I got tired of using ordinary devcontainers. Here's what I wanted to build instead:
We sandbox our agents and control their context via clever mounting.
If you're unfamiliar, the Universal Base Image 10 is what they (and their customers) put at the core of any containerized workload.
That makes them wicked stable. EOL for this base image is in 2035.
I tend to go the extra few steps up front to de-god, but there's still some personal config in here. I'm willing to accept any pull request that maintains my default.