fix(devcontainer): add configuration to limit rust-analyzer extension memory usage

Author: jiengup

.devcontainer/Dockerfile

@@ -21,23 +21,30 @@ ARG RUST_VERSION=1.96
 FROM rust:${RUST_VERSION}-slim-trixie
 
 # Build + runtime dependencies mirror the production Dockerfile builder
-# stage (native TLS, hwloc topology, udev) plus the Node.js toolchain the
-# web UI build requires. git/curl/sudo/pkg-config round out the dev shell.
+# stage (native TLS, hwloc topology, udev). git/curl/gnupg/sudo/pkg-config
+# round out the dev shell.
 RUN apt-get update && apt-get install -y --no-install-recommends \
     build-essential \
     ca-certificates \
     curl \
     git \
+    gnupg \
     pkg-config \
     libssl-dev \
     libhwloc-dev \
     libudev-dev \
     liblzma5 \
-    nodejs \
-    npm \
     sudo \
     && rm -rf /var/lib/apt/lists/*
 
+# Pin Node.js to the major version CI uses to build the web UI
+# (.github/workflows/_build_rust_artifacts.yml). NodeSource ships nodejs
+# with a bundled npm, so Debian's unversioned packages are not used.
+ARG NODE_VERSION=22
+RUN curl -fsSL "https://deb.nodesource.com/setup_${NODE_VERSION}.x" | bash - \
+    && apt-get install -y --no-install-recommends nodejs \
+    && rm -rf /var/lib/apt/lists/*
+
 # Pre-fetch the pinned toolchain components (rustfmt, clippy) so the first
 # in-container build does not stall resolving them. rust-src is added for
 # rust-analyzer sysroot / standard-library resolution.

.devcontainer/devcontainer.json

@@ -1,5 +1,10 @@
 {
   "name": "Apache Iggy",
+  "hostRequirements": {
+    "cpus": 4,
+    "memory": "16gb",
+    "storage": "32gb"
+  },
   "build": {
     "dockerfile": "Dockerfile",
     "context": "..",
@@ -11,12 +16,18 @@
   "remoteUser": "vscode",
   "workspaceMount": "source=${localWorkspaceFolder},target=/workspaces/iggy,type=bind,consistency=cached",
   "workspaceFolder": "/workspaces/iggy",
-  "runArgs": ["--init"],
+  "runArgs": [
+    "--init",
+    "--security-opt", "seccomp=unconfined",
+    "--ulimit", "memlock=-1:-1",
+    "--cap-add=SYS_NICE"
+  ],
   "mounts": [
     "type=volume,source=iggy-cargo-registry,target=/usr/local/cargo/registry",
     "type=volume,source=iggy-target,target=/workspaces/iggy/target"
   ],
   "containerEnv": {
+    "CARGO_BUILD_JOBS": "4",
     "IGGY_HTTP_ADDRESS": "0.0.0.0:3000",
     "IGGY_QUIC_ADDRESS": "0.0.0.0:8080",
     "IGGY_TCP_ADDRESS": "0.0.0.0:8090",
@@ -41,8 +52,10 @@
         "ms-azuretools.vscode-docker"
       ],
       "settings": {
-        "rust-analyzer.check.command": "clippy",
-        "rust-analyzer.cargo.features": "all",
+        "rust-analyzer.cargo.buildScripts.enable": true,
+        "rust-analyzer.procMacro.enable": true,
+        "rust-analyzer.numThreads": 4,
+        "rust-analyzer.cargo.extraEnv": { "CARGO_BUILD_JOBS": "4" },
         "editor.formatOnSave": true,
         "[rust]": {
           "editor.defaultFormatter": "rust-lang.rust-analyzer"