chore: update workspace templates and images

Author: successbyfailure

Docker-Images/Designer/Dockerfile

@@ -25,7 +25,7 @@ RUN dpkg --add-architecture i386 && \
     apt-get install -y --no-install-recommends \
         build-essential \
         pkg-config \
-        python3 python3-venv python3-pip pipx \
+        python3 python3-venv python3-pip python3-requests pipx \
         zip unzip p7zip-full \
         fuse3 \
         libfuse2 \
@@ -80,7 +80,7 @@ RUN dpkg --add-architecture i386 && \
         alsa-utils \
     && rm -rf /var/lib/apt/lists/*
 
-# OrcaSlicer (AppImage), LaserGRBL (Wine) y VisiCut (.deb)
+# OrcaSlicer (AppImage), LaserGRBL (Wine), OpenCode Desktop y VisiCut (.deb)
 RUN <<'EOSH'
 set -e
 ORCA_VERSION="2.3.1"
@@ -118,16 +118,71 @@ rm /tmp/opencode-desktop.deb
 rm -rf /var/lib/apt/lists/*
 EOSH
 
+# Claude Desktop (.deb repo comunitario) + wrapper no-sandbox para Electron
+RUN <<'EOSH'
+set -e
+curl -fsSL https://aaddrick.github.io/claude-desktop-debian/KEY.gpg | gpg --dearmor -o /usr/share/keyrings/claude-desktop.gpg
+echo "deb [signed-by=/usr/share/keyrings/claude-desktop.gpg arch=amd64,arm64] https://aaddrick.github.io/claude-desktop-debian stable main" > /etc/apt/sources.list.d/claude-desktop.list
+apt-get update
+apt-get install -y --no-install-recommends claude-desktop
+rm -rf /var/lib/apt/lists/*
+if [ -x /usr/share/claude-desktop/claude-desktop ] && [ -x /usr/bin/claude-desktop ]; then
+  mv /usr/bin/claude-desktop /usr/bin/claude-desktop.real || true
+  cat > /usr/bin/claude-desktop <<'EOFWRAP'
+#!/bin/sh
+exec env ELECTRON_DISABLE_SANDBOX=1 ELECTRON_OZONE_PLATFORM_HINT="${ELECTRON_OZONE_PLATFORM_HINT:-auto}" \
+  /usr/share/claude-desktop/claude-desktop --no-sandbox --disable-gpu-sandbox --disable-setuid-sandbox --disable-seccomp-filter-sandbox --no-zygote --disable-gpu "$@"
+EOFWRAP
+  chmod +x /usr/bin/claude-desktop
+fi
+EOSH
+
+# Blender 3.6 LTS (binario oficial)
+ARG BLENDER_VERSION=3.6.23
+RUN <<'EOSH'
+set -e
+BLENDER_DIR="/opt/blender"
+BLENDER_PKG="blender-${BLENDER_VERSION}-linux-x64"
+BLENDER_URL="https://download.blender.org/release/Blender3.6/${BLENDER_PKG}.tar.xz"
+mkdir -p /opt
+curl -fL "${BLENDER_URL}" -o /tmp/blender.tar.xz
+tar -xJf /tmp/blender.tar.xz -C /opt
+rm -f /tmp/blender.tar.xz
+rm -rf "${BLENDER_DIR}"
+mv "/opt/${BLENDER_PKG}" "${BLENDER_DIR}"
+ln -sf "${BLENDER_DIR}/blender" /usr/local/bin/blender
+ln -sf "${BLENDER_DIR}/blender-thumbnailer" /usr/local/bin/blender-thumbnailer || true
+install -D -m 0644 "${BLENDER_DIR}/blender.svg" /usr/share/icons/hicolor/scalable/apps/blender.svg
+cat > /usr/share/applications/blender.desktop <<'EOF'
+[Desktop Entry]
+Type=Application
+Name=Blender
+Exec=blender
+Icon=blender
+Categories=Graphics;3DGraphics;
+Terminal=false
+EOF
+EOSH
+
 # Configuración FUSE para permitir AppImages (allow_other)
 RUN echo "user_allow_other" > /etc/fuse.conf
 
 # Locales
 RUN locale-gen es_ES.UTF-8 en_US.UTF-8 && \
     update-locale LANG=es_ES.UTF-8
 
+# KasmVNC usa `startkde`; en Plasma moderno el binario es `startplasma-x11`.
+RUN if [ -x /usr/bin/startplasma-x11 ] && [ ! -x /usr/bin/startkde ]; then \
+      ln -sf /usr/bin/startplasma-x11 /usr/bin/startkde; \
+    fi && \
+    update-alternatives --set x-session-manager /usr/bin/startplasma-x11 || true
+
 ENV LANG=es_ES.UTF-8 \
     LC_ALL=es_ES.UTF-8
 
+ENV ELECTRON_DISABLE_SANDBOX=1 \
+    ELECTRON_OZONE_PLATFORM_HINT=auto
+
 # Utilidades NVIDIA para `nvidia-smi` cuando se habilitan GPUs
 RUN set -e; \
     apt-get update; \
@@ -138,6 +193,31 @@ RUN set -e; \
     fi; \
     rm -rf /var/lib/apt/lists/*
 
+# Node.js 22 LTS + CLIs de IA para trabajo con código
+RUN install -m 0755 -d /etc/apt/keyrings && \
+    curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg && \
+    echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_22.x nodistro main" \
+      | tee /etc/apt/sources.list.d/nodesource.list > /dev/null && \
+    apt-get update && \
+    apt-get install -y --no-install-recommends nodejs && \
+    npm install -g --omit=dev --no-update-notifier --no-fund \
+        @openai/codex \
+        @anthropic-ai/claude-code && \
+    npm cache clean --force && \
+    rm -rf /var/lib/apt/lists/*
+
+# uv + OpenCode CLI (binario en /usr/local/bin/opencode)
+RUN <<'EOSH'
+set -e
+# uv (Astral)
+curl -LsSf https://astral.sh/uv/install.sh | env UV_INSTALL_DIR=/usr/local/bin UV_NO_MODIFY_PATH=1 sh
+# OpenCode CLI using official installer in an unmanaged path
+export HOME=/opt/opencode-cli
+mkdir -p "$HOME"
+curl -fsSL https://opencode.ai/install | bash -s -- --no-modify-path
+install -m 0755 /opt/opencode-cli/.opencode/bin/opencode /usr/local/bin/opencode
+EOSH
+
 # Desactivar bloqueo/ahorro de pantalla (KDE)
 RUN printf '[Daemon]\nTimeout=0\nLockOnResume=false\nLockOnSuspend=false\nAutolock=false\n' > /etc/xdg/kscreenlockerrc
 
@@ -209,7 +289,7 @@ RUN update-desktop-database /usr/share/applications || true && \
 
 # Crear accesos directos en Desktop para todas las aplicaciones
 RUN mkdir -p /etc/skel/Desktop && \
-    for f in firefox.desktop org.freecadweb.FreeCAD.desktop org.inkscape.Inkscape.desktop gimp.desktop org.kde.krita.desktop org.kicad.kicad.desktop openscad.desktop PrusaSlicer.desktop librecad.desktop meshlab.desktop org.fritzing.Fritzing.desktop net.launchpad.code.simulide.desktop geany.desktop VisiCut.desktop orcaslicer.desktop appimagepool.desktop OpenCode.desktop; do \
+    for f in firefox.desktop org.freecadweb.FreeCAD.desktop org.inkscape.Inkscape.desktop gimp.desktop org.kde.krita.desktop org.kicad.kicad.desktop openscad.desktop PrusaSlicer.desktop librecad.desktop meshlab.desktop org.fritzing.Fritzing.desktop net.launchpad.code.simulide.desktop geany.desktop VisiCut.desktop orcaslicer.desktop appimagepool.desktop OpenCode.desktop claude-desktop.desktop; do \
       src="/usr/share/applications/$f"; \
       if [ -f "$src" ]; then ln -sf "$src" "/etc/skel/Desktop/$f"; fi; \
     done && \

Docker-Images/Developer/Dockerfile

@@ -163,25 +163,23 @@ RUN set -e; \
     fi; \
     rm -rf /var/lib/apt/lists/*
 
-# GitHub Desktop (shiftkey build), Claude Desktop (unofficial build) y OpenCode Desktop
+# GitHub Desktop (shiftkey build), Claude Desktop (repo APT) y OpenCode Desktop
 ARG GITHUB_DESKTOP_REPO=shiftkey/desktop
-ARG CLAUDE_DESKTOP_REPO=aaddrick/claude-desktop-debian
 ARG OPENCODE_DESKTOP_URL=https://opencode.ai/es/download/stable/linux-x64-deb
 RUN set -e; \
     GH_DESKTOP_URL="$(curl -fsSL "https://api.github.com/repos/${GITHUB_DESKTOP_REPO}/releases/latest" | \
       jq -r '.assets[] | select(.name | test("GitHubDesktop-linux-amd64-.*\\.deb$")) | .browser_download_url' | head -n1)"; \
-    CLAUDE_URL="$(curl -fsSL "https://api.github.com/repos/${CLAUDE_DESKTOP_REPO}/releases/latest" | \
-      jq -r '.assets[] | select(.name | test("claude-desktop_.*_amd64\\.deb$")) | .browser_download_url' | head -n1)"; \
-    if [ -z "$GH_DESKTOP_URL" ] || [ -z "$CLAUDE_URL" ] || [ -z "$OPENCODE_DESKTOP_URL" ]; then \
+    if [ -z "$GH_DESKTOP_URL" ] || [ -z "$OPENCODE_DESKTOP_URL" ]; then \
       echo "No se encontraron URLs .deb válidas para las apps desktop" >&2; \
       exit 1; \
     fi; \
     curl -fsSL "$GH_DESKTOP_URL" -o /tmp/github-desktop.deb; \
-    curl -fsSL "$CLAUDE_URL" -o /tmp/claude-desktop.deb; \
     curl -fsSL "$OPENCODE_DESKTOP_URL" -o /tmp/opencode-desktop.deb; \
+    curl -fsSL https://aaddrick.github.io/claude-desktop-debian/KEY.gpg | gpg --dearmor -o /usr/share/keyrings/claude-desktop.gpg; \
+    echo "deb [signed-by=/usr/share/keyrings/claude-desktop.gpg arch=amd64,arm64] https://aaddrick.github.io/claude-desktop-debian stable main" > /etc/apt/sources.list.d/claude-desktop.list; \
     apt-get update; \
-    apt-get install -y --no-install-recommends /tmp/github-desktop.deb /tmp/claude-desktop.deb /tmp/opencode-desktop.deb; \
-    rm -rf /var/lib/apt/lists/* /tmp/github-desktop.deb /tmp/claude-desktop.deb /tmp/opencode-desktop.deb
+    apt-get install -y --no-install-recommends /tmp/github-desktop.deb /tmp/opencode-desktop.deb claude-desktop; \
+    rm -rf /var/lib/apt/lists/* /tmp/github-desktop.deb /tmp/opencode-desktop.deb
 
 # Electron apps dentro de contenedores Docker necesitan desactivar el sandbox
 # (no hay user namespaces). Los wrappers añaden --no-sandbox y pistas de Ozone.

workspaces/AdvancedHostDANGER/main.tf

@@ -77,7 +77,7 @@ data "coder_parameter" "enable_dri" {
   display_name = "[Compute] DRI (/dev/dri)"
   description  = "Mapea /dev/dri para aceleracion grafica (Intel/AMD o NVIDIA via EGL/GL)."
   type         = "bool"
-  default      = false
+  default      = true
   mutable      = true
 }
 
@@ -90,24 +90,6 @@ data "coder_parameter" "persist_projects_storage" {
   mutable      = true
 }
 
-data "coder_parameter" "host_mount_path" {
-  name         = "02_03_host_mount_path"
-  display_name = "[Storage] Montar ruta host en ~/host"
-  description  = "Ruta del host que se monta en /home/coder/host dentro del workspace."
-  type         = "string"
-  default      = ""
-  mutable      = true
-}
-
-data "coder_parameter" "host_mount_uid" {
-  name         = "02_04_host_mount_uid"
-  display_name = "[Storage] Especificar UID para montar la ruta host"
-  description  = "UID para ejecutar el contenedor cuando montas ~/host. Por defecto 1000."
-  type         = "string"
-  default      = "1000"
-  mutable      = true
-}
-
 data "coder_parameter" "git_repo_url" {
   name         = "03_git_repo_url"
   display_name = "[Code] Repositorio Git (opcional)"
@@ -118,28 +100,10 @@ data "coder_parameter" "git_repo_url" {
 }
 
 # Parámetros opcionales para OpenCode
-data "coder_parameter" "opencode_provider_url" {
-  name         = "04_opencode_provider_url"
-  display_name = "[AI/OpenAI] Base URL (opcional)"
-  description  = "Base URL compatible con OpenAI (ej. https://api.tu-proveedor.com/v1)."
-  type         = "string"
-  default      = ""
-  mutable      = true
-}
-
-data "coder_parameter" "opencode_api_key" {
-  name         = "04_opencode_api_key"
-  display_name = "[AI/OpenAI] API key (opcional)"
-  description  = "API key para el proveedor OpenAI compatible. Deja vacío y usa autoprovisión para llave MakeSpace."
-  type         = "string"
-  default      = ""
-  mutable      = true
-}
-
 data "coder_parameter" "autoprovision_freeapi_key" {
   name         = "04_autoprovision_freeapi_key"
   display_name = "[AI/FreeAPI] Provisionar API key automáticamente"
-  description  = "Si hay FREEAPI_BASE_URL/FREEAPI_KEY_ENDPOINT, solicita una key y configura FreeAPI en OpenCode."
+  description  = "Generar automaticamente una key con acceso a recursos gratis externos que pueden no ser privados."
   type         = "bool"
   default      = true
   mutable      = true
@@ -154,24 +118,15 @@ data "coder_parameter" "claude_token" {
   mutable      = true
 }
 
-data "coder_parameter" "vscode_extensions" {
-  name         = "06_vscode_extensions"
-  display_name = "[Code] Extensiones VS Code (preinstalar)"
-  description  = "Lista separada por comas de extensiones a preinstalar en VS Code/code-server."
-  type         = "string"
-  default      = join(", ", local.vscode_extensions_default)
-  mutable      = true
-}
-
 locals {
   username             = data.coder_workspace_owner.me.name
   workspace_image      = "ghcr.io/makespacemadrid/coder-mks-developer:latest"
   persist_home_storage           = data.coder_parameter.persist_home_storage.value
   persist_projects_storage       = data.coder_parameter.persist_projects_storage.value
   enable_gpu                     = data.coder_parameter.enable_gpu.value
   enable_dri                     = data.coder_parameter.enable_dri.value
-  host_mount_path                = trimspace(data.coder_parameter.host_mount_path.value)
-  host_mount_uid                 = trimspace(data.coder_parameter.host_mount_uid.value)
+  host_mount_path                = ""
+  host_mount_uid                 = "1000"
   workspace_storage_root         = trimspace(var.users_storage)
   workspace_storage_home         = local.workspace_storage_root != "" ? "${local.workspace_storage_root}/${local.username}/${lower(data.coder_workspace.me.name)}" : ""
   workspace_storage_projects     = local.workspace_storage_root != "" ? "${local.workspace_storage_root}/${local.username}/${lower(data.coder_workspace.me.name)}/Projects" : ""
@@ -185,22 +140,11 @@ locals {
   repo_url          = trimspace(data.coder_parameter.git_repo_url.value)
   repo_name         = local.repo_url != "" ? trimsuffix(basename(local.repo_url), ".git") : ""
   default_repo_path = local.repo_name != "" ? "/home/coder/Projects/${local.repo_name}" : "/home/coder/Projects"
-  openai_base_url    = trimspace(data.coder_parameter.opencode_provider_url.value)
-  openai_api_key     = trimspace(data.coder_parameter.opencode_api_key.value)
+  openai_base_url    = ""
+  openai_api_key     = ""
   auto_provision_freeapi_key = data.coder_parameter.autoprovision_freeapi_key.value
   claude_token       = trimspace(data.coder_parameter.claude_token.value)
   install_claude     = local.claude_token != ""
-  vscode_extensions_default = [
-    "coder.coder-remote",
-    "openai.chatgpt",
-    "Anthropic.claude-code",
-    "Continue.continue"
-  ]
-  vscode_extensions_input = trimspace(data.coder_parameter.vscode_extensions.value)
-  vscode_extensions = local.vscode_extensions_input != "" ? [
-    for ext in split(",", local.vscode_extensions_input) : trimspace(ext)
-    if trimspace(ext) != ""
-  ] : local.vscode_extensions_default
   continue_default_config = file("${path.module}/continue-config.yaml")
 }
 
@@ -334,15 +278,19 @@ for path in paths:
     with open(path, "w") as f:
         json.dump(data, f, indent=2)
 PY
-    if [ ! -f "$HOME/Projects/.vscode/extensions.json" ]; then
-      mkdir -p "$HOME/Projects/.vscode"
-      cat > "$HOME/Projects/.vscode/extensions.json" <<'VSCODEEXT'
-{
-  "recommendations": [
-${join(",\n", formatlist("    \"%s\"", local.vscode_extensions))}
-  ]
-}
-VSCODEEXT
+    mkdir -p "$HOME/.codex"
+    touch "$HOME/.codex/config.toml"
+    if ! grep -q '^\[mcp_servers\.chrome-devtools\]' "$HOME/.codex/config.toml" 2>/dev/null; then
+      cat >> "$HOME/.codex/config.toml" <<'CODEXCFG'
+
+[mcp_servers.chrome-devtools]
+command = "bash"
+args = [
+  "-lc",
+  "DISPLAY=:1 XAUTHORITY=$HOME/.Xauthority npx -y chrome-devtools-mcp@latest"
+]
+enabled = true
+CODEXCFG
     fi
     mkdir -p ~/.opencode ~/.config/opencode
     if [ ! -f ~/.opencode/opencode.json ]; then
@@ -997,7 +945,6 @@ module "code-server" {
   version    = "~> 1.1"
   agent_id   = coder_agent.main.id
   folder     = "/home/coder/Projects"
-  extensions = local.vscode_extensions
   order      = 1
 }