Merge pull request #3 from penguinranch/booting

feat: Enable SSH public key-based Git commit signing in the devcontai…

Author: lynnwallenstein

templates/.devcontainer/boot-check.sh

@@ -23,4 +23,9 @@ else
     if [ -n "${GIT_EMAIL:-}" ]; then
         git config --global user.email "$GIT_EMAIL"
     fi
+    if [ -n "${SSH_PUBLIC_KEY:-}" ]; then
+        git config --global gpg.format ssh
+        git config --global user.signingkey "key::${SSH_PUBLIC_KEY}"
+        git config --global commit.gpgsign true
+    fi
 fi

templates/.devcontainer/devcontainer.json

@@ -29,14 +29,8 @@
     }
   },
   "postAttachCommand": "code README.md AGENTS.md",
-  "mounts": [
-    "source=${localEnv:HOME}/.ssh,target=/home/vscode/.ssh,type=bind,readonly"
-  ],
   "containerEnv": {
     "GEMINI_API_KEY": "${localEnv:GEMINI_API_KEY}"
   },
-  "remoteEnv": {
-    "GIT_CONFIG_PARAMETERS": "'commit.gpgsign=true' 'gpg.format=ssh' 'user.signingkey=~/.ssh/id_ed25519.pub'"
-  },
   "postStartCommand": "/bin/bash ./.devcontainer/boot-check.sh"
 }

templates/.env.example

@@ -4,6 +4,7 @@
 # Git Configuration (for signing commits within container)
 GIT_NAME=
 GIT_EMAIL=
+SSH_PUBLIC_KEY=
 
 # Gemini CLI API Key (for AI tooling inside the Devcontainer)
 # Get your key at: https://aistudio.google.com/app/apikey

templates/scripts/setup-env.sh

@@ -16,6 +16,12 @@ echo "Setting up environment variables..."
 read -p "Enter your Git Name: " GIT_NAME
 read -p "Enter your Git Email: " GIT_EMAIL
 
+echo ""
+echo "Optional: SSH Public Key for commit signing."
+echo "If you use 1Password as your SSH agent, you can copy the public key string directly."
+echo "(e.g., ssh-ed25519 AAAAC3Nz...)"
+read -p "Enter your SSH Public Key (press Enter to skip): " SSH_PUBLIC_KEY
+
 echo ""
 echo "Optional: The Gemini API Key is used by the Gemini CLI inside this Devcontainer."
 echo "You can get an API key from: https://aistudio.google.com/app/apikey"
@@ -50,10 +56,20 @@ update_env() {
 update_env "GIT_NAME" "$GIT_NAME"
 update_env "GIT_EMAIL" "$GIT_EMAIL"
 
+if [ -n "$SSH_PUBLIC_KEY" ]; then
+    update_env "SSH_PUBLIC_KEY" "$SSH_PUBLIC_KEY"
+fi
+
 # Also configure git locally for the current environment
 git config --global user.name "$GIT_NAME"
 git config --global user.email "$GIT_EMAIL"
 
+if [ -n "$SSH_PUBLIC_KEY" ]; then
+    git config --global gpg.format ssh
+    git config --global user.signingkey "key::${SSH_PUBLIC_KEY}"
+    git config --global commit.gpgsign true
+fi
+
 if [ -n "$GEMINI_API_KEY" ]; then
     update_env "GEMINI_API_KEY" "$GEMINI_API_KEY"
 fi