code-server/Dockerfile at master · luzifer-docker/code-server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
FROM docker.io/library/golang:1.26.4@sha256:87a41d2539e5671777734e91f467499ed5eafb1fb1f77221dff2744db7a51775 AS builder

ENV GOPATH=/go \
    CGO_ENABLED=0

ARG CODE_SERVER_VERSION=4.123.0
ARG DUMB_INIT_VERSION=1.2.5

SHELL ["/bin/bash", "-euxo", "pipefail", "-c"]

RUN mkdir /rootfs/

# Install dumb-init into rootfs
RUN <<-EOF
  curl -sSfL "https://github.com/Yelp/dumb-init/releases/download/v${DUMB_INIT_VERSION}/dumb-init_${DUMB_INIT_VERSION}_x86_64" |
    install -Dm0755 /dev/stdin /rootfs/usr/bin/dumb-init
EOF

# Install fixuid into rootfs
RUN <<-EOF
  go install github.com/boxboat/fixuid@v0.6.0
  install -Dm4755 /go/bin/fixuid /rootfs/usr/local/bin/fixuid

  echo -e "user: coder\ngroup: coder" |
    install -Dm0644 /dev/stdin /rootfs/etc/fixuid/config.yml
EOF

# Install Code-Server Release
RUN <<-EOF
  install -dm0755 /rootfs/opt/code-server
  curl -sSfL "https://github.com/cdr/code-server/releases/download/v${CODE_SERVER_VERSION}/code-server-${CODE_SERVER_VERSION}-linux-amd64.tar.gz" |
    tar -xz -C /rootfs/opt/code-server --strip-components=1
EOF

COPY entrypoint.sh /rootfs/usr/local/bin/entrypoint.sh

# ---

FROM docker.io/library/debian:13.5-slim@sha256:4e401d95de7083948053197a9c3913343cd06b706bf15eb6a0c3ccd26f436a0e

RUN <<-EOF
  set -ex

  # Install base packages
  apt-get update
  apt-get install --assume-yes --no-install-recommends \
    ca-certificates \
    curl \
    git \
    sudo
  apt-get autoremove --assume-yes --purge
  apt-get clean --assume-yes

  # Configure user to use
  useradd -m -u 1000 -U coder -s /bin/bash
  echo "coder ALL=(ALL) NOPASSWD:ALL" |
    install -Dm0640 /dev/stdin /etc/sudoers.d/nopasswd
EOF

COPY --from=builder /rootfs/ /

EXPOSE 8080

# This way, if someone sets $DOCKER_USER, docker-exec will still work as
# the uid will remain the same. note: only relevant if -u isn't passed to
# docker-run.
USER 1000
ENV USER=coder
WORKDIR /home/coder

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]
CMD ["--auth", "none", "--bind-addr", "0.0.0.0:8080", "--session-socket", "/tmp/code-server-ipc.sock", "."]