40 Commits

Author SHA1 Message Date
maurice
7f342a7529 WIP 2026-03-14 20:23:44 +01:00
maurice
a549d67c7e more cleanup 2026-03-12 15:30:26 +01:00
maurice
d987d64ac8 again 2026-03-12 15:28:08 +01:00
maurice
248e27d52d Cleanup 2026-03-12 15:25:53 +01:00
maurice
9457585307 env 2026-03-12 15:10:36 +01:00
maurice
026513cfac aha 2026-03-12 15:07:16 +01:00
maurice
3861cd471d Fix? 2026-03-12 14:46:47 +01:00
maurice
53e0b19ccb Updates 2026-03-12 14:43:34 +01:00
maurice
9f435b6a30 Nieuwe networks 2026-03-12 10:45:13 +01:00
maurice
21cbf0d212 Go devc 2026-02-19 17:43:02 +01:00
maurice
0f0842c9b4 Docker prefix 2026-02-18 12:31:41 +01:00
maurice
ba73361a8f Kali image 2026-02-18 12:28:58 +01:00
maurice
3cdacc7eb8 Updates 2026-01-29 19:04:55 +01:00
maurice
911855d95c Merge branch 'ci-move-to-job-v2' 2026-01-27 19:50:12 +01:00
maurice
c49270c7cf update 2026-01-27 19:36:02 +01:00
maurice
c618572a18 Fix 2026-01-27 19:33:29 +01:00
maurice
ae8a5ec260 Update container 2026-01-27 19:29:30 +01:00
314e269881 fix: cache dnf installs (and remove cache from images) 2025-12-29 17:20:16 +01:00
b012abc3ed ci: move ci to job v2 2025-12-29 17:19:59 +01:00
maurice
efe72f205d Update 2025-12-03 19:56:25 +01:00
maurice
28843cdb89 Updates 2025-11-26 13:40:39 +01:00
maurice
7adaee8f06 on PR 2025-11-04 09:26:32 +01:00
maurice
4608cea0de allow manual trigger 2025-11-04 09:23:50 +01:00
maurice
3a50fff009 Changes 2025-11-04 09:20:46 +01:00
maurice
212463c725 Downgrade PHP 2025-11-03 13:02:57 +01:00
maurice
baad26211e Fix :) 2025-10-31 12:31:04 +01:00
maurice
8be0e326ca Updates 2025-10-31 11:20:16 +01:00
maurice
f230389825 Fix dotnet 2025-10-28 13:06:57 +01:00
maurice
2d111c34a7 New containers 2025-10-28 12:14:28 +01:00
maurice
f0a71e9d47 Update dotnet 2025-10-28 10:03:48 +01:00
maurice
a3abeb44d7 Fix PHP 2025-10-28 09:57:23 +01:00
maurice
b039e28166 Try fix PHP 2025-10-28 09:50:03 +01:00
maurice
78ceec4906 Fix php 2025-10-28 09:38:34 +01:00
maurice
6e64e2237b Shell 2025-10-28 09:32:36 +01:00
maurice
4db483e992 Try 2025-10-28 09:29:51 +01:00
maurice
785f2aa857 fix 2025-10-28 09:26:41 +01:00
maurice
0aba432076 Helix config 2025-10-28 09:26:03 +01:00
maurice
cd129f21f7 Try trigger 2025-10-28 09:24:18 +01:00
maurice
8a47711c61 Fix 2025-10-28 09:17:25 +01:00
maurice
778ee0a2a6 Tweaks 2025-10-28 09:16:51 +01:00
24 changed files with 366 additions and 187 deletions

View File

@@ -7,18 +7,13 @@ on:
pull_request: pull_request:
branches: ["main"] branches: ["main"]
paths: ["containers/**", ".gitea/workflows/build.yaml"] paths: ["containers/**", ".gitea/workflows/build.yaml"]
schedule:
- cron: "0 16 * * FRI"
jobs: jobs:
changes: changes:
runs-on: job-v2 runs-on: job-v2
outputs: outputs:
base: ${{ steps.filter.outputs.base == 'true' }}
infra: ${{ steps.filter.outputs.infra == 'true' || steps.filter.outputs.base == 'true' }}
go: ${{ steps.filter.outputs.go == 'true' || steps.filter.outputs.base == 'true' }}
php: ${{ steps.filter.outputs.php == 'true' || steps.filter.outputs.base == 'true' }}
any_change: ${{ steps.filter.outputs.workflow == 'true' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'}} any_change: ${{ steps.filter.outputs.workflow == 'true' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'}}
base: ${{ steps.filter.outputs.base == 'true' }}
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
- uses: https://github.com/dorny/paths-filter@v3 - uses: https://github.com/dorny/paths-filter@v3
@@ -27,9 +22,6 @@ jobs:
filters: | filters: |
workflow: ['.gitea/workflows/build.yaml'] workflow: ['.gitea/workflows/build.yaml']
base: ['containers/base/**'] base: ['containers/base/**']
infra: ['containers/infra/**']
go: ['containers/go/**']
php: ['containers/php/**']
base-image: base-image:
needs: [changes] needs: [changes]
@@ -47,11 +39,10 @@ jobs:
id: build id: build
uses: job79/buildah-build@65b3793a1370c1ccd74a5c0d090d70eb9637a4ef uses: job79/buildah-build@65b3793a1370c1ccd74a5c0d090d70eb9637a4ef
with: with:
image: job79/base image: maurice/base
tags: ${{ github.ref_name }} tags: ${{ github.ref_name }}
context: ./containers/base context: ./containers/base
containerfiles: ./containers/base/Containerfile containerfiles: ./containers/base/Containerfile
platforms: linux/amd64
- name: Push - name: Push
uses: redhat-actions/push-to-registry@v2 uses: redhat-actions/push-to-registry@v2
with: with:
@@ -64,45 +55,51 @@ jobs:
--compression-format=zstd --compression-format=zstd
--compression-level=12 --compression-level=12
dependent-images: # dependent-images:
needs: [changes, base-image] # needs: [changes, base-image]
if: always() && needs.changes.result == 'success' && (needs.base-image.result == 'success' || needs.base-image.result == 'skipped') && (needs.changes.outputs[matrix.container] == 'true' || needs.changes.outputs.any_change == 'true') # if: always() && needs.changes.result == 'success' && (needs.base-image.result == 'success' || needs.base-image.result == 'skipped')
runs-on: job-v2 # runs-on: job-v2
strategy: # strategy:
fail-fast: false # fail-fast: false
matrix: # matrix:
container: [infra, go, php] # container: [rust, dotnet, go]
steps: # steps:
- name: Clone repo # - name: Check if build needed
if: steps.check.outputs.run == 'true' # id: check
uses: actions/checkout@v4 # run: |
- name: Log in # if [[ "${{ matrix.container }}" == "go" && "${{ needs.changes.outputs.go }}" == "true" ]]; then echo "run=true" >> $GITHUB_OUTPUT; fi
if: steps.check.outputs.run == 'true' # if [[ "${{ matrix.container }}" == "rust" && "${{ needs.changes.outputs.rust }}" == "true" ]]; then echo "run=true" >> $GITHUB_OUTPUT; fi
uses: redhat-actions/podman-login@v1 # if [[ "${{ matrix.container }}" == "dotnet" && "${{ needs.changes.outputs.dotnet }}" == "true" ]]; then echo "run=true" >> $GITHUB_OUTPUT; fi
with: # if [[ "${{ needs.changes.outputs.any_change }}" == "true" ]]; then echo "run=true" >> $GITHUB_OUTPUT; fi
registry: git.plabble.org # - name: Clone repo
username: ${{ secrets.REGISTRY_USERNAME }} # if: steps.check.outputs.run == 'true'
password: ${{ secrets.REGISTRY_TOKEN }} # uses: actions/checkout@v4
- name: Build # - name: Log in
id: build # if: steps.check.outputs.run == 'true'
if: steps.check.outputs.run == 'true' # uses: redhat-actions/podman-login@v1
uses: job79/buildah-build@65b3793a1370c1ccd74a5c0d090d70eb9637a4ef # with:
with: # registry: git.plabble.org
image: job79/${{ matrix.container }} # username: ${{ secrets.REGISTRY_USERNAME }}
tags: ${{ github.ref_name }} # password: ${{ secrets.REGISTRY_TOKEN }}
context: ./containers/${{ matrix.container }} # - name: Build
containerfiles: ./containers/${{ matrix.container }}/Containerfile # id: build
build-args: TAG=${{ github.ref_name }} # if: steps.check.outputs.run == 'true'
platforms: linux/amd64 # uses: job79/buildah-build@65b3793a1370c1ccd74a5c0d090d70eb9637a4ef
- name: Push # with:
if: steps.check.outputs.run == 'true' # image: maurice/${{ matrix.container }}
uses: redhat-actions/push-to-registry@v2 # tags: ${{ github.ref_name }}
with: # context: ./containers/${{ matrix.container }}
image: ${{ steps.build.outputs.image }} # containerfiles: ./containers/${{ matrix.container }}/Containerfile
tags: ${{ steps.build.outputs.tags }} # build-args: TAG=${{ github.ref_name }}
registry: git.plabble.org # - name: Push
username: ${{ secrets.REGISTRY_USERNAME }} # if: steps.check.outputs.run == 'true'
password: ${{ secrets.REGISTRY_TOKEN }} # uses: redhat-actions/push-to-registry@v2
extra-args: | # with:
--compression-format=zstd # image: ${{ steps.build.outputs.image }}
--compression-level=12 # tags: ${{ steps.build.outputs.tags }}
# registry: git.plabble.org
# username: ${{ secrets.REGISTRY_USERNAME }}
# password: ${{ secrets.REGISTRY_TOKEN }}
# extra-args: |
# --compression-format=zstd
# --compression-level=12

View File

@@ -0,0 +1,40 @@
name: Build optional dev containers
on:
workflow_dispatch:
jobs:
fedora-build:
runs-on: job-v2
strategy:
max-parallel: 1
matrix:
container: [rider]
steps:
- name: Clone repo
uses: actions/checkout@v4
- name: Log in
uses: redhat-actions/podman-login@v1
with:
registry: git.plabble.org
username: ${{ secrets.REGISTRY_USERNAME }}
password: ${{ secrets.REGISTRY_TOKEN }}
- name: Build ${{ matrix.container }} container
id: build_image
uses: job79/buildah-build@65b3793a1370c1ccd74a5c0d090d70eb9637a4ef
with:
image: maurice/${{ matrix.container }}
tags: ${{ github.ref_name }}
context: ./containers/${{ matrix.container }}
containerfiles: ./containers/${{ matrix.container }}/Containerfile
build-args: TAG=${{ github.ref_name }}
- name: Push ${{ matrix.container }} container
uses: redhat-actions/push-to-registry@v2
with:
image: ${{ steps.build_image.outputs.image }}
tags: ${{ steps.build_image.outputs.tags }}
registry: git.plabble.org
username: ${{ secrets.REGISTRY_USERNAME }}
password: ${{ secrets.REGISTRY_TOKEN }}
extra-args: |
--compression-format=zstd
--compression-level=12

5
build.sh Normal file
View File

@@ -0,0 +1,5 @@
#!/bin/sh
cd containers/base
podman build -t git.plabble.org/maurice/base:main .
cd ../rider
podman build -t git.plabble.org/maurice/rider:main .

View File

@@ -0,0 +1,20 @@
FROM git.plabble.org/maurice/base:main
ARG studio_version="2025.3.2.6"
ARG download_uri="https://redirector.gvt1.com/edgedl/android/studio/ide-zips/${studio_version}/android-studio-${studio_version}-linux.tar.gz"
USER root
# === setup GUI ===
RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \
dnf -y --setopt=keepcache=1 install libXext libXrender libXtst libX11 freetype freetype-devel mesa-libGLU
USER user
RUN curl -Lo /tmp/studio.tar.gz "${download_uri}" && \
mkdir /home/user/AndroidStudio && \
mkdir /home/user/Android && \
tar -zxf /tmp/studio.tar.gz -C /home/user/AndroidStudio && \
rm /tmp/studio.tar.gz && \
mv /home/user/AndroidStudio/android-studio*/* /home/user/AndroidStudio
RUN echo 'alias studio="$HOME/AndroidStudio/bin/studio"' >> /home/user/.bashrc
RUN echo 'export ANDROID_HOME="$HOME/Android/Sdk"' >> /home/user/.bashrc
RUN echo 'export PATH="$ANDROID_HOME/platform-tools:$PATH"' >> /home/user/.bashrc

View File

@@ -1,31 +1,53 @@
FROM quay.io/fedora/fedora:44 FROM quay.io/fedora/fedora:43
# === install system packages === # === install system packages ===
RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \ RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \
dnf update -y && \ dnf update -y && \
dnf copr enable -y atim/lazygit && \ dnf -y --setopt=keepcache=1 install \
dnf copr enable -y atim/lazydocker && \ procps ping bash-completion glibc-langpack-en openssl-devel \
dnf copr enable -y gierth/tools-golang && \
dnf copr enable -y agriffis/neovim-nightly && \
dnf -y --setopt=keepcache=1 install procps ping bash-completion glibc-langpack-en \
host-spawn dbus-launch \ host-spawn dbus-launch \
zoxide git npm neovim awk jq unzip fd-find lazygit lazydocker lazysql git pnpm helix zip rsync \
dotnet-sdk-10.0
COPY config/bin /usr/local/bin
# === setup user === # === setup user ===
RUN useradd -ms /bin/bash user && \ RUN useradd -ms /bin/bash user && \
echo 'user ALL=(ALL) NOPASSWD: ALL' > /etc/sudoers.d/user && \ usermod -aG wheel user && sed -i '/NOPASSWD/s/^#//g' /etc/sudoers && \
mkdir -p /run/user/1000 && \ mkdir -p /run/user/1000 && chown user:user /run/user/1000
chown user:user /run/user/1000
# === Add host entry for podman ===
RUN ln -s /usr/local/bin/host /usr/local/bin/podman
# === root language servers ===
COPY install-roslyn.sh /tmp/install-roslyn.sh
RUN chmod +x /tmp/install-roslyn.sh && /tmp/install-roslyn.sh && rm /tmp/omnisharp.tar.gz && rm /tmp/install-roslyn.sh
# RUN go install golang.org/x/tools/gopls@latest
USER user USER user
WORKDIR /home/user WORKDIR /home/user
RUN mkdir .config .local .cache
RUN mkdir -p .config .local .cache && \
git clone https://git.plabble.org/Job79/neovim-config.git .config/nvim
COPY --chown=user:user config/bashrc .bashrc COPY --chown=user:user config/bashrc .bashrc
COPY --chown=user:user config/git .config/git/config COPY --chown=user:user config/git .config/git/config
COPY --chown=user:user config/helix/ .config/helix/
COPY config/bin /usr/local/bin
# === Setup PNPM & install language servers, tools ===
RUN /bin/bash -c ". /home/user/.bashrc && pnpm setup && . /home/user/.bashrc && pnpm i -g deno bash-language-server vscode-langservers-extracted dockerfile-language-server-nodejs \
typescript typescript-language-server"
RUN dotnet tool install --global dotnet-ef && \
echo 'export PATH="$PATH:/home/user/.dotnet/tools:/home/user/.cargo/env"' >> /home/user/.bashrc
# === Rust, WASM toolchain ===
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
RUN . /home/user/.bashrc && rustup component add rust-analyzer && \
curl https://drager.github.io/wasm-pack/installer/init.sh -sSf | sh && \
cargo install cargo-generate && \
cargo install cargo-expand
# === Cleanup build dependencies ===
USER root
RUN dnf remove -y openssl-devel && dnf clean all && rm -rf /home/user/.cargo
USER user
VOLUME /home/user VOLUME /home/user

View File

@@ -1,17 +1,22 @@
source /etc/bashrc . /etc/bashrc
# === environment === # === environment ===
export EDITOR="nvim" \ export EDITOR=hx \
WAYLAND_DISPLAY="wayland-0" \ WAYLAND_DISPLAY=wayland-0 \
XDG_RUNTIME_DIR="/run/user/1000" \ XDG_RUNTIME_DIR=/run/user/1000 \
SSH_AUTH_SOCK="/run/user/1000/ssh-auth-sock" \ SSH_AUTH_SOCK=/run/user/1000/ssh-auth-sock \
TZ="Europe/Amsterdam" PS1="\[\e[30;46m\] \h | \w \[\e[0;36m\]\[\e[m\] " \
TZ="Europe/Amsterdam" \
PS1="\[\e[30;46m\] \h | \w \[\e[0;36m\]\[\e[m\] " SHELL="/bin/bash"
# === aliases and functions === # === aliases and functions ===
alias vi=nvim pbcopy() { curl -sF "content=<-" "https://paste.plabble.org/$2?lang=$1" && echo; }
post() { curl -sF "content=<-" "https://paste.plabble.org/$2?lang=$1" && echo; } alias random="cat /dev/urandom | tr -dc '[:alpha:]' | fold -w ${1:-20} | head -n 1"
eval "$(zoxide init --cmd cd bash)" # Git aliases
eval "$(fzf --bash)" alias gc="git commit -m"
alias ga="git add -A"
alias gf="git fetch"
alias gp="git pull"
alias gpp="git push"
alias gs="git status"

View File

@@ -1,6 +1,4 @@
#!/bin/bash #!/bin/bash
export DBUS_SESSION_BUS_ADDRESS="unix:path=/tmp/bus" export DBUS_SESSION_BUS_ADDRESS=unix:path=/tmp/bus
host-spawn -cwd "${PWD/#$HOME/$HOST_HOME}" \
cmd="${0##*/}" $([ "$(basename "$0")" != "host" ] && echo "$(basename "$0")") "$@"
[[ "$cmd" == "host" ]] && unset cmd
exec host-spawn -cwd "${PWD/#$HOME/$HOST_HOME}" ${cmd:+"$cmd"} "$@"

View File

@@ -1 +0,0 @@
host

View File

@@ -1 +0,0 @@
host

View File

@@ -1,7 +1,7 @@
[user] [user]
email = job@plabble.org email = maurict@pm.me
name = Job79 name = Maurice
signingKey = ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPsqM6ABAaCTQZ+llFXD3CXrYYuIHDEnvz8IBbXddYEc job@plabble.org signingKey = ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGL/am4HDyfV0OWwaI3CeKGypBdzNXOYSbcnm6tK/VB+ maurict@pm.me
[gpg] [gpg]
format = ssh format = ssh
[commit] [commit]

View File

@@ -0,0 +1,7 @@
theme = "dark_plus"
[editor]
true-color = true
[editor.file-picker]
hidden = false

View File

@@ -0,0 +1,12 @@
# C#
[language-server.omnisharp]
command = "/home/user/.omnisharp/OmniSharp"
args = [ "--languageserver" ]
# Rust
[language-server.rust-analyzer.config.check]
command = "clippy"
[[language]]
name = "rust"
formatter = { command = "rustfmt" }

View File

@@ -0,0 +1,9 @@
#!/bin/bash
version="v1.39.15"
arch="linux-x64"
link="https://github.com/OmniSharp/omnisharp-roslyn/releases/download/$version/omnisharp-$arch-net6.0.tar.gz"
curl -Lo /tmp/omnisharp.tar.gz $link
mkdir /home/user/.omnisharp
tar -zxf /tmp/omnisharp.tar.gz -C /home/user/.omnisharp/
chown -R user:user /home/user/.omnisharp

View File

@@ -0,0 +1,11 @@
FROM git.plabble.org/maurice/base:main
ARG flutter_version="3.41.4-stable"
ARG download_uri="https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_${flutter_version}.tar.xz"
RUN mkdir /home/user/Flutter && \
curl -Lo /tmp/flutter.tar.xz "${download_uri}" && \
tar -xf /tmp/flutter.tar.xz -C /home/user/Flutter && \
rm /tmp/flutter.tar.xz
RUN echo 'export PATH="$HOME/Flutter/flutter/bin:$PATH"' >> /home/user/.bashrc
RUN echo 'export FLUTTER_ROOT="$HOME/Flutter/flutter"' >> /home/user/.bashrc

View File

@@ -1,8 +0,0 @@
ARG TAG
FROM job79/base:${TAG}
USER root
RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \
dnf -y --setopt=keepcache=1 install go
USER user

View File

@@ -1,2 +0,0 @@
#!/bin/bash
run_opts+=("-v" "$HOME/Documents/go:/home/user/Documents/go")

View File

@@ -1,10 +0,0 @@
ARG TAG
FROM job79/base:${TAG}
USER root
RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \
dnf -y --setopt=keepcache=1 install kubectl k9s openssl age "$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r ".assets[] | select(.name | test(\"sops-.*.$(arch).rpm\$\")) | .browser_download_url")" && \
curl -sL https://talos.dev/install | sh && \
curl -s https://fluxcd.io/install.sh | bash
USER user

View File

@@ -1,2 +0,0 @@
#!/bin/bash
run_opts+=("-v" "$HOME/Documents/infra:/home/user/Documents/infra")

View File

@@ -1,9 +0,0 @@
ARG TAG
FROM job79/base:${TAG}
USER root
RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \
dnf -y --setopt=keepcache=1 install php composer && \
composer global require laravel/installer
USER user

View File

@@ -1,2 +0,0 @@
#!/bin/bash
run_opts+=("-v" "$HOME/Documents/php:/home/user/Documents/php")

View File

@@ -0,0 +1,18 @@
FROM git.plabble.org/maurice/base:main
ARG rider_version="2025.3.3"
ARG download_uri="https://download.jetbrains.com/rider/JetBrains.Rider-${rider_version}.tar.gz"
USER root
# === setup GUI ===
RUN --mount=type=cache,id=dnf-cache,target=/var/cache/libdnf5 \
dnf -y --setopt=keepcache=1 install libXext libXrender libXtst libX11 freetype freetype-devel
USER user
RUN curl -Lo /tmp/rider.tar.gz "${download_uri}" && \
mkdir /home/user/Rider && \
tar -zxf /tmp/rider.tar.gz -C /home/user/Rider && \
rm /tmp/rider.tar.gz && \
mv /home/user/Rider/JetBrains*/* /home/user/Rider
RUN echo 'alias rider="$HOME/Rider/bin/rider"' >> /home/user/.bashrc

View File

@@ -0,0 +1,4 @@
#!/bin/bash
mkdir -p /tmp/joypet-sockets
arg "-p 7777:7777"
arg "-v /tmp/joypet-sockets:/var/run/joypet-sockets:Z"

160
devc.sh
View File

@@ -1,87 +1,125 @@
#!/bin/bash #!/bin/bash
# =============================================== # # =============================================== #
# devc.sh v2.1; job79, maurice # # devc.sh v2.0; job79, maurice #
# Dev container entry script. # # Dev container enter script. Handles setting up #
# different dev containers, resuming sessions and #
# automatic container updates. #
# =============================================== # # =============================================== #
set -euo pipefail set -eu
log() { printf '\e[%sm%s\e[0m %s\n' "${3:-36}" "${2:-}" "$1"; } log() { printf '\e[%sm%s\e[0m %s\n' "${3:-36}" "${2:-}" "$1"; }
die() { log "$1" 'x' 31 && exit 1; } arg() { echo -n " $@"; }
# default_args configures standard container options. # run_args returns the podman run arguments required for
# starting a new container.
default_args() { default_args() {
run_opts+=( arg "--name $name"
"--name" "$name" arg "--hostname $name"
"--hostname" "$name"
"--pull=newer" # Update image.
"--userns=keep-id" # Map host user.
"--net=devc" # Shared network.
"-v" "$name:/home/user:copy" # Persistent home volume.
)
# Unix sockets require SELinux label disable. # Pull newer container image if available.
[[ -d /sys/fs/selinux ]] && run_opts+=("--security-opt" "label=disable") # arg "--pull=newer"
# Desktop integration (Wayland, SSH). # Use keep-id so the container user matches the host user.
[[ -e "/run/user/$UID/wayland-0" ]] && run_opts+=("-v" "/run/user/$UID/wayland-0:/run/user/1000/wayland-0") arg "--userns=keep-id"
[[ -e "${SSH_AUTH_SOCK:-}" ]] && run_opts+=("-v" "$SSH_AUTH_SOCK:/run/user/1000/ssh-auth-sock")
# Load custom container config. # Disable selinux labeling so unix sockets can be mounted
local config_file="${BASH_SOURCE[0]%/*}/containers/$name/config.sh" # without problems.
[[ -f "$config_file" ]] && source "$config_file" || true arg "--security-opt label=disable"
# Mount the wayland socket. Required to get the system
# clipboard (wl-copy) and gui applications working.
[ -e "/run/user/$UID/wayland-0" ] && arg "-v /run/user/$UID/wayland-0:/run/user/1000/wayland-0"
# Mount the ssh socket to get ssh working.
[ -e "$SSH_AUTH_SOCK" ] && arg "-v $SSH_AUTH_SOCK:/run/user/1000/ssh-auth-sock"
# Make the user home dir a volume so it survives container
# restarts. Use copy to keep the files from the image.
arg "-v $name:/home/user:copy"
# If there is custom configuration for the container, load
# it here.
config_file="$(dirname "$(realpath "$0")")/containers/$name/config.sh"
[ -f "$config_file" ] && source "${config_file}"
} }
# param_args parses CLI arguments into podman run options. # param_args returns the podman run arguments based on the
# arguments provided to this script.
param_args() { param_args() {
while (($# > 0)); do while test $# -gt 0; do
case "$1" in case "$1" in
-gpu) run_opts+=("--device" "/dev/dri") ;; -gpu) # Enable gpu acceleration.
-host-spawn) run_opts+=("-v" "/run/user/$UID/bus:/tmp/bus" "-e" "HOST_HOME=$HOME") ;; arg "--device /dev/dri" ;;
-container-sock) run_opts+=("-v" "${XDG_RUNTIME_DIR:-/run/user/$UID}/podman/podman.sock:/var/run/docker.sock") ;; -kvm) # Enable KVM
-x11) arg "--device /dev/kvm" ;;
run_opts+=("-v" "/tmp/.X11-unix:/tmp/.X11-unix" "-v" "${XAUTHORITY:-$HOME/.Xauthority}:/run/user/1000/.Xauthority:ro") -usb) # Enable USB access
run_opts+=("-e" "DISPLAY=${DISPLAY:-:0}" "-e" "XAUTHORITY=/run/user/1000/.Xauthority") arg "--device /dev/bus/usb" ;;
-host-spawn) # Enable spawning host commands from inside the container using host-spawn.
arg "-v /run/user/$UID/bus:/tmp/bus"
arg "-e HOST_HOME=$HOME" # Used to translate paths.
;; ;;
-mnt) -net) # Enable network 'dev-<container name>'' and 'devc'
local type='' arg "--network dev-$name --network devc"
[[ ! -d "$2" ]] && type='file' ;;
run_opts+=("-w" "/mnt/" "-v" "$2:/mnt/$type") -mnt) # Mount directory.
shift shift
arg "-w /workdir/"
arg "-v $1:/workdir/$([ ! -d "$1" ] && echo $1)"
;; ;;
*) run_opts+=("$1") ;; -mdf) # Mount dev folder
arg "-v $HOME/dev:/home/user/dev"
;;
-x11) # Enable X11 support.
arg "-v /tmp/.X11-unix:/tmp/.X11-unix"
arg "-v $XAUTHORITY:/run/user/1000/.Xauthority:ro"
arg "-e DISPLAY=$DISPLAY"
arg "-e XAUTHORITY=/run/user/1000/.Xauthority"
;;
*) # Use unknown arguments a podman arguments.
arg "$1" ;;
esac esac
shift shift
done done
} }
main() { ### MAIN ###
local state_file="$HOME/.local/share/devc-previous-container" # Get the devcontainer name from the first argument. If not
local image="${1:-}" # provided, use the last used name when possible.
if [[ $# -gt 0 ]] && [[ ${1:-} != -* ]]; then
# Resolve container name (CLI arg > Last used > Error). image="$1"
if [[ $image && $image != -* ]]; then [[ "$image" != *:* ]] && image="$image:main"
echo "$image" >"$HOME/.local/share/devc-previous-container"
shift shift
[[ $image == *:* ]] || image+=":main" elif [ -f "$HOME/.local/share/devc-previous-container" ]; then
mkdir -p "${state_file%/*}" && echo "$image" >"$state_file" image=$(<"$HOME/.local/share/devc-previous-container")
elif [[ -f $state_file ]]; then else
image=$(<$state_file) log "no container name specified" 'x' 31
else exit 1
die "no container name specified" fi
fi name="${image%:*}"
local name="${image%:*}"
# Start/Restart if not running or if arguments change configuration. # Get container registry from the DEVC_REGISTRY env
if [[ -z "$(podman ps -q -f name="^$name$" -f status=running)" ]] || (($# > 0)); then # variable.
log "starting $image..." if [ -n "${DEVC_REGISTRY:-}" ]; then
[[ -n "${DEVC_REGISTRY:-}" ]] || die "registry unknown; set the DEVC_REGISTRY environment variable" registry="$DEVC_REGISTRY"
else
log "registry unknown; set the DEVC_REGISTRY environment variable" 'x' 31
exit 1
fi
default_args # Get container command from the DEVC_COMMAND env variable
param_args "$@" # if set, else use bash -l.
if [ -z "${DEVC_COMMAND:-}" ]; then
DEVC_COMMAND="bash -l"
fi
podman network create --ignore "devc" &>/dev/null # When container is not running or arguments are provided,
podman run --replace --stop-timeout 0 -td "${run_opts[@]}" "$DEVC_REGISTRY/$image" # recreate it.
fi if [ "$(podman container inspect "$name" -f {{.State.Running}} 2>&1)" != 'true' ] || [[ $# -gt 0 ]]; then
log "starting devcontainer..."
podman network create --ignore "dev-$name"
podman network create --ignore "devc"
podman container rm -f -t 0 "$name" 1>/dev/null
podman run -td $(default_args) $(param_args $@) "$registry/$image"
fi
exec podman exec --detach-keys "ctrl-@,ctrl-@" -it "$name" ${DEVC_COMMAND:-bash -l} podman exec --detach-keys "ctrl-@" -it "$name" ${DEVC_COMMAND:-}
}
main "$@"

28
example-bashrc Normal file
View File

@@ -0,0 +1,28 @@
# Tools
pbcopy() { curl -sF "content=<-" "https://paste.plabble.org/$2?lang=$1" && echo; }
alias code="flatpak run com.visualstudio.code"
alias random="cat /dev/urandom | tr -dc '[:alpha:]' | fold -w ${1:-20} | head -n 1"
# Dev containers
export DEVC_REGISTRY="git.plabble.org/maurice"
function devc() {
"$HOME/dev/devcontainer/devc.sh" "$@" -mdf
}
alias rider="DEVC_COMMAND=/home/user/Rider/bin/rider devc rider -x11 -host-spawn -net"
alias flutter="devc flutter -x11 -host-spawn -kvm -usb -gpu"
alias androidstudio="DEVC_COMMAND=/home/user/AndroidStudio/bin/studio devc android -x11 -host-spawn -kvm -usb -gpu"
function hx() {
arg="${1:-.}"
DEVC_COMMAND="hx $arg" devc fedora -mnt $arg
}
# Git aliases
alias gc="git commit -m"
alias ga="git add -A"
alias gf="git fetch"
alias gp="git pull"
alias gpp="git push"
alias gs="git status"