoers.d/user + +# Install common extensions +USER user +# beautify - code formatter +RUN code-server --install-extension hookyqr.beautify@1.4.11 +# docker +RUN code-server --install-extension ms-azuretools.vscode-docker@1.18.0 +# firefox +RUN code-server --install-extension firefox-devtools.vscode-firefox-debug@2.9.1 +# git +RUN code-server --install-extension donjayamanne.githistory@0.6.19 +RUN code-server --install-extension eamodio.gitlens@11.6.0 +# github. Install the latest compatible version +RUN code-server --install-extension github.vscode-pull-request-github +# gitlab +RUN code-server --install-extension gitlab.gitlab-workflow@3.60.0 +# jinja +RUN code-server --install-extension samuelcolvin.jinjahtml@0.16.0 +RUN code-server --install-extension wholroyd.jinja@0.0.8 +# kubernetes +RUN code-server --install-extension ms-kubernetes-tools.vscode-kubernetes-tools@1.3.11 +# markdown +RUN code-server --install-extension bierner.markdown-preview-github-styles@0.1.6 +RUN code-server --install-extension DavidAnson.vscode-markdownlint@0.43.2 +# prettier - code formatter +RUN code-server --install-extension esbenp.prettier-vscode@9.0.0 +# pwsh +RUN code-server --install-extension ms-vscode.powershell@2021.12.0 +# svg +RUN code-server --install-extension jock.svg@1.4.17 +# terraform +RUN code-server --install-extension hashicorp.terraform@2.14.0 +# toml +RUN code-server --install-extension bungcip.better-toml@0.3.2 +# vscode +RUN code-server --install-extension vscode-icons-team.vscode-icons@11.13.0 +# xml +RUN code-server --install-extension redhat.vscode-xml@0.18.0 +# yaml +RUN code-server --install-extension redhat.vscode-yaml@1.9.1 + +# Add a default settings.json +USER user +COPY --chown=1000:1000 settings.json /home/user/.local/share/code-server/User/settings.json + +# Remove the default code-server config file created when extensions are installed +USER user +RUN rm -fv ~/.config/code-server/config.yaml + +# Symlink code to code-server +USER root +RUN ln -sfn /usr/local/bin/code-server /usr/local/bin/code + +USER root +COPY docker-entrypoint.sh /docker-entrypoint.sh +RUN chmod +x /docker-entrypoint.sh + +ENV LANG=en_US.UTF-8 +USER user +WORKDIR /home/user +ENTRYPOINT [ "/docker-entrypoint.sh" ] +CMD [ "--bind-addr=0.0.0.0:8080", "--disable-telemetry", "--disable-update-check" ] diff --git a/variants/4.20.0/docker-entrypoint.sh b/variants/4.20.0/docker-entrypoint.sh new file mode 100644 index 00000000..506f3566 --- /dev/null +++ b/variants/4.20.0/docker-entrypoint.sh @@ -0,0 +1,13 @@ +#!/bin/sh +set -eu + +# See: https://github.com/docker-library/official-images#consistency +if [ "$#" -eq 0 ] || [ "${1#-}" != "$1" ]; then + set -- code-server "$@" +fi +if [ "$1" = 'code-server' ]; then + + echo "Starting code-server" + exec code-server "$@" +fi +exec "$@" diff --git a/variants/4.20.0/settings.json b/variants/4.20.0/settings.json new file mode 100644 index 00000000..2c0c4607 --- /dev/null +++ b/variants/4.20.0/settings.json @@ -0,0 +1,24 @@ +{ + "extensions.autoCheckUpdates": false, + "extensions.autoUpdate": false, + "extensions.ignoreRecommendations": true, + "extensions.showRecommendationsOnlyOnDemand": true, + "npm.fetchOnlinePackageInfo": false, + "telemetry.enableTelemetry": false, + "telemetry.telemetryLevel": "off", + "typescript.check.npmIsInstalled": false, + "typescript.disableAutomaticTypeAcquisition": false, + "typescript.surveys.enabled": false, + "workbench.enableExperiments": false, + "workbench.iconTheme": "vscode-icons", + "workbench.settings.enableNaturalLanguageSearch": false, + "workbench.startupEditor": "none", + "workbench.welcomePage.walkthroughs.openOnInstall": false, + "workbench.tips.enabled": false, + + // Extension-specific + "gitlens.showWelcomeOnInstall": false, + "gitlens.showWhatsNewAfterUpgrades": false, + "redhat.telemetry.enabled": false, + "vsicons.dontShowNewVersionMessage": true, +} \ No newline at end of file