diff --git a/.editorconfig b/.editorconfig old mode 100755 new mode 100644 diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md old mode 100755 new mode 100644 index 6b99531a..30d104f2 --- a/.github/CONTRIBUTING.md +++ b/.github/CONTRIBUTING.md @@ -6,7 +6,7 @@ * Read, and fill the Pull Request template * If this is a fix for a typo (in code, documentation, or the README) please file an issue and let us sort it out. We do not need a PR * If the PR is addressing an existing issue include, closes #\, in the body of the PR commit message -* If you want to discuss changes, you can also bring it up in [#dev-talk](https://discordapp.com/channels/354974912613449730/757585807061155840) in our [Discord server](https://discord.gg/YWrKVTn) +* If you want to discuss changes, you can also bring it up in [#dev-talk](https://discordapp.com/channels/354974912613449730/757585807061155840) in our [Discord server](https://linuxserver.io/discord) ## Common files @@ -105,10 +105,10 @@ docker build \ -t linuxserver/code-server:latest . ``` -The ARM variants can be built on x86_64 hardware using `multiarch/qemu-user-static` +The ARM variants can be built on x86_64 hardware and vice versa using `lscr.io/linuxserver/qemu-static` ```bash -docker run --rm --privileged multiarch/qemu-user-static:register --reset +docker run --rm --privileged lscr.io/linuxserver/qemu-static --reset ``` Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64`. diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml old mode 100755 new mode 100644 diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml old mode 100755 new mode 100644 index 496066b3..9e7ee210 --- a/.github/ISSUE_TEMPLATE/config.yml +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -1,7 +1,7 @@ blank_issues_enabled: false contact_links: - name: Discord chat support - url: https://discord.gg/YWrKVTn + url: https://linuxserver.io/discord about: Realtime support / chat with the community and the team. - name: Discourse discussion forum diff --git a/.github/ISSUE_TEMPLATE/issue.bug.yml b/.github/ISSUE_TEMPLATE/issue.bug.yml old mode 100755 new mode 100644 diff --git a/.github/ISSUE_TEMPLATE/issue.feature.yml b/.github/ISSUE_TEMPLATE/issue.feature.yml old mode 100755 new mode 100644 diff --git a/.github/workflows/call_issue_pr_tracker.yml b/.github/workflows/call_issue_pr_tracker.yml old mode 100755 new mode 100644 index 2c307843..d07cf121 --- a/.github/workflows/call_issue_pr_tracker.yml +++ b/.github/workflows/call_issue_pr_tracker.yml @@ -8,6 +8,9 @@ on: pull_request_review: types: [submitted,edited,dismissed] +permissions: + contents: read + jobs: manage-project: permissions: diff --git a/.github/workflows/call_issues_cron.yml b/.github/workflows/call_issues_cron.yml old mode 100755 new mode 100644 index 5d333fa9..2031b772 --- a/.github/workflows/call_issues_cron.yml +++ b/.github/workflows/call_issues_cron.yml @@ -4,6 +4,9 @@ on: - cron: '31 1 * * *' workflow_dispatch: +permissions: + contents: read + jobs: stale: permissions: diff --git a/.github/workflows/external_trigger.yml b/.github/workflows/external_trigger.yml index b393743d..c62e1beb 100644 --- a/.github/workflows/external_trigger.yml +++ b/.github/workflows/external_trigger.yml @@ -3,6 +3,9 @@ name: External Trigger Main on: workflow_dispatch: +permissions: + contents: read + jobs: external-trigger-master: runs-on: ubuntu-latest @@ -15,7 +18,10 @@ jobs: SKIP_EXTERNAL_TRIGGER: ${{ vars.SKIP_EXTERNAL_TRIGGER }} run: | printf "# External trigger for docker-code-server\n\n" >> $GITHUB_STEP_SUMMARY - if grep -q "^code-server_master" <<< "${SKIP_EXTERNAL_TRIGGER}"; then + if grep -q "^code-server_master_" <<< "${SKIP_EXTERNAL_TRIGGER}"; then + echo "> [!NOTE]" >> $GITHUB_STEP_SUMMARY + echo "> Github organizational variable \`SKIP_EXTERNAL_TRIGGER\` contains \`code-server_master_\`; will skip trigger if version matches." >> $GITHUB_STEP_SUMMARY + elif grep -q "^code-server_master" <<< "${SKIP_EXTERNAL_TRIGGER}"; then echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY echo "> Github organizational variable \`SKIP_EXTERNAL_TRIGGER\` contains \`code-server_master\`; skipping trigger." >> $GITHUB_STEP_SUMMARY exit 0 @@ -25,6 +31,11 @@ jobs: printf "\n## Retrieving external version\n\n" >> $GITHUB_STEP_SUMMARY EXT_RELEASE=$(curl -u ${{ secrets.CR_USER }}:${{ secrets.CR_PAT }} -sX GET https://api.github.com/repos/coder/code-server/releases/latest | jq -r '.tag_name' | sed 's|^v||') echo "Type is \`custom_version_command\`" >> $GITHUB_STEP_SUMMARY + if grep -q "^code-server_master_${EXT_RELEASE}" <<< "${SKIP_EXTERNAL_TRIGGER}"; then + echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY + echo "> Github organizational variable \`SKIP_EXTERNAL_TRIGGER\` matches current external release; skipping trigger." >> $GITHUB_STEP_SUMMARY + exit 0 + fi if [ -z "${EXT_RELEASE}" ] || [ "${EXT_RELEASE}" == "null" ]; then echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY echo "> Can't retrieve external version, exiting" >> $GITHUB_STEP_SUMMARY @@ -35,24 +46,43 @@ jobs: "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} exit 1 fi - EXT_RELEASE=$(echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g') - echo "External version: \`${EXT_RELEASE}\`" >> $GITHUB_STEP_SUMMARY + EXT_RELEASE_SANITIZED=$(echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g') + echo "Sanitized external version: \`${EXT_RELEASE_SANITIZED}\`" >> $GITHUB_STEP_SUMMARY echo "Retrieving last pushed version" >> $GITHUB_STEP_SUMMARY image="linuxserver/code-server" tag="latest" token=$(curl -sX GET \ "https://ghcr.io/token?scope=repository%3Alinuxserver%2Fcode-server%3Apull" \ | jq -r '.token') - multidigest=$(curl -s \ - --header "Accept: application/vnd.docker.distribution.manifest.v2+json" \ - --header "Authorization: Bearer ${token}" \ - "https://ghcr.io/v2/${image}/manifests/${tag}" \ - | jq -r 'first(.manifests[].digest)') - digest=$(curl -s \ + multidigest=$(curl -s \ + --header "Accept: application/vnd.docker.distribution.manifest.v2+json" \ + --header "Accept: application/vnd.oci.image.index.v1+json" \ + --header "Authorization: Bearer ${token}" \ + "https://ghcr.io/v2/${image}/manifests/${tag}") + if jq -e '.layers // empty' <<< "${multidigest}" >/dev/null 2>&1; then + # If there's a layer element it's a single-arch manifest so just get that digest + digest=$(jq -r '.config.digest' <<< "${multidigest}") + else + # Otherwise it's multi-arch or has manifest annotations + if jq -e '.manifests[]?.annotations // empty' <<< "${multidigest}" >/dev/null 2>&1; then + # Check for manifest annotations and delete if found + multidigest=$(jq 'del(.manifests[] | select(.annotations))' <<< "${multidigest}") + fi + if [[ $(jq '.manifests | length' <<< "${multidigest}") -gt 1 ]]; then + # If there's still more than one digest, it's multi-arch + multidigest=$(jq -r ".manifests[] | select(.platform.architecture == \"amd64\").digest?" <<< "${multidigest}") + else + # Otherwise it's single arch + multidigest=$(jq -r ".manifests[].digest?" <<< "${multidigest}") + fi + if digest=$(curl -s \ --header "Accept: application/vnd.docker.distribution.manifest.v2+json" \ + --header "Accept: application/vnd.oci.image.manifest.v1+json" \ --header "Authorization: Bearer ${token}" \ - "https://ghcr.io/v2/${image}/manifests/${multidigest}" \ - | jq -r '.config.digest') + "https://ghcr.io/v2/${image}/manifests/${multidigest}"); then + digest=$(jq -r '.config.digest' <<< "${digest}"); + fi + fi image_info=$(curl -sL \ --header "Authorization: Bearer ${token}" \ "https://ghcr.io/v2/${image}/blobs/${digest}") @@ -73,8 +103,8 @@ jobs: exit 1 fi echo "Last pushed version: \`${IMAGE_VERSION}\`" >> $GITHUB_STEP_SUMMARY - if [ "${EXT_RELEASE}" == "${IMAGE_VERSION}" ]; then - echo "Version \`${EXT_RELEASE}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY + if [ "${EXT_RELEASE_SANITIZED}" == "${IMAGE_VERSION}" ]; then + echo "Sanitized version \`${EXT_RELEASE_SANITIZED}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY exit 0 elif [ $(curl -s https://ci.linuxserver.io/job/Docker-Pipeline-Builders/job/docker-code-server/job/master/lastBuild/api/json | jq -r '.building') == "true" ]; then echo "New version \`${EXT_RELEASE}\` found; but there already seems to be an active build on Jenkins; exiting" >> $GITHUB_STEP_SUMMARY @@ -89,8 +119,8 @@ jobs: "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} else printf "\n## Trigger new build\n\n" >> $GITHUB_STEP_SUMMARY - echo "New version \`${EXT_RELEASE}\` found; old version was \`${IMAGE_VERSION}\`. Triggering new build" >> $GITHUB_STEP_SUMMARY - if "${artifacts_found}" == "true" ]]; then + echo "New sanitized version \`${EXT_RELEASE_SANITIZED}\` found; old version was \`${IMAGE_VERSION}\`. Triggering new build" >> $GITHUB_STEP_SUMMARY + if [[ "${artifacts_found}" == "true" ]]; then echo "All artifacts seem to be uploaded." >> $GITHUB_STEP_SUMMARY fi response=$(curl -iX POST \ @@ -109,7 +139,7 @@ jobs: --data-urlencode "description=GHA external trigger https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" \ --data-urlencode "Submit=Submit" echo "**** Notifying Discord ****" - TRIGGER_REASON="A version change was detected for code-server tag latest. Old version:${IMAGE_VERSION} New version:${EXT_RELEASE}" + TRIGGER_REASON="A version change was detected for code-server tag latest. Old version:${IMAGE_VERSION} New version:${EXT_RELEASE_SANITIZED}" curl -X POST -H "Content-Type: application/json" --data '{"avatar_url": "https://cdn.discordapp.com/avatars/354986384542662657/df91181b3f1cf0ef1592fbe18e0962d7.png","embeds": [{"color": 9802903, "description": "**Build Triggered** \n**Reason:** '"${TRIGGER_REASON}"' \n**Build URL:** '"${buildurl}display/redirect"' \n"}], "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} diff --git a/.github/workflows/external_trigger_scheduler.yml b/.github/workflows/external_trigger_scheduler.yml index 38bb794a..94943e5a 100644 --- a/.github/workflows/external_trigger_scheduler.yml +++ b/.github/workflows/external_trigger_scheduler.yml @@ -5,6 +5,9 @@ on: - cron: '32 * * * *' workflow_dispatch: +permissions: + contents: read + jobs: external-trigger-scheduler: runs-on: ubuntu-latest diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml old mode 100755 new mode 100644 index c071b7fe..f63a55e8 --- a/.github/workflows/greetings.yml +++ b/.github/workflows/greetings.yml @@ -2,8 +2,14 @@ name: Greetings on: [pull_request_target, issues] +permissions: + contents: read + jobs: greeting: + permissions: + issues: write + pull-requests: write runs-on: ubuntu-latest steps: - uses: actions/first-interaction@v1 diff --git a/.github/workflows/package_trigger_scheduler.yml b/.github/workflows/package_trigger_scheduler.yml index 4a0a0b82..d0982556 100644 --- a/.github/workflows/package_trigger_scheduler.yml +++ b/.github/workflows/package_trigger_scheduler.yml @@ -5,6 +5,9 @@ on: - cron: '0 20 * * 6' workflow_dispatch: +permissions: + contents: read + jobs: package-trigger-scheduler: runs-on: ubuntu-latest @@ -27,9 +30,18 @@ jobs: fi printf "\n## Evaluating \`%s\`\n\n" ${br} >> $GITHUB_STEP_SUMMARY JENKINS_VARS=$(curl -sX GET https://raw.githubusercontent.com/linuxserver/docker-code-server/${br}/jenkins-vars.yml) - if [[ "${br}" == $(yq -r '.ls_branch' <<< "${JENKINS_VARS}") ]]; then + if ! curl -sfX GET https://raw.githubusercontent.com/linuxserver/docker-code-server/${br}/Jenkinsfile >/dev/null 2>&1; then + echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY + echo "> No Jenkinsfile found. Branch is either deprecated or is an early dev branch." >> $GITHUB_STEP_SUMMARY + skipped_branches="${skipped_branches}${br} " + elif [[ "${br}" == $(yq -r '.ls_branch' <<< "${JENKINS_VARS}") ]]; then echo "Branch appears to be live; checking workflow." >> $GITHUB_STEP_SUMMARY - if [[ $(yq -r '.skip_package_check' <<< "${JENKINS_VARS}") == "true" ]]; then + README_VARS=$(curl -sX GET https://raw.githubusercontent.com/linuxserver/docker-code-server/${br}/readme-vars.yml) + if [[ $(yq -r '.project_deprecation_status' <<< "${README_VARS}") == "true" ]]; then + echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY + echo "> Branch appears to be deprecated; skipping trigger." >> $GITHUB_STEP_SUMMARY + skipped_branches="${skipped_branches}${br} " + elif [[ $(yq -r '.skip_package_check' <<< "${JENKINS_VARS}") == "true" ]]; then echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY echo "> Skipping branch ${br} due to \`skip_package_check\` being set in \`jenkins-vars.yml\`." >> $GITHUB_STEP_SUMMARY skipped_branches="${skipped_branches}${br} " @@ -37,7 +49,7 @@ jobs: echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY echo "> Github organizational variable \`SKIP_PACKAGE_TRIGGER\` contains \`code-server_${br}\`; skipping trigger." >> $GITHUB_STEP_SUMMARY skipped_branches="${skipped_branches}${br} " - elif [ $(curl -s https://ci.linuxserver.io/job/Docker-Pipeline-Builders/job/docker-code-server/job/${br}/lastBuild/api/json | jq -r '.building') == "true" ]; then + elif [ $(curl -s https://ci.linuxserver.io/job/Docker-Pipeline-Builders/job/docker-code-server/job/${br}/lastBuild/api/json | jq -r '.building' 2>/dev/null) == "true" ]; then echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY echo "> There already seems to be an active build on Jenkins; skipping package trigger for ${br}" >> $GITHUB_STEP_SUMMARY skipped_branches="${skipped_branches}${br} " @@ -49,6 +61,11 @@ jobs: response=$(curl -iX POST \ https://ci.linuxserver.io/job/Docker-Pipeline-Builders/job/docker-code-server/job/${br}/buildWithParameters?PACKAGE_CHECK=true \ --user ${{ secrets.JENKINS_USER }}:${{ secrets.JENKINS_TOKEN }} | grep -i location | sed "s|^[L|l]ocation: \(.*\)|\1|") + if [[ -z "${response}" ]]; then + echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY + echo "> Jenkins build could not be triggered. Skipping branch." + continue + fi echo "Jenkins [job queue url](${response%$'\r'})" >> $GITHUB_STEP_SUMMARY echo "Sleeping 10 seconds until job starts" >> $GITHUB_STEP_SUMMARY sleep 10 @@ -56,11 +73,14 @@ jobs: buildurl="${buildurl%$'\r'}" echo "Jenkins job [build url](${buildurl})" >> $GITHUB_STEP_SUMMARY echo "Attempting to change the Jenkins job description" >> $GITHUB_STEP_SUMMARY - curl -iX POST \ + if ! curl -ifX POST \ "${buildurl}submitDescription" \ --user ${{ secrets.JENKINS_USER }}:${{ secrets.JENKINS_TOKEN }} \ --data-urlencode "description=GHA package trigger https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" \ - --data-urlencode "Submit=Submit" + --data-urlencode "Submit=Submit"; then + echo "> [!WARNING]" >> $GITHUB_STEP_SUMMARY + echo "> Unable to change the Jenkins job description." + fi sleep 20 fi else @@ -70,13 +90,14 @@ jobs: if [[ -n "${triggered_branches}" ]] || [[ -n "${skipped_branches}" ]]; then if [[ -n "${triggered_branches}" ]]; then NOTIFY_BRANCHES="**Triggered:** ${triggered_branches} \n" + NOTIFY_BUILD_URL="**Build URL:** https://ci.linuxserver.io/blue/organizations/jenkins/Docker-Pipeline-Builders%2Fdocker-code-server/activity/ \n" + echo "**** Package check build(s) triggered for branch(es): ${triggered_branches} ****" fi if [[ -n "${skipped_branches}" ]]; then NOTIFY_BRANCHES="${NOTIFY_BRANCHES}**Skipped:** ${skipped_branches} \n" fi - echo "**** Package check build(s) triggered for branch(es): ${triggered_branches} ****" echo "**** Notifying Discord ****" curl -X POST -H "Content-Type: application/json" --data '{"avatar_url": "https://cdn.discordapp.com/avatars/354986384542662657/df91181b3f1cf0ef1592fbe18e0962d7.png","embeds": [{"color": 9802903, - "description": "**Package Check Build(s) Triggered for code-server** \n'"${NOTIFY_BRANCHES}"'**Build URL:** '"https://ci.linuxserver.io/blue/organizations/jenkins/Docker-Pipeline-Builders%2Fdocker-code-server/activity/"' \n"}], + "description": "**Package Check Build(s) for code-server** \n'"${NOTIFY_BRANCHES}"''"${NOTIFY_BUILD_URL}"'"}], "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} fi diff --git a/.github/workflows/permissions.yml b/.github/workflows/permissions.yml old mode 100755 new mode 100644 diff --git a/Jenkinsfile b/Jenkinsfile index d85e3828..d6955fb1 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -8,7 +8,7 @@ pipeline { } // Input to determine if this is a package check parameters { - string(defaultValue: 'false', description: 'package check run', name: 'PACKAGE_CHECK') + string(defaultValue: 'false', description: 'package check run', name: 'PACKAGE_CHECK') } // Configuration for the variables used for this specific repo environment { @@ -56,13 +56,27 @@ pipeline { steps{ echo "Running on node: ${NODE_NAME}" sh '''#! /bin/bash - containers=$(docker ps -aq) + echo "Pruning builder" + docker builder prune -f --builder container || : + containers=$(docker ps -q) if [[ -n "${containers}" ]]; then - docker stop ${containers} + BUILDX_CONTAINER_ID=$(docker ps -qf 'name=buildx_buildkit') + for container in ${containers}; do + if [[ "${container}" == "${BUILDX_CONTAINER_ID}" ]]; then + echo "skipping buildx container in docker stop" + else + echo "Stopping container ${container}" + docker stop ${container} + fi + done fi - docker system prune -af --volumes || : ''' + docker system prune -f --volumes || : + docker image prune -af || : + ''' script{ env.EXIT_STATUS = '' + env.CI_TEST_ATTEMPTED = '' + env.PUSH_ATTEMPTED = '' env.LS_RELEASE = sh( script: '''docker run --rm quay.io/skopeo/stable:v1 inspect docker://ghcr.io/${LS_USER}/${CONTAINER_NAME}:latest 2>/dev/null | jq -r '.Labels.build_version' | awk '{print $3}' | grep '\\-ls' || : ''', returnStdout: true).trim() @@ -82,7 +96,11 @@ pipeline { env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DOCKERHUB_IMAGE + '/tags/' env.PULL_REQUEST = env.CHANGE_ID env.TEMPLATED_FILES = 'Jenkinsfile README.md LICENSE .editorconfig ./.github/CONTRIBUTING.md ./.github/FUNDING.yml ./.github/ISSUE_TEMPLATE/config.yml ./.github/ISSUE_TEMPLATE/issue.bug.yml ./.github/ISSUE_TEMPLATE/issue.feature.yml ./.github/PULL_REQUEST_TEMPLATE.md ./.github/workflows/external_trigger_scheduler.yml ./.github/workflows/greetings.yml ./.github/workflows/package_trigger_scheduler.yml ./.github/workflows/call_issue_pr_tracker.yml ./.github/workflows/call_issues_cron.yml ./.github/workflows/permissions.yml ./.github/workflows/external_trigger.yml' + if ( env.SYFT_IMAGE_TAG == null ) { + env.SYFT_IMAGE_TAG = 'latest' + } } + echo "Using syft image tag ${SYFT_IMAGE_TAG}" sh '''#! /bin/bash echo "The default github branch detected as ${GH_DEFAULT_BRANCH}" ''' script{ @@ -191,6 +209,8 @@ pipeline { env.VERSION_TAG = env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER env.META_TAG = env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER env.EXT_RELEASE_TAG = 'version-' + env.EXT_RELEASE_CLEAN + env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'latest' } } } @@ -215,6 +235,8 @@ pipeline { env.META_TAG = env.EXT_RELEASE_CLEAN + '-pkg-' + env.PACKAGE_TAG + '-dev-' + env.COMMIT_SHA env.EXT_RELEASE_TAG = 'version-' + env.EXT_RELEASE_CLEAN env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DEV_DOCKERHUB_IMAGE + '/tags/' + env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'develop' } } } @@ -239,6 +261,8 @@ pipeline { env.EXT_RELEASE_TAG = 'version-' + env.EXT_RELEASE_CLEAN env.CODE_URL = 'https://github.com/' + env.LS_USER + '/' + env.LS_REPO + '/pull/' + env.PULL_REQUEST env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.PR_DOCKERHUB_IMAGE + '/tags/' + env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'develop' } } } @@ -261,7 +285,7 @@ pipeline { -v ${WORKSPACE}:/mnt \ -e AWS_ACCESS_KEY_ID=\"${S3_KEY}\" \ -e AWS_SECRET_ACCESS_KEY=\"${S3_SECRET}\" \ - ghcr.io/linuxserver/baseimage-alpine:3.20 s6-envdir -fn -- /var/run/s6/container_environment /bin/bash -c "\ + ghcr.io/linuxserver/baseimage-alpine:3.23 s6-envdir -fn -- /var/run/s6/container_environment /bin/bash -c "\ apk add --no-cache python3 && \ python3 -m venv /lsiopy && \ pip install --no-cache-dir -U pip && \ @@ -335,6 +359,35 @@ pipeline { else echo "No templates to delete" fi + echo "Starting Stage 2.5 - Update init diagram" + if ! grep -q 'init_diagram:' readme-vars.yml; then + echo "Adding the key 'init_diagram' to readme-vars.yml" + sed -i '\\|^#.*changelog.*$|d' readme-vars.yml + sed -i 's|^changelogs:|# init diagram\\ninit_diagram:\\n\\n# changelog\\nchangelogs:|' readme-vars.yml + fi + mkdir -p ${TEMPDIR}/d2 + docker run --rm -v ${TEMPDIR}/d2:/output -e PUID=$(id -u) -e PGID=$(id -g) -e RAW="true" ghcr.io/linuxserver/d2-builder:latest ${CONTAINER_NAME}:latest + ls -al ${TEMPDIR}/d2 + yq -ei ".init_diagram |= load_str(\\"${TEMPDIR}/d2/${CONTAINER_NAME}-latest.d2\\")" readme-vars.yml + if [[ $(md5sum readme-vars.yml | cut -c1-8) != $(md5sum ${TEMPDIR}/docker-${CONTAINER_NAME}/readme-vars.yml | cut -c1-8) ]]; then + echo "'init_diagram' has been updated. Updating repo and exiting build, new one will trigger based on commit." + mkdir -p ${TEMPDIR}/repo + git clone https://github.com/${LS_USER}/${LS_REPO}.git ${TEMPDIR}/repo/${LS_REPO} + cd ${TEMPDIR}/repo/${LS_REPO} + git checkout -f master + cp ${WORKSPACE}/readme-vars.yml ${TEMPDIR}/repo/${LS_REPO}/readme-vars.yml + git add readme-vars.yml + git commit -m 'Bot Updating Templated Files' + git pull https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master + git push https://LinuxServer-CI:${GITHUB_TOKEN}@github.com/${LS_USER}/${LS_REPO}.git master + echo "true" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER} + echo "Updating templates and exiting build, new one will trigger based on commit" + rm -Rf ${TEMPDIR} + exit 0 + else + echo "false" > /tmp/${COMMIT_SHA}-${BUILD_NUMBER} + echo "Init diagram is unchanged" + fi echo "Starting Stage 3 - Update templates" CURRENTHASH=$(grep -hs ^ ${TEMPLATED_FILES} | md5sum | cut -c1-8) cd ${TEMPDIR}/docker-${CONTAINER_NAME} @@ -541,10 +594,47 @@ pipeline { --label \"org.opencontainers.image.licenses=GPL-3.0-only\" \ --label \"org.opencontainers.image.ref.name=${COMMIT_SHA}\" \ --label \"org.opencontainers.image.title=Code-server\" \ - --label \"org.opencontainers.image.description=[Code-server](https://coder.com) is VS Code running on a remote server, accessible through the browser. - Code on your Chromebook, tablet, and laptop with a consistent dev environment. - If you have a Windows or Mac workstation, more easily develop for Linux. - Take advantage of large cloud servers to speed up tests, compilations, downloads, and more. - Preserve battery life when you're on the go. - All intensive computation runs on your server. - You're no longer running excess instances of Chrome.\" \ + --label \"org.opencontainers.image.description=[Code-server](https://coder.com) is VS Code running on a remote server, accessible through the browser. - Code on your Chromebook, tablet, and laptop with a consistent dev environment. - If you have a Windows or Mac workstation, more easily develop for Linux. - Take advantage of large cloud servers to speed up tests, compilations, downloads, and more. - Preserve battery life when you're on the go. - All intensive computation runs on your server. - You're no longer running excess instances of Chrome. \" \ --no-cache --pull -t ${IMAGE}:${META_TAG} --platform=linux/amd64 \ - --provenance=false --sbom=false \ + --provenance=true --sbom=true --builder=container --load \ --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${VERSION_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ." + sh '''#! /bin/bash + set -e + IFS=',' read -ra CACHE <<< "$BUILDCACHE" + for i in "${CACHE[@]}"; do + docker tag ${IMAGE}:${META_TAG} ${i}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} + done + ''' + withCredentials([ + [ + $class: 'UsernamePasswordMultiBinding', + credentialsId: 'Quay.io-Robot', + usernameVariable: 'QUAYUSER', + passwordVariable: 'QUAYPASS' + ] + ]) { + retry_backoff(5,5) { + sh '''#! /bin/bash + set -e + echo $DOCKERHUB_TOKEN | docker login -u linuxserverci --password-stdin + echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin + echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin + echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin + + if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids + IFS=',' read -ra CACHE <<< "$BUILDCACHE" + for i in "${CACHE[@]}"; do + docker push ${i}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" + done + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } + done + fi + ''' + } + } } } // Build MultiArch Docker containers for push to LS Repo @@ -573,10 +663,47 @@ pipeline { --label \"org.opencontainers.image.licenses=GPL-3.0-only\" \ --label \"org.opencontainers.image.ref.name=${COMMIT_SHA}\" \ --label \"org.opencontainers.image.title=Code-server\" \ - --label \"org.opencontainers.image.description=[Code-server](https://coder.com) is VS Code running on a remote server, accessible through the browser. - Code on your Chromebook, tablet, and laptop with a consistent dev environment. - If you have a Windows or Mac workstation, more easily develop for Linux. - Take advantage of large cloud servers to speed up tests, compilations, downloads, and more. - Preserve battery life when you're on the go. - All intensive computation runs on your server. - You're no longer running excess instances of Chrome.\" \ + --label \"org.opencontainers.image.description=[Code-server](https://coder.com) is VS Code running on a remote server, accessible through the browser. - Code on your Chromebook, tablet, and laptop with a consistent dev environment. - If you have a Windows or Mac workstation, more easily develop for Linux. - Take advantage of large cloud servers to speed up tests, compilations, downloads, and more. - Preserve battery life when you're on the go. - All intensive computation runs on your server. - You're no longer running excess instances of Chrome. \" \ --no-cache --pull -t ${IMAGE}:amd64-${META_TAG} --platform=linux/amd64 \ - --provenance=false --sbom=false \ + --provenance=true --sbom=true --builder=container --load \ --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${VERSION_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ." + sh '''#! /bin/bash + set -e + IFS=',' read -ra CACHE <<< "$BUILDCACHE" + for i in "${CACHE[@]}"; do + docker tag ${IMAGE}:amd64-${META_TAG} ${i}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} + done + ''' + withCredentials([ + [ + $class: 'UsernamePasswordMultiBinding', + credentialsId: 'Quay.io-Robot', + usernameVariable: 'QUAYUSER', + passwordVariable: 'QUAYPASS' + ] + ]) { + retry_backoff(5,5) { + sh '''#! /bin/bash + set -e + echo $DOCKERHUB_TOKEN | docker login -u linuxserverci --password-stdin + echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin + echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin + echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin + + if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids + IFS=',' read -ra CACHE <<< "$BUILDCACHE" + for i in "${CACHE[@]}"; do + docker push ${i}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" + done + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } + done + fi + ''' + } + } } } stage('Build ARM64') { @@ -585,10 +712,6 @@ pipeline { } steps { echo "Running on node: ${NODE_NAME}" - echo 'Logging into Github' - sh '''#! /bin/bash - echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin - ''' sh "sed -r -i 's|(^FROM .*)|\\1\\n\\nENV LSIO_FIRST_PARTY=true|g' Dockerfile.aarch64" sh "docker buildx build \ --label \"org.opencontainers.image.created=${GITHUB_DATE}\" \ @@ -602,20 +725,54 @@ pipeline { --label \"org.opencontainers.image.licenses=GPL-3.0-only\" \ --label \"org.opencontainers.image.ref.name=${COMMIT_SHA}\" \ --label \"org.opencontainers.image.title=Code-server\" \ - --label \"org.opencontainers.image.description=[Code-server](https://coder.com) is VS Code running on a remote server, accessible through the browser. - Code on your Chromebook, tablet, and laptop with a consistent dev environment. - If you have a Windows or Mac workstation, more easily develop for Linux. - Take advantage of large cloud servers to speed up tests, compilations, downloads, and more. - Preserve battery life when you're on the go. - All intensive computation runs on your server. - You're no longer running excess instances of Chrome.\" \ + --label \"org.opencontainers.image.description=[Code-server](https://coder.com) is VS Code running on a remote server, accessible through the browser. - Code on your Chromebook, tablet, and laptop with a consistent dev environment. - If you have a Windows or Mac workstation, more easily develop for Linux. - Take advantage of large cloud servers to speed up tests, compilations, downloads, and more. - Preserve battery life when you're on the go. - All intensive computation runs on your server. - You're no longer running excess instances of Chrome. \" \ --no-cache --pull -f Dockerfile.aarch64 -t ${IMAGE}:arm64v8-${META_TAG} --platform=linux/arm64 \ - --provenance=false --sbom=false \ + --provenance=true --sbom=true --builder=container --load \ --build-arg ${BUILD_VERSION_ARG}=${EXT_RELEASE} --build-arg VERSION=\"${VERSION_TAG}\" --build-arg BUILD_DATE=${GITHUB_DATE} ." - sh "docker tag ${IMAGE}:arm64v8-${META_TAG} ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER}" - retry_backoff(5,5) { - sh "docker push ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER}" + sh '''#! /bin/bash + set -e + IFS=',' read -ra CACHE <<< "$BUILDCACHE" + for i in "${CACHE[@]}"; do + docker tag ${IMAGE}:arm64v8-${META_TAG} ${i}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} + done + ''' + withCredentials([ + [ + $class: 'UsernamePasswordMultiBinding', + credentialsId: 'Quay.io-Robot', + usernameVariable: 'QUAYUSER', + passwordVariable: 'QUAYPASS' + ] + ]) { + retry_backoff(5,5) { + sh '''#! /bin/bash + set -e + echo $DOCKERHUB_TOKEN | docker login -u linuxserverci --password-stdin + echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin + echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin + echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin + if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids + IFS=',' read -ra CACHE <<< "$BUILDCACHE" + for i in "${CACHE[@]}"; do + docker push ${i}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" + done + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } + done + fi + ''' + } } sh '''#! /bin/bash containers=$(docker ps -aq) if [[ -n "${containers}" ]]; then docker stop ${containers} fi - docker system prune -af --volumes || : ''' + docker system prune -f --volumes || : + docker image prune -af || : + ''' } } } @@ -640,7 +797,7 @@ pipeline { docker run --rm \ -v /var/run/docker.sock:/var/run/docker.sock:ro \ -v ${TEMPDIR}:/tmp \ - ghcr.io/anchore/syft:latest \ + ghcr.io/anchore/syft:${SYFT_IMAGE_TAG} \ ${LOCAL_CONTAINER} -o table=/tmp/package_versions.txt NEW_PACKAGE_TAG=$(md5sum ${TEMPDIR}/package_versions.txt | cut -c1-8 ) echo "Package tag sha from current packages in buit container is ${NEW_PACKAGE_TAG} comparing to old ${PACKAGE_TAG} from github" @@ -716,6 +873,7 @@ pipeline { script{ env.CI_URL = 'https://ci-tests.linuxserver.io/' + env.IMAGE + '/' + env.META_TAG + '/index.html' env.CI_JSON_URL = 'https://ci-tests.linuxserver.io/' + env.IMAGE + '/' + env.META_TAG + '/report.json' + env.CI_TEST_ATTEMPTED = 'true' } sh '''#! /bin/bash set -e @@ -727,7 +885,7 @@ pipeline { CI_DOCKERENV="LSIO_FIRST_PARTY=true" fi fi - docker pull ghcr.io/linuxserver/ci:latest + docker pull ghcr.io/linuxserver/ci:${CITEST_IMAGETAG} if [ "${MULTIARCH}" == "true" ]; then docker pull ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} --platform=arm64 docker tag ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} ${IMAGE}:arm64v8-${META_TAG} @@ -750,7 +908,10 @@ pipeline { -e WEB_AUTH=\"${CI_AUTH}\" \ -e WEB_PATH=\"${CI_WEBPATH}\" \ -e NODE_NAME=\"${NODE_NAME}\" \ - -t ghcr.io/linuxserver/ci:latest \ + -e SYFT_IMAGE_TAG=\"${CI_SYFT_IMAGE_TAG:-${SYFT_IMAGE_TAG}}\" \ + -e COMMIT_SHA=\"${COMMIT_SHA}\" \ + -e BUILD_NUMBER=\"${BUILD_NUMBER}\" \ + -t ghcr.io/linuxserver/ci:${CITEST_IMAGETAG} \ python3 test_build.py''' } } @@ -765,37 +926,28 @@ pipeline { environment name: 'EXIT_STATUS', value: '' } steps { - withCredentials([ - [ - $class: 'UsernamePasswordMultiBinding', - credentialsId: 'Quay.io-Robot', - usernameVariable: 'QUAYUSER', - passwordVariable: 'QUAYPASS' - ] - ]) { - retry_backoff(5,5) { - sh '''#! /bin/bash - set -e - echo $DOCKERHUB_TOKEN | docker login -u linuxserverci --password-stdin - echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin - echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin - echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin - for PUSHIMAGE in "${GITHUBIMAGE}" "${GITLABIMAGE}" "${QUAYIMAGE}" "${IMAGE}"; do - docker tag ${IMAGE}:${META_TAG} ${PUSHIMAGE}:${META_TAG} - docker tag ${PUSHIMAGE}:${META_TAG} ${PUSHIMAGE}:latest - docker tag ${PUSHIMAGE}:${META_TAG} ${PUSHIMAGE}:${EXT_RELEASE_TAG} - if [ -n "${SEMVER}" ]; then - docker tag ${PUSHIMAGE}:${META_TAG} ${PUSHIMAGE}:${SEMVER} - fi - docker push ${PUSHIMAGE}:latest - docker push ${PUSHIMAGE}:${META_TAG} - docker push ${PUSHIMAGE}:${EXT_RELEASE_TAG} - if [ -n "${SEMVER}" ]; then - docker push ${PUSHIMAGE}:${SEMVER} - fi + script{ + env.PUSH_ATTEMPTED = 'true' + } + retry_backoff(5,5) { + sh '''#! /bin/bash + set -e + for PUSHIMAGE in "${IMAGE}" "${GITLABIMAGE}" "${GITHUBIMAGE}" "${QUAYIMAGE}"; do + [[ ${PUSHIMAGE%%/*} =~ \\. ]] && PUSHIMAGEPLUS="${PUSHIMAGE}" || PUSHIMAGEPLUS="docker.io/${PUSHIMAGE}" + IFS=',' read -ra CACHE <<< "$BUILDCACHE" + for i in "${CACHE[@]}"; do + if [[ "${PUSHIMAGEPLUS}" == "$(cut -d "/" -f1 <<< ${i})"* ]]; then + CACHEIMAGE=${i} + fi done - ''' - } + docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${META_TAG} -t ${PUSHIMAGE}:latest -t ${PUSHIMAGE}:${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${PUSHIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + if [ -n "${SEMVER}" ]; then + docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${PUSHIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + fi + done + ''' } } } @@ -806,57 +958,48 @@ pipeline { environment name: 'EXIT_STATUS', value: '' } steps { - withCredentials([ - [ - $class: 'UsernamePasswordMultiBinding', - credentialsId: 'Quay.io-Robot', - usernameVariable: 'QUAYUSER', - passwordVariable: 'QUAYPASS' - ] - ]) { - retry_backoff(5,5) { - sh '''#! /bin/bash - set -e - echo $DOCKERHUB_TOKEN | docker login -u linuxserverci --password-stdin - echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin - echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin - echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin - if [ "${CI}" == "false" ]; then - docker pull ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} --platform=arm64 - docker tag ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} ${IMAGE}:arm64v8-${META_TAG} + script{ + env.PUSH_ATTEMPTED = 'true' + } + retry_backoff(5,5) { + sh '''#! /bin/bash + set -e + for MANIFESTIMAGE in "${IMAGE}" "${GITLABIMAGE}" "${GITHUBIMAGE}" "${QUAYIMAGE}"; do + if [[ "${MANIFESTIMAGE%%/*}" =~ \\. ]]; then + MANIFESTIMAGEPLUS="${MANIFESTIMAGE}" + else + MANIFESTIMAGEPLUS="docker.io/${MANIFESTIMAGE}" fi - for MANIFESTIMAGE in "${IMAGE}" "${GITLABIMAGE}" "${GITHUBIMAGE}" "${QUAYIMAGE}"; do - docker tag ${IMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} - docker tag ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:amd64-latest - docker tag ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} - docker tag ${IMAGE}:arm64v8-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} - docker tag ${MANIFESTIMAGE}:arm64v8-${META_TAG} ${MANIFESTIMAGE}:arm64v8-latest - docker tag ${MANIFESTIMAGE}:arm64v8-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} - if [ -n "${SEMVER}" ]; then - docker tag ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:amd64-${SEMVER} - docker tag ${MANIFESTIMAGE}:arm64v8-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${SEMVER} - fi - docker push ${MANIFESTIMAGE}:amd64-${META_TAG} - docker push ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} - docker push ${MANIFESTIMAGE}:amd64-latest - docker push ${MANIFESTIMAGE}:arm64v8-${META_TAG} - docker push ${MANIFESTIMAGE}:arm64v8-latest - docker push ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} - if [ -n "${SEMVER}" ]; then - docker push ${MANIFESTIMAGE}:amd64-${SEMVER} - docker push ${MANIFESTIMAGE}:arm64v8-${SEMVER} - fi + IFS=',' read -ra CACHE <<< "$BUILDCACHE" + for i in "${CACHE[@]}"; do + if [[ "${MANIFESTIMAGEPLUS}" == "$(cut -d "/" -f1 <<< ${i})"* ]]; then + CACHEIMAGE=${i} + fi done - for MANIFESTIMAGE in "${IMAGE}" "${GITLABIMAGE}" "${GITHUBIMAGE}" "${QUAYIMAGE}"; do - docker buildx imagetools create -t ${MANIFESTIMAGE}:latest ${MANIFESTIMAGE}:amd64-latest ${MANIFESTIMAGE}:arm64v8-latest - docker buildx imagetools create -t ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} - docker buildx imagetools create -t ${MANIFESTIMAGE}:${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} - if [ -n "${SEMVER}" ]; then - docker buildx imagetools create -t ${MANIFESTIMAGE}:${SEMVER} ${MANIFESTIMAGE}:amd64-${SEMVER} ${MANIFESTIMAGE}:arm64v8-${SEMVER} - fi - done - ''' - } + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${META_TAG} -t ${MANIFESTIMAGE}:amd64-latest -t ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${META_TAG} -t ${MANIFESTIMAGE}:arm64v8-latest -t ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + if [ -n "${SEMVER}" ]; then + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${SEMVER} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + fi + done + for MANIFESTIMAGE in "${IMAGE}" "${GITLABIMAGE}" "${GITHUBIMAGE}" "${QUAYIMAGE}"; do + docker buildx imagetools create -t ${MANIFESTIMAGE}:latest ${MANIFESTIMAGE}:amd64-latest ${MANIFESTIMAGE}:arm64v8-latest || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create -t ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create -t ${MANIFESTIMAGE}:${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + if [ -n "${SEMVER}" ]; then + docker buildx imagetools create -t ${MANIFESTIMAGE}:${SEMVER} ${MANIFESTIMAGE}:amd64-${SEMVER} ${MANIFESTIMAGE}:arm64v8-${SEMVER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + fi + done + ''' } } } @@ -871,23 +1014,41 @@ pipeline { environment name: 'EXIT_STATUS', value: '' } steps { - echo "Pushing New tag for current commit ${META_TAG}" - sh '''curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/git/tags \ - -d '{"tag":"'${META_TAG}'",\ - "object": "'${COMMIT_SHA}'",\ - "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to master",\ - "type": "commit",\ - "tagger": {"name": "LinuxServer-CI","email": "ci@linuxserver.io","date": "'${GITHUB_DATE}'"}}' ''' - echo "Pushing New release for Tag" sh '''#! /bin/bash + echo "Auto-generating release notes" + if [ "$(git tag --points-at HEAD)" != "" ]; then + echo "Existing tag points to current commit, suggesting no new LS changes" + AUTO_RELEASE_NOTES="No changes" + else + AUTO_RELEASE_NOTES=$(curl -fsL -H "Authorization: token ${GITHUB_TOKEN}" -H "Accept: application/vnd.github+json" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases/generate-notes \ + -d '{"tag_name":"'${META_TAG}'",\ + "target_commitish": "master"}' \ + | jq -r '.body' | sed 's|## What.s Changed||') + fi + echo "Pushing New tag for current commit ${META_TAG}" + curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/git/tags \ + -d '{"tag":"'${META_TAG}'",\ + "object": "'${COMMIT_SHA}'",\ + "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to master",\ + "type": "commit",\ + "tagger": {"name": "LinuxServer-CI","email": "ci@linuxserver.io","date": "'${GITHUB_DATE}'"}}' + echo "Pushing New release for Tag" echo "Updating to ${EXT_RELEASE_CLEAN}" > releasebody.json - echo '{"tag_name":"'${META_TAG}'",\ - "target_commitish": "master",\ - "name": "'${META_TAG}'",\ - "body": "**LinuxServer Changes:**\\n\\n'${LS_RELEASE_NOTES}'\\n\\n**Remote Changes:**\\n\\n' > start - printf '","draft": false,"prerelease": false}' >> releasebody.json - paste -d'\\0' start releasebody.json > releasebody.json.done - curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases -d @releasebody.json.done''' + jq -n \ + --arg tag_name "$META_TAG" \ + --arg target_commitish "master" \ + --arg ci_url "${CI_URL:-N/A}" \ + --arg ls_notes "$AUTO_RELEASE_NOTES" \ + --arg remote_notes "$(cat releasebody.json)" \ + '{ + "tag_name": $tag_name, + "target_commitish": $target_commitish, + "name": $tag_name, + "body": ("**CI Report:**\\n\\n" + $ci_url + "\\n\\n**LinuxServer Changes:**\\n\\n" + $ls_notes + "\\n\\n**Remote Changes:**\\n\\n" + $remote_notes), + "draft": false, + "prerelease": false }' > releasebody.json.done + curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases -d @releasebody.json.done + ''' } } // Add protection to the release branch @@ -925,98 +1086,13 @@ EOF ) ''' } } - // If this is a Pull request send the CI link as a comment on it - stage('Pull Request Comment') { - when { - not {environment name: 'CHANGE_ID', value: ''} - environment name: 'EXIT_STATUS', value: '' - } - steps { - sh '''#! /bin/bash - # Function to retrieve JSON data from URL - get_json() { - local url="$1" - local response=$(curl -s "$url") - if [ $? -ne 0 ]; then - echo "Failed to retrieve JSON data from $url" - return 1 - fi - local json=$(echo "$response" | jq .) - if [ $? -ne 0 ]; then - echo "Failed to parse JSON data from $url" - return 1 - fi - echo "$json" - } - - build_table() { - local data="$1" - - # Get the keys in the JSON data - local keys=$(echo "$data" | jq -r 'to_entries | map(.key) | .[]') - - # Check if keys are empty - if [ -z "$keys" ]; then - echo "JSON report data does not contain any keys or the report does not exist." - return 1 - fi - - # Build table header - local header="| Tag | Passed |\\n| --- | --- |\\n" - - # Loop through the JSON data to build the table rows - local rows="" - for build in $keys; do - local status=$(echo "$data" | jq -r ".[\\"$build\\"].test_success") - if [ "$status" = "true" ]; then - status="✅" - else - status="❌" - fi - local row="| "$build" | "$status" |\\n" - rows="${rows}${row}" - done - - local table="${header}${rows}" - local escaped_table=$(echo "$table" | sed 's/\"/\\\\"/g') - echo "$escaped_table" - } - - if [[ "${CI}" = "true" ]]; then - # Retrieve JSON data from URL - data=$(get_json "$CI_JSON_URL") - # Create table from JSON data - table=$(build_table "$data") - echo -e "$table" - - curl -X POST -H "Authorization: token $GITHUB_TOKEN" \ - -H "Accept: application/vnd.github.v3+json" \ - "https://api.github.com/repos/$LS_USER/$LS_REPO/issues/$PULL_REQUEST/comments" \ - -d "{\\"body\\": \\"I am a bot, here are the test results for this PR: \\n${CI_URL}\\n${SHELLCHECK_URL}\\n${table}\\"}" - else - curl -X POST -H "Authorization: token $GITHUB_TOKEN" \ - -H "Accept: application/vnd.github.v3+json" \ - "https://api.github.com/repos/$LS_USER/$LS_REPO/issues/$PULL_REQUEST/comments" \ - -d "{\\"body\\": \\"I am a bot, here is the pushed image/manifest for this PR: \\n\\n\\`${GITHUBIMAGE}:${META_TAG}\\`\\"}" - fi - ''' - - } - } } /* ###################### - Send status to Discord + Comment on PR and Send status to Discord ###################### */ post { always { - sh '''#!/bin/bash - rm -rf /config/.ssh/id_sign - rm -rf /config/.ssh/id_sign.pub - git config --global --unset gpg.format - git config --global --unset user.signingkey - git config --global --unset commit.gpgsign - ''' - script{ + script { env.JOB_DATE = sh( script: '''date '+%Y-%m-%dT%H:%M:%S%:z' ''', returnStdout: true).trim() @@ -1059,15 +1135,113 @@ EOF "username": "Jenkins"}' ${BUILDS_DISCORD} ''' } } + script { + if (env.GITHUBIMAGE =~ /lspipepr/){ + if (env.CI_TEST_ATTEMPTED == "true" || env.PUSH_ATTEMPTED == "true"){ + sh '''#! /bin/bash + # Function to retrieve JSON data from URL + get_json() { + local url="$1" + local response=$(curl -s "$url") + if [ $? -ne 0 ]; then + echo "Failed to retrieve JSON data from $url" + return 1 + fi + local json=$(echo "$response" | jq .) + if [ $? -ne 0 ]; then + echo "Failed to parse JSON data from $url" + return 1 + fi + echo "$json" + } + + build_table() { + local data="$1" + + # Get the keys in the JSON data + local keys=$(echo "$data" | jq -r 'to_entries | map(.key) | .[]') + + # Check if keys are empty + if [ -z "$keys" ]; then + echo "JSON report data does not contain any keys or the report does not exist." + return 1 + fi + + # Build table header + local header="| Tag | Passed |\\n| --- | --- |\\n" + + # Loop through the JSON data to build the table rows + local rows="" + for build in $keys; do + local status=$(echo "$data" | jq -r ".[\\"$build\\"].test_success") + if [ "$status" = "true" ]; then + status="✅" + else + status="❌" + fi + local row="| "$build" | "$status" |\\n" + rows="${rows}${row}" + done + + local table="${header}${rows}" + local escaped_table=$(echo "$table" | sed 's/\"/\\\\"/g') + echo "$escaped_table" + } + + if [[ "${CI}" = "true" ]]; then + # Retrieve JSON data from URL + data=$(get_json "$CI_JSON_URL") + # Create table from JSON data + table=$(build_table "$data") + echo -e "$table" + + curl -X POST -H "Authorization: token $GITHUB_TOKEN" \ + -H "Accept: application/vnd.github.v3+json" \ + "https://api.github.com/repos/$LS_USER/$LS_REPO/issues/$PULL_REQUEST/comments" \ + -d "{\\"body\\": \\"I am a bot, here are the test results for this PR for commit ${COMMIT_SHA:0:7} : \\n${CI_URL}\\n${SHELLCHECK_URL}\\n${table}\\"}" + else + curl -X POST -H "Authorization: token $GITHUB_TOKEN" \ + -H "Accept: application/vnd.github.v3+json" \ + "https://api.github.com/repos/$LS_USER/$LS_REPO/issues/$PULL_REQUEST/comments" \ + -d "{\\"body\\": \\"I am a bot, here is the pushed image/manifest for this PR for commit ${COMMIT_SHA:0:7} : \\n\\n\\`${GITHUBIMAGE}:${META_TAG}\\`\\"}" + fi + ''' + } else { + sh '''#! /bin/bash + curl -X POST -H "Authorization: token $GITHUB_TOKEN" \ + -H "Accept: application/vnd.github.v3+json" \ + "https://api.github.com/repos/$LS_USER/$LS_REPO/issues/$PULL_REQUEST/comments" \ + -d "{\\"body\\": \\"I am a bot, the build for PR commit ${COMMIT_SHA:0:7} failed and as a result no CI test was attempted and no images were pushed.\\"}" + ''' + } + } + } + sh '''#!/bin/bash + rm -rf /config/.ssh/id_sign + rm -rf /config/.ssh/id_sign.pub + git config --global --unset gpg.format + git config --global --unset user.signingkey + git config --global --unset commit.gpgsign + ''' } cleanup { sh '''#! /bin/bash - echo "Performing docker system prune!!" - containers=$(docker ps -aq) + echo "Pruning builder!!" + docker builder prune -f --builder container || : + containers=$(docker ps -q) if [[ -n "${containers}" ]]; then - docker stop ${containers} + BUILDX_CONTAINER_ID=$(docker ps -qf 'name=buildx_buildkit') + for container in ${containers}; do + if [[ "${container}" == "${BUILDX_CONTAINER_ID}" ]]; then + echo "skipping buildx container in docker stop" + else + echo "Stopping container ${container}" + docker stop ${container} + fi + done fi - docker system prune -af --volumes || : + docker system prune -f --volumes || : + docker image prune -af || : ''' cleanWs() } diff --git a/LICENSE b/LICENSE old mode 100755 new mode 100644 diff --git a/README.md b/README.md index f307efd9..77d15e92 100644 --- a/README.md +++ b/README.md @@ -3,9 +3,8 @@ [![linuxserver.io](https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/linuxserver_medium.png)](https://linuxserver.io) [![Blog](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=Blog)](https://blog.linuxserver.io "all the things you can do with our containers including How-To guides, opinions and much more!") -[![Discord](https://img.shields.io/discord/354974912613449730.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Discord&logo=discord)](https://discord.gg/YWrKVTn "realtime support / chat with the community and the team.") +[![Discord](https://img.shields.io/discord/354974912613449730.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Discord&logo=discord)](https://linuxserver.io/discord "realtime support / chat with the community and the team.") [![Discourse](https://img.shields.io/discourse/https/discourse.linuxserver.io/topics.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&logo=discourse)](https://discourse.linuxserver.io "post on our community forum.") -[![Fleet](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=Fleet)](https://fleet.linuxserver.io "an online web interface which displays all of our maintained images.") [![GitHub](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=GitHub&logo=github)](https://github.com/linuxserver "view the source for all of our repositories.") [![Open Collective](https://img.shields.io/opencollective/all/linuxserver.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Supporters&logo=open%20collective)](https://opencollective.com/linuxserver "please consider helping us by either donating or contributing to our budget") @@ -20,9 +19,8 @@ The [LinuxServer.io](https://linuxserver.io) team brings you another container r Find us at: * [Blog](https://blog.linuxserver.io) - all the things you can do with our containers including How-To guides, opinions and much more! -* [Discord](https://discord.gg/YWrKVTn) - realtime support / chat with the community and the team. +* [Discord](https://linuxserver.io/discord) - realtime support / chat with the community and the team. * [Discourse](https://discourse.linuxserver.io) - post on our community forum. -* [Fleet](https://fleet.linuxserver.io) - an online web interface which displays all of our maintained images. * [GitHub](https://github.com/linuxserver) - view the source for all of our repositories. * [Open Collective](https://opencollective.com/linuxserver) - please consider helping us by either donating or contributing to our budget @@ -61,7 +59,6 @@ The architectures supported by this image are: | :----: | :----: | ---- | | x86-64 | ✅ | amd64-\ | | arm64 | ✅ | arm64v8-\ | -| armhf | ❌ | | ## Application Setup @@ -78,10 +75,30 @@ git config --global user.email "email address" How to create the [hashed password](https://github.com/cdr/code-server/blob/master/docs/FAQ.md#can-i-store-my-password-hashed). +## Read-Only Operation + +This image can be run with a read-only container filesystem. For details please [read the docs](https://docs.linuxserver.io/misc/read-only/). + +### Caveats + +* `/tmp` must be mounted to tmpfs +* `sudo` will not be available + +## Non-Root Operation + +This image can be run with a non-root user. For details please [read the docs](https://docs.linuxserver.io/misc/non-root/). + +### Caveats + +* `sudo` will not be available + ## Usage To help you get started creating a container from this image you can either use docker-compose or the docker cli. +>[!NOTE] +>Unless a parameter is flagged as 'optional', it is *mandatory* and a value must be provided. + ### docker-compose (recommended, [click here for more info](https://docs.linuxserver.io/general/docker-compose)) ```yaml @@ -100,6 +117,7 @@ services: - SUDO_PASSWORD_HASH= #optional - PROXY_DOMAIN=code-server.my.domain #optional - DEFAULT_WORKSPACE=/config/workspace #optional + - PWA_APPNAME=code-server #optional volumes: - /path/to/code-server/config:/config ports: @@ -121,6 +139,7 @@ docker run -d \ -e SUDO_PASSWORD_HASH= `#optional` \ -e PROXY_DOMAIN=code-server.my.domain `#optional` \ -e DEFAULT_WORKSPACE=/config/workspace `#optional` \ + -e PWA_APPNAME=code-server `#optional` \ -p 8443:8443 \ -v /path/to/code-server/config:/config \ --restart unless-stopped \ @@ -133,7 +152,7 @@ Containers are configured using parameters passed at runtime (such as those abov | Parameter | Function | | :----: | --- | -| `-p 8443` | web gui | +| `-p 8443:8443` | web gui | | `-e PUID=1000` | for UserID - see below for explanation | | `-e PGID=1000` | for GroupID - see below for explanation | | `-e TZ=Etc/UTC` | specify a timezone to use, see this [list](https://en.wikipedia.org/wiki/List_of_tz_database_time_zones#List). | @@ -143,7 +162,10 @@ Containers are configured using parameters passed at runtime (such as those abov | `-e SUDO_PASSWORD_HASH=` | Optionally set sudo password via hash (takes priority over `SUDO_PASSWORD` var). Format is `$type$salt$hashed`. | | `-e PROXY_DOMAIN=code-server.my.domain` | If this optional variable is set, this domain will be proxied for subdomain proxying. See [Documentation](https://github.com/coder/code-server/blob/main/docs/guide.md#using-a-subdomain) | | `-e DEFAULT_WORKSPACE=/config/workspace` | If this optional variable is set, code-server will open this directory by default | +| `-e PWA_APPNAME=code-server` | If this optional variable is set, the PWA app will the specified name. | | `-v /config` | Contains all relevant configuration files. | +| `--read-only=true` | Run container with a read-only filesystem. Please [read the docs](https://docs.linuxserver.io/misc/read-only/). | +| `--user=1000:1000` | Run container with a non-root user. Please [read the docs](https://docs.linuxserver.io/misc/non-root/). | ## Environment variables from files (Docker secrets) @@ -297,16 +319,19 @@ docker build \ -t lscr.io/linuxserver/code-server:latest . ``` -The ARM variants can be built on x86_64 hardware using `multiarch/qemu-user-static` +The ARM variants can be built on x86_64 hardware and vice versa using `lscr.io/linuxserver/qemu-static` ```bash -docker run --rm --privileged multiarch/qemu-user-static:register --reset +docker run --rm --privileged lscr.io/linuxserver/qemu-static --reset ``` Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64`. ## Versions +* **17.05.26:** - Let server listen on both ipv4 and ipv6 even when running container as root. +* **10.08.25:** - Let server listen on both ipv4 and ipv6. +* **03.06.25:** - Allow setting PWA name using env var `PWA_APPNAME`. * **13.10.24:** - Only chown config folder when change to ownership or new install is detected. * **09.10.24:** - Manage permissions in /config/.ssh according to file type * **19.08.24:** - Rebase to Ubuntu Noble. diff --git a/package_versions.txt b/package_versions.txt index dfea9db9..7a97337f 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -1,562 +1,544 @@ -NAME VERSION TYPE -@babel/runtime 7.23.2 npm -@coder/logger 3.0.1 npm -@mapbox/node-pre-gyp 1.0.11 npm -@microsoft/1ds-core-js 3.2.13 npm -@microsoft/1ds-post-js 3.2.13 npm -@microsoft/applicationinsights-core-js 2.8.15 npm -@microsoft/applicationinsights-shims 2.0.2 npm -@microsoft/dynamicproto-js 1.1.9 npm -@parcel/watcher 2.1.0 npm -@phc/format 1.0.0 npm -@tootallnate/once 3.0.0 npm -@tootallnate/quickjs-emscripten 0.23.0 npm -@vscode/deviceid 0.1.1 npm -@vscode/iconv-lite-umd 0.7.0 npm -@vscode/proxy-agent 0.23.0 npm -@vscode/ripgrep 1.15.9 npm -@vscode/spdlog 0.15.0 npm -@vscode/tree-sitter-wasm 0.0.2 npm -@vscode/vscode-languagedetection 1.0.21 npm -@vscode/windows-process-tree 0.6.0 npm -@vscode/windows-registry 1.1.0 npm -@xterm/addon-clipboard 0.2.0-beta.35 npm -@xterm/addon-image 0.9.0-beta.52 npm -@xterm/addon-search 0.16.0-beta.52 npm -@xterm/addon-serialize 0.14.0-beta.52 npm -@xterm/addon-unicode11 0.9.0-beta.52 npm -@xterm/addon-webgl 0.19.0-beta.52 npm -@xterm/headless 5.6.0-beta.52 npm -@xterm/xterm 5.6.0-beta.52 npm -OpenConsole.exe 1.20.240626001 dotnet (+1 duplicate) -abbrev 1.1.1 npm -accepts 1.3.8 npm -adduser 3.137ubuntu1 deb -agent-base 6.0.2 npm -agent-base 7.1.0 npm (+1 duplicate) -agent-base 7.1.1 npm -ansi-regex 5.0.1 npm -aproba 2.0.0 npm -apt 2.7.14build2 deb -apt-utils 2.7.14build2 deb -are-we-there-yet 2.0.0 npm -argon2 0.31.1 npm -argparse 2.0.1 npm -array-flatten 3.0.0 npm -ast-types 0.13.4 npm -balanced-match 1.0.2 npm -base-files 13ubuntu10.1 deb -base-passwd 3.6.3build1 deb -base64-js 1.5.1 npm -bash 5.2.21-2ubuntu4 deb -basic-ftp 5.0.3 npm -bat 1.0.0 npm -beep-boop 1.2.3 npm -bindings 1.5.0 npm -bl 4.1.0 npm -body-parser 2.0.0-beta.2 npm -brace-expansion 1.1.11 npm -braces 3.0.3 npm -bsdutils 1:2.39.3-9ubuntu6.1 deb -buffer 5.7.1 npm -buffer-alloc 1.2.0 npm -buffer-alloc-unsafe 1.1.0 npm -buffer-crc32 0.2.13 npm -buffer-fill 1.0.0 npm -builtin-notebook-renderers 1.0.0 npm -bytes 3.0.0 npm -bytes 3.1.2 npm -ca-certificates 20240203 deb -call-bind 1.0.7 npm -catatonit 0.1.7-1 deb -charenc 0.0.2 npm -chownr 1.1.4 npm -chownr 2.0.0 npm -clojure 1.0.0 npm -code-server 4.93.1 npm -coffeescript 1.0.0 npm -color-support 1.1.3 npm -compressible 2.0.18 npm -compression 1.7.4 npm -concat-map 0.0.1 npm -configuration-editing 1.0.0 npm -conpty.dll 1.20.240626001 dotnet (+1 duplicate) -console-control-strings 1.1.0 npm -content-disposition 0.5.4 npm -content-type 1.0.5 npm -cookie 0.4.0 npm -cookie 0.4.1 npm -cookie 0.6.0 npm -cookie-parser 1.4.6 npm -cookie-signature 1.0.6 npm -coreutils 9.4-3ubuntu6 deb -cpp 1.0.0 npm -cron 3.0pl1-184ubuntu2 deb -cron-daemon-common 3.0pl1-184ubuntu2 deb -crypt 0.0.2 npm -csharp 1.0.0 npm -css 1.0.0 npm -css-language-features 1.0.0 npm -curl 8.5.0-2ubuntu10.4 deb -dart 1.0.0 npm -dash 0.5.12-6ubuntu5 deb -data-uri-to-buffer 5.0.1 npm -debconf 1.5.86ubuntu1 deb -debianutils 5.17build1 deb -debug 2.6.9 npm (+1 duplicate) -debug 3.1.0 npm (+2 duplicates) -debug 4.3.4 npm (+1 duplicate) -debug-auto-launch 1.0.0 npm -debug-server-ready 1.0.0 npm -decompress-response 6.0.0 npm -deep-extend 0.6.0 npm -define-data-property 1.1.4 npm -degenerator 5.0.1 npm -delegates 1.0.0 npm -depd 2.0.0 npm -destroy 1.2.0 npm -detect-libc 2.0.1 npm -detect-libc 2.0.2 npm -diff 1.0.0 npm -diffutils 1:3.10-1build1 deb -dirmngr 2.4.4-2ubuntu17 deb -docker 1.0.0 npm -dpkg 1.22.6ubuntu6.1 deb -e2fsprogs 1.47.0-2.4~exp1ubuntu4.1 deb -ee-first 1.1.1 npm -emmet 1.0.0 npm -emoji-regex 8.0.0 npm -encodeurl 1.0.2 npm -end-of-stream 1.4.4 npm -env-paths 2.2.1 npm -es-define-property 1.0.0 npm -es-errors 1.3.0 npm -es6-promisify 7.0.0 npm -escape-html 1.0.3 npm -escodegen 2.1.0 npm -esprima 4.0.1 npm -estraverse 5.3.0 npm -esutils 2.0.3 npm -etag 1.8.1 npm -eventemitter3 4.0.7 npm -expand-template 2.0.3 npm -express 5.0.0-beta.3 npm -extension-editing 1.0.0 npm -fd-slicer 1.1.0 npm -file-uri-to-path 1.0.0 npm -fill-range 7.1.1 npm -finalhandler 1.2.0 npm -findutils 4.9.0-5build1 deb -follow-redirects 1.15.6 npm -forwarded 0.2.0 npm -fresh 0.5.2 npm -fs-constants 1.0.0 npm -fs-extra 11.2.0 npm -fs-extra 8.1.0 npm -fs-minipass 2.1.0 npm -fs.realpath 1.0.0 npm -fsharp 1.0.0 npm -function-bind 1.1.1 npm (+1 duplicate) -function-bind 1.1.2 npm -gauge 3.0.2 npm -gcc-14-base 14.2.0-4ubuntu2~24.04 deb -get-intrinsic 1.2.1 npm -get-intrinsic 1.2.4 npm (+2 duplicates) -get-uri 6.0.1 npm -git 1.0.0 npm -git 1:2.43.0-1ubuntu7.1 deb -git-base 1.0.0 npm -git-man 1:2.43.0-1ubuntu7.1 deb -github 0.0.1 npm -github-authentication 0.0.2 npm -github-from-package 0.0.0 npm -glob 7.2.3 npm -gnupg 2.4.4-2ubuntu17 deb -gnupg-l10n 2.4.4-2ubuntu17 deb -gnupg-utils 2.4.4-2ubuntu17 deb -go 1.0.0 npm -gopd 1.0.1 npm -gpg 2.4.4-2ubuntu17 deb -gpg-agent 2.4.4-2ubuntu17 deb -gpg-wks-client 2.4.4-2ubuntu17 deb -gpgconf 2.4.4-2ubuntu17 deb -gpgsm 2.4.4-2ubuntu17 deb -gpgv 2.4.4-2ubuntu17 deb -graceful-fs 4.2.11 npm (+1 duplicate) -grep 3.11-4build1 deb -groovy 1.0.0 npm -grunt 1.0.0 npm -gulp 1.0.0 npm -gzip 1.12-1ubuntu3 deb -handlebars 1.0.0 npm -has 1.0.3 npm -has-property-descriptors 1.0.2 npm -has-proto 1.0.1 npm -has-symbols 1.0.3 npm -has-unicode 2.0.1 npm -hasown 2.0.0 npm -hlsl 1.0.0 npm -hostname 3.23+nmu2ubuntu2 deb -html 1.0.0 npm -html-language-features 1.0.0 npm -http-errors 2.0.0 npm -http-proxy 1.18.1 npm -http-proxy-agent 7.0.0 npm -http-proxy-agent 7.0.2 npm -httpolyglot 0.1.2 npm -https-proxy-agent 5.0.1 npm -https-proxy-agent 7.0.2 npm -https-proxy-agent 7.0.4 npm -i18next 23.14.0 npm -iconv-lite 0.5.2 npm -ieee754 1.2.1 npm -inflight 1.0.6 npm -inherits 2.0.4 npm (+1 duplicate) -ini 1.0.0 npm -ini 1.3.8 npm -init-system-helpers 1.66ubuntu1 deb -ip 1.1.9 npm -ip 2.0.1 npm -ip-address 9.0.5 npm -ipaddr.js 1.9.1 npm -ipynb 1.0.0 npm -is-buffer 1.1.6 npm -is-extglob 2.1.1 npm -is-fullwidth-code-point 3.0.0 npm -is-glob 4.0.3 npm -is-number 7.0.0 npm -is-promise 4.0.0 npm -isexe 2.0.0 npm -jake 1.0.0 npm -java 1.0.0 npm -javascript 1.0.0 npm -jq 1.7.1-3build1 deb -js-base64 3.7.7 npm -js-debug 1.93.0 npm -js-debug-companion 1.1.3 npm -js-yaml 4.1.0 npm -jsbn 1.1.0 npm -jschardet 3.1.3 npm -json 1.0.0 npm -json-language-features 1.0.0 npm -jsonfile 4.0.0 npm -jsonfile 6.1.0 npm -julia 1.0.0 npm -just-performance 4.3.0 npm -kerberos 2.1.1 npm -keyboxd 2.4.4-2ubuntu17 deb -krb5-locales 1.20.1-6ubuntu2.1 deb -latex 1.0.0 npm -less 1.0.0 npm -less 590-2ubuntu2.1 deb -libacl1 2.3.2-1build1 deb -libapparmor1 4.0.1really4.0.1-0ubuntu0.24.04.3 deb -libapt-pkg6.0t64 2.7.14build2 deb -libassuan0 2.5.6-1build1 deb -libatomic1 14.2.0-4ubuntu2~24.04 deb -libattr1 1:2.5.2-1build1 deb -libaudit-common 1:3.1.2-2.1build1 deb -libaudit1 1:3.1.2-2.1build1 deb -libblkid1 2.39.3-9ubuntu6.1 deb -libbrotli1 1.1.0-2build2 deb -libbsd0 0.12.1-1build1 deb -libbz2-1.0 1.0.8-5.1build0.1 deb -libc-bin 2.39-0ubuntu8.3 deb -libc6 2.39-0ubuntu8.3 deb -libcap-ng0 0.8.4-2build2 deb -libcap2 1:2.66-5ubuntu2 deb -libcbor0.10 0.10.2-1.2ubuntu2 deb -libcom-err2 1.47.0-2.4~exp1ubuntu4.1 deb -libcrypt1 1:4.4.36-4build1 deb -libcurl3t64-gnutls 8.5.0-2ubuntu10.4 deb -libcurl4t64 8.5.0-2ubuntu10.4 deb -libdb5.3t64 5.3.28+dfsg2-7 deb -libdebconfclient0 0.271ubuntu3 deb -libedit2 3.1-20230828-1build1 deb -liberror-perl 0.17029-2 deb -libexpat1 2.6.1-2ubuntu0.1 deb -libext2fs2t64 1.47.0-2.4~exp1ubuntu4.1 deb -libffi8 3.4.6-1build1 deb -libfido2-1 1.14.0-1build3 deb -libgcc-s1 14.2.0-4ubuntu2~24.04 deb -libgcrypt20 1.10.3-2build1 deb -libgdbm-compat4t64 1.23-5.1build1 deb -libgdbm6t64 1.23-5.1build1 deb -libgmp10 2:6.3.0+dfsg-2ubuntu6 deb -libgnutls30t64 3.8.3-1.1ubuntu3.2 deb -libgpg-error0 1.47-3build2 deb -libgssapi-krb5-2 1.20.1-6ubuntu2.1 deb -libhogweed6t64 3.9.1-2.2build1.1 deb -libidn2-0 2.3.7-2build1 deb -libjq1 1.7.1-3build1 deb -libk5crypto3 1.20.1-6ubuntu2.1 deb -libkeyutils1 1.6.3-3build1 deb -libkrb5-3 1.20.1-6ubuntu2.1 deb -libkrb5support0 1.20.1-6ubuntu2.1 deb -libksba8 1.6.6-1build1 deb -libldap-common 2.6.7+dfsg-1~exp1ubuntu8 deb -libldap2 2.6.7+dfsg-1~exp1ubuntu8 deb -liblz4-1 1.9.4-1build1.1 deb -liblzma5 5.6.1+really5.4.5-1build0.1 deb -libmd0 1.1.0-2build1 deb -libmount1 2.39.3-9ubuntu6.1 deb -libncursesw6 6.4+20240113-1ubuntu2 deb -libnettle8t64 3.9.1-2.2build1.1 deb -libnghttp2-14 1.59.0-1ubuntu0.1 deb -libnpth0t64 1.6-3.1build1 deb -libonig5 6.9.9-1build1 deb -libp11-kit0 0.25.3-4ubuntu2.1 deb -libpam-modules 1.5.3-5ubuntu5.1 deb -libpam-modules-bin 1.5.3-5ubuntu5.1 deb -libpam-runtime 1.5.3-5ubuntu5.1 deb -libpam0g 1.5.3-5ubuntu5.1 deb -libpcre2-8-0 10.42-4ubuntu2 deb -libperl5.38t64 5.38.2-3.2build2 deb -libproc2-0 2:4.0.4-4ubuntu3.2 deb -libpsl5t64 0.21.2-1.1build1 deb -libreadline8t64 8.2-4build1 deb -librtmp1 2.4+20151223.gitfa8646d.1-2build7 deb -libsasl2-2 2.1.28+dfsg1-5ubuntu3.1 deb -libsasl2-modules 2.1.28+dfsg1-5ubuntu3.1 deb -libsasl2-modules-db 2.1.28+dfsg1-5ubuntu3.1 deb -libseccomp2 2.5.5-1ubuntu3.1 deb -libselinux1 3.5-2ubuntu2 deb -libsemanage-common 3.5-1build5 deb -libsemanage2 3.5-1build5 deb -libsepol2 3.5-2build1 deb -libsmartcols1 2.39.3-9ubuntu6.1 deb -libsqlite3-0 3.45.1-1ubuntu2 deb -libss2 1.47.0-2.4~exp1ubuntu4.1 deb -libssh-4 0.10.6-2build2 deb -libssl3t64 3.0.13-0ubuntu3.4 deb -libstdc++6 14.2.0-4ubuntu2~24.04 deb -libsystemd0 255.4-1ubuntu8.4 deb -libtasn1-6 4.19.0-3build1 deb -libtinfo6 6.4+20240113-1ubuntu2 deb -libudev1 255.4-1ubuntu8.4 deb -libunistring5 1.1-2build1 deb -libuuid1 2.39.3-9ubuntu6.1 deb -libx11-6 2:1.8.7-1build1 deb -libx11-data 2:1.8.7-1build1 deb -libxau6 1:1.0.9-1build6 deb -libxcb1 1.15-1ubuntu2 deb -libxdmcp6 1:1.1.3-0ubuntu6 deb -libxext6 2:1.3.4-1build2 deb -libxmuu1 2:1.1.3-3build2 deb -libxxhash0 0.8.2-2build1 deb -libzstd1 1.5.5+dfsg2-2build1.1 deb -limiter 2.1.0 npm -locales 2.39-0ubuntu8.3 deb -log 1.0.0 npm -login 1:4.13+dfsg1-4ubuntu3.2 deb -logsave 1.47.0-2.4~exp1ubuntu4.1 deb -lru-cache 6.0.0 npm (+1 duplicate) -lru-cache 7.18.3 npm -lua 1.0.0 npm -make 1.0.0 npm -make-dir 3.1.0 npm -markdown 1.0.0 npm -markdown-language-features 1.0.0 npm -markdown-math 1.0.0 npm -mawk 1.3.4.20240123-1build1 deb -md5 2.3.0 npm -media-preview 1.0.0 npm -media-typer 0.3.0 npm -merge-conflict 1.0.0 npm -merge-descriptors 1.0.1 npm -methods 1.1.2 npm -micromatch 4.0.8 npm -microsoft-authentication 0.0.1 npm -mime-db 1.52.0 npm -mime-types 2.1.35 npm -mimic-response 3.1.0 npm -minimatch 3.1.2 npm -minimist 1.2.6 npm -minipass 3.3.6 npm -minipass 5.0.0 npm -minizlib 2.1.2 npm -mkdirp 1.0.4 npm (+1 duplicate) -mkdirp-classic 0.5.3 npm -mount 2.39.3-9ubuntu6.1 deb -ms 2.0.0 npm (+1 duplicate) -ms 2.1.2 npm (+1 duplicate) -ms 2.1.3 npm -nano 7.2-2ubuntu0.1 deb -napi-build-utils 1.0.2 npm -native-watchdog 1.4.2 npm -ncurses-base 6.4+20240113-1ubuntu2 deb -ncurses-bin 6.4+20240113-1ubuntu2 deb -negotiator 0.6.3 npm -net-tools 2.10-0.1ubuntu4 deb -netbase 6.4 deb -netcat-openbsd 1.226-1ubuntu2 deb -netmask 2.0.2 npm -node 20.15.1 binary -node-abi 3.8.0 npm -node-addon-api 3.2.1 npm -node-addon-api 6.1.0 npm -node-addon-api 7.0.0 npm -node-addon-api 7.1.0 npm -node-fetch 2.7.0 npm -node-gyp-build 4.8.1 npm -node-pty 1.1.0-beta21 npm -nopt 5.0.0 npm -npm 1.0.1 npm -npmlog 5.0.1 npm -nw-pre-gyp-module-test 0.0.1 npm -object-assign 4.1.1 npm -object-inspect 1.13.1 npm -objective-c 1.0.0 npm -on-finished 2.4.1 npm -on-headers 1.0.2 npm -once 1.4.0 npm (+1 duplicate) -openssh-client 1:9.6p1-3ubuntu13.5 deb -openssl 3.0.13-0ubuntu3.4 deb -os-tmpdir 1.0.2 npm -pac-proxy-agent 7.0.1 npm -pac-resolver 7.0.0 npm -parseurl 1.3.3 npm -passwd 1:4.13+dfsg1-4ubuntu3.2 deb -patch 2.7.6-7build3 deb -path-is-absolute 1.0.1 npm -path-to-regexp 3.2.0 npm -pem 1.14.8 npm -pend 1.2.0 npm -perl 1.0.0 npm -perl 5.38.2-3.2build2 deb -perl-base 5.38.2-3.2build2 deb -perl-modules-5.38 5.38.2-3.2build2 deb -php 1.0.0 npm -php-language-features 1.0.0 npm -picomatch 2.3.1 npm -pinentry-curses 1.2.1-3ubuntu5 deb -powershell 1.0.0 npm -prebuild-install 7.1.2 npm -procps 2:4.0.4-4ubuntu3.2 deb -proxy-addr 2.0.7 npm -proxy-agent 6.4.0 npm -proxy-from-env 1.1.0 npm (+1 duplicate) -publicsuffix 20231001.0357-0.1 deb -pug 1.0.0 npm -pump 3.0.0 npm -python 1.0.0 npm -qs 6.11.0 npm (+1 duplicate) -qs 6.13.0 npm -r 1.0.0 npm -range-parser 1.2.1 npm -raw-body 3.0.0-beta.1 npm -razor 1.0.0 npm -rc 1.2.8 npm -readable-stream 3.6.0 npm -readable-stream 3.6.2 npm -readline-common 8.2-4build1 deb -references-view 1.0.0 npm -regenerator-runtime 0.14.0 npm -requires-port 1.0.0 npm -restructuredtext 1.0.0 npm -rimraf 3.0.2 npm -rotating-file-stream 3.2.1 npm -router 2.0.0-beta.2 npm -ruby 1.0.0 npm -rust 1.0.0 npm -safe-buffer 5.1.2 npm -safe-buffer 5.2.1 npm (+1 duplicate) -safe-compare 1.1.4 npm -safer-buffer 2.1.2 npm -scss 1.0.0 npm -search-result 1.0.0 npm -sed 4.9-2build1 deb -semver 6.3.1 npm -semver 7.5.4 npm -semver 7.6.0 npm -send 1.0.0-beta.2 npm -sensible-utils 0.0.22 deb -serve-static 2.0.0-beta.2 npm -set-blocking 2.0.0 npm -set-function-length 1.2.2 npm -setprototypeof 1.2.0 npm -shaderlab 1.0.0 npm -shellscript 1.0.0 npm -side-channel 1.0.6 npm -signal-exit 3.0.7 npm -simple-browser 1.0.0 npm -simple-concat 1.0.1 npm -simple-get 4.0.1 npm -smart-buffer 4.2.0 npm (+1 duplicate) -socks 2.7.1 npm -socks 2.8.3 npm -socks-proxy-agent 8.0.2 npm -socks-proxy-agent 8.0.4 npm -source-map 0.6.1 npm -sprintf-js 1.1.3 npm -sql 1.0.0 npm -statuses 2.0.1 npm -string-width 4.2.3 npm -string_decoder 1.3.0 npm (+1 duplicate) -strip-ansi 6.0.1 npm -strip-json-comments 2.0.1 npm -sudo 1.9.15p5-3ubuntu5 deb -swift 1.0.0 npm -systemd-standalone-sysusers 255.4-1ubuntu8.4 deb -sysvinit-utils 3.08-6ubuntu3 deb -tar 1.35+dfsg-3build1 deb -tar 6.2.1 npm -tar-fs 2.1.1 npm -tar-stream 2.2.0 npm -tas-client-umd 0.2.0 npm -theme-abyss 1.0.0 npm -theme-defaults 1.0.0 npm -theme-kimbie-dark 1.0.0 npm -theme-monokai 1.0.0 npm -theme-monokai-dimmed 1.0.0 npm -theme-quietlight 1.0.0 npm -theme-red 1.0.0 npm -theme-solarized-dark 1.0.0 npm -theme-solarized-light 1.0.0 npm -theme-tomorrow-night-blue 1.0.0 npm -to-regex-range 5.0.1 npm -toidentifier 1.0.1 npm -tr46 0.0.3 npm -tslib 2.6.2 npm -tunnel-agent 0.6.0 npm -tunnel-forwarding 1.0.0 npm -type-is 1.6.18 npm -typescript 1.0.0 npm -typescript 5.5.4 npm -typescript-language-features 1.0.0 npm -tzdata 2024a-3ubuntu1.1 deb -ubuntu-keyring 2023.11.28.1 deb -universalify 0.1.2 npm -universalify 2.0.1 npm -unpipe 1.0.0 npm -util-deprecate 1.0.2 npm (+1 duplicate) -util-linux 2.39.3-9ubuntu6.1 deb -utils-merge 1.0.1 npm -uuid 9.0.1 npm -vary 1.1.2 npm -vb 1.0.0 npm -vscode-css-languageserver 1.0.0 npm -vscode-extensions 0.0.1 npm -vscode-html-languageserver 1.0.0 npm -vscode-js-profile-table 1.0.9 npm -vscode-json-languageserver 1.3.4 npm -vscode-oniguruma 1.7.0 npm -vscode-regexpp 3.1.0 npm -vscode-reh 1.93.1 npm -vscode-textmate 9.1.0 npm -vscode-theme-seti 1.0.0 npm -webidl-conversions 3.0.1 npm -whatwg-url 5.0.0 npm -which 2.0.2 npm -wide-align 1.1.5 npm -wrappy 1.0.2 npm (+1 duplicate) -ws 8.18.0 npm -xauth 1:1.1.2-1build1 deb -xdg-basedir 4.0.0 npm -xml 1.0.0 npm -yallist 4.0.0 npm (+1 duplicate) -yaml 1.0.0 npm -yauzl 2.10.0 npm -yauzl 3.1.1 npm -yazl 2.4.3 npm -zlib1g 1:1.3.dfsg-3.1ubuntu2.1 deb +NAME VERSION TYPE +@coder/logger 3.0.1 npm +@epic-web/invariant 1.0.0 npm +@github/copilot 1.0.73 npm +@github/copilot 1.0.77 npm +@github/copilot-linux-x64 1.0.77 npm +@github/copilot-sdk 1.0.9-preview.1 npm +@isaacs/fs-minipass 4.0.1 npm +@microsoft/1ds-core-js 3.2.13 npm +@microsoft/1ds-post-js 3.2.13 npm +@microsoft/applicationinsights-core-js 2.8.15 npm +@microsoft/applicationinsights-shims 2.0.2 npm +@microsoft/dynamicproto-js 1.1.9 npm +@microsoft/mxc-sdk 0.6.1 npm +@parcel/watcher 2.5.6 npm +@phc/format 1.0.0 npm +@pondwader/socks5-server 1.0.10 npm +@tootallnate/once 3.0.1 npm +@tootallnate/quickjs-emscripten 0.23.0 npm +@vscode/copilot-api 0.4.2 npm +@vscode/copilot-typescript-server-plugin 1.0.0 npm +@vscode/deviceid 0.1.5 npm +@vscode/fs-copyfile 2.0.0 npm (+1 duplicate) +@vscode/iconv-lite-umd 0.7.1 npm +@vscode/native-watchdog 1.4.6 npm +@vscode/proxy-agent 0.44.0 npm +@vscode/ripgrep-universal 1.18.0 npm +@vscode/sandbox-runtime 0.0.1 npm +@vscode/spdlog 0.15.8 npm +@vscode/sqlite3 5.1.12-vscode npm +@vscode/tree-sitter-wasm 0.3.1 npm +@vscode/vscode-languagedetection 1.0.23 npm +@xterm/addon-clipboard 0.3.0-beta.291 npm +@xterm/addon-image 0.10.0-beta.291 npm +@xterm/addon-ligatures 0.11.0-beta.291 npm +@xterm/addon-progress 0.3.0-beta.291 npm +@xterm/addon-search 0.17.0-beta.291 npm +@xterm/addon-serialize 0.15.0-beta.291 npm +@xterm/addon-unicode11 0.10.0-beta.291 npm +@xterm/addon-webgl 0.20.0-beta.290 npm +@xterm/headless 6.1.0-beta.291 npm +@xterm/xterm 6.1.0-beta.291 npm +MXC diagnostic console 0.6.1+161598f binary +MXC host setup helper 0.6.1+161598f binary +MXC sandbox executor 0.6.1+161598f binary +MXC test HTTP proxy 0.6.1+161598f binary +Microsoft.PowerShell.PSReadLine 2.4.3 dotnet +Microsoft.PowerShell.PSReadLine.Polyfiller 1.0.0.0 dotnet (+1 duplicate) +Microsoft.PowerShell.Pager 1.0.0.0 dotnet +WinHTTP proxy policy shim for sandbox networking 0.6.1+161598f binary +Windows Sandbox guest agent 0.6.1+161598f binary +Windows Sandbox integration daemon 0.6.1+161598f binary +accepts 2.0.0 npm +adduser 3.137ubuntu1 deb +agent-base 7.1.1 npm +agent-base 7.1.4 npm +apt 2.8.3 deb +apt-utils 2.8.3 deb +argon2 0.44.0 npm +argparse 2.0.1 npm +asn1 0.2.6 npm +ast-types 0.13.4 npm +base-files 13ubuntu10.4 deb +base-passwd 3.6.3build1 deb +base64-js 1.5.1 npm +bash 5.2.21-2ubuntu4 deb +basic-ftp 5.3.1 npm +bat 10.0.0 npm +bcrypt-pbkdf 1.0.2 npm +bindings 1.5.0 npm +bl 4.1.0 npm +body-parser 2.3.0 npm +bsdutils 1:2.39.3-9ubuntu6.5 deb +buffer 5.7.1 npm +buffer-alloc 1.2.0 npm +buffer-alloc-unsafe 1.1.0 npm +buffer-crc32 0.2.13 npm +buffer-fill 1.0.0 npm +buildcheck 0.0.7 npm +builtin-notebook-renderers 10.0.0 npm +bytes 3.1.2 npm +ca-certificates 20260601~24.04.1 deb +call-bind-apply-helpers 1.0.2 npm +call-bound 1.0.4 npm +catatonit 0.1.7-1 deb +charenc 0.0.2 npm +chownr 1.1.4 npm +chownr 3.0.0 npm +clojure 10.0.0 npm +code-oss 1.132.0 npm +code-server 4.132.0 npm +coffeescript 10.0.0 npm +commander 12.1.0 npm +commander 8.3.0 npm +compressible 2.0.18 npm +compression 1.8.1 npm +configuration-editing 10.0.0 npm +content-disposition 1.0.1 npm +content-type 1.0.5 npm +content-type 2.0.0 npm (+1 duplicate) +cookie 0.7.2 npm (+2 duplicates) +cookie 1.1.1 npm +cookie-parser 1.4.7 npm +cookie-signature 1.0.6 npm +cookie-signature 1.2.2 npm +copilot-chat 0.60.0 npm +coreutils 9.4-3ubuntu6.2 deb +cpp 10.0.0 npm +cron 3.0pl1-184ubuntu2 deb +cron-daemon-common 3.0pl1-184ubuntu2 deb +cross-env 10.1.0 npm +cross-spawn 7.0.6 npm +crypt 0.0.2 npm +csharp 10.0.0 npm +css 10.0.0 npm +css-language-features 10.0.0 npm +curl 8.5.0-2ubuntu10.11 deb +dart 10.0.0 npm +dash 0.5.12-6ubuntu5 deb +data-uri-to-buffer 6.0.2 npm +debconf 1.5.86ubuntu1 deb +debianutils 5.17build1 deb +debug 2.6.9 npm +debug 4.3.4 npm +debug 4.4.3 npm +debug-auto-launch 10.0.0 npm +debug-server-ready 10.0.0 npm +decompress-response 6.0.0 npm +deep-extend 0.6.0 npm +degenerator 5.0.1 npm +depd 2.0.0 npm +detect-libc 2.1.2 npm +diff 10.0.0 npm +diffutils 1:3.10-1build1 deb +dirmngr 2.4.4-2ubuntu17.4 deb +docker 10.0.0 npm +dotenv 10.0.0 npm +dpkg 1.22.6ubuntu6.6 deb +dunder-proto 1.0.1 npm +e2fsprogs 1.47.0-2.4~exp1ubuntu4.1 deb +ee-first 1.1.1 npm +emmet 10.0.0 npm +encodeurl 2.0.0 npm +end-of-stream 1.4.4 npm +env-paths 2.2.1 npm +es-define-property 1.0.1 npm +es-errors 1.3.0 npm +es-object-atoms 1.1.1 npm +es6-promisify 7.0.0 npm +escape-html 1.0.3 npm +escodegen 2.1.0 npm +esprima 4.0.1 npm +estraverse 5.3.0 npm +esutils 2.0.3 npm +etag 1.8.1 npm +eventemitter3 4.0.7 npm +expand-template 2.0.3 npm +express 5.2.1 npm +extension-editing 10.0.0 npm +file-uri-to-path 1.0.0 npm +finalhandler 2.1.1 npm +findutils 4.9.0-5build1 deb +follow-redirects 1.16.0 npm +forwarded 0.2.0 npm +fresh 2.0.0 npm +fs-constants 1.0.0 npm +fs-extra 11.2.0 npm +fsharp 10.0.0 npm +function-bind 1.1.2 npm +gcc-14-base 14.2.0-4ubuntu2~24.04.1 deb +get-intrinsic 1.3.0 npm +get-proto 1.0.1 npm +get-uri 6.0.5 npm +git 10.0.0 npm +git 1:2.43.0-1ubuntu7.3 deb +git-base 10.0.0 npm +git-man 1:2.43.0-1ubuntu7.3 deb +github 0.0.1 npm +github-authentication 0.0.2 npm +github-from-package 0.0.0 npm +gnupg 2.4.4-2ubuntu17.4 deb +gnupg-l10n 2.4.4-2ubuntu17.4 deb +gnupg-utils 2.4.4-2ubuntu17.4 deb +go 10.0.0 npm +gopd 1.2.0 npm +gpg 2.4.4-2ubuntu17.4 deb +gpg-agent 2.4.4-2ubuntu17.4 deb +gpg-wks-client 2.4.4-2ubuntu17.4 deb +gpgconf 2.4.4-2ubuntu17.4 deb +gpgsm 2.4.4-2ubuntu17.4 deb +gpgv 2.4.4-2ubuntu17.4 deb +graceful-fs 4.2.11 npm +grep 3.11-4build1 deb +groovy 10.0.0 npm +grunt 10.0.0 npm +gulp 10.0.0 npm +gzip 1.12-1ubuntu3.2 deb +handlebars 10.0.0 npm +has-symbols 1.1.0 npm +hasown 2.0.2 npm +hlsl 10.0.0 npm +hostname 3.23+nmu2ubuntu2 deb +html 10.0.0 npm +html-language-features 10.0.0 npm +http-errors 2.0.1 npm +http-proxy 1.18.1 npm +http-proxy-agent 7.0.0 npm +http-proxy-agent 7.0.2 npm +httpolyglot 0.1.2 npm +https-proxy-agent 7.0.2 npm +https-proxy-agent 7.0.6 npm +i18next 26.3.1 npm +iconv-lite 0.7.2 npm +ieee754 1.2.1 npm +inherits 2.0.4 npm (+1 duplicate) +ini 1.3.8 npm +ini 10.0.0 npm +init-system-helpers 1.66ubuntu1 deb +ip-address 10.2.0 npm +ip-address 10.4.0 npm +ipaddr.js 1.9.1 npm +ipynb 10.0.0 npm +is-buffer 1.1.6 npm +is-extglob 2.1.1 npm +is-glob 4.0.3 npm +is-promise 4.0.0 npm +isexe 2.0.0 npm +jake 10.0.0 npm +java 10.0.0 npm +javascript 10.0.0 npm +jq 1.7.1-3ubuntu0.24.04.2 deb +js-debug 1.117.0 npm +js-debug-companion 1.1.3 npm +js-yaml 4.3.0 npm +jschardet 3.1.4 npm +json 10.0.0 npm +json-language-features 10.0.0 npm +jsonfile 6.1.0 npm +julia 10.0.0 npm +just-performance 4.3.0 npm +katex 0.16.22 npm +kerberos 2.1.1 npm +keyboxd 2.4.4-2ubuntu17.4 deb +krb5-locales 1.20.1-6ubuntu2.7 deb +latex 10.0.0 npm +less 10.0.0 npm +less 590-2ubuntu2.1 deb +libacl1 2.3.2-1build1.1 deb +libapparmor1 4.0.1really4.0.1-0ubuntu0.24.04.7 deb +libapt-pkg6.0t64 2.8.3 deb +libassuan0 2.5.6-1build1 deb +libatomic1 14.2.0-4ubuntu2~24.04.1 deb +libattr1 1:2.5.2-1build1.1 deb +libaudit-common 1:3.1.2-2.1build1.1 deb +libaudit1 1:3.1.2-2.1build1.1 deb +libblkid1 2.39.3-9ubuntu6.5 deb +libbrotli1 1.1.0-2build2 deb +libbsd0 0.12.1-1build1.1 deb +libbz2-1.0 1.0.8-5.1build0.1 deb +libc-bin 2.39-0ubuntu8.8 deb +libc6 2.39-0ubuntu8.8 deb +libcap-ng0 0.8.4-2build2 deb +libcap2 1:2.66-5ubuntu2.4 deb +libcbor0.10 0.10.2-1.2ubuntu2 deb +libcom-err2 1.47.0-2.4~exp1ubuntu4.1 deb +libcrypt1 1:4.4.36-4build1 deb +libcurl3t64-gnutls 8.5.0-2ubuntu10.11 deb +libcurl4t64 8.5.0-2ubuntu10.11 deb +libdb5.3t64 5.3.28+dfsg2-7 deb +libdebconfclient0 0.271ubuntu3 deb +libedit2 3.1-20230828-1build1 deb +liberror-perl 0.17029-2 deb +libexpat1 2.6.1-2ubuntu0.4 deb +libext2fs2t64 1.47.0-2.4~exp1ubuntu4.1 deb +libffi8 3.4.6-1build1 deb +libfido2-1 1.14.0-1build3 deb +libgcc-s1 14.2.0-4ubuntu2~24.04.1 deb +libgcrypt20 1.10.3-2ubuntu0.1 deb +libgdbm-compat4t64 1.23-5.1build1 deb +libgdbm6t64 1.23-5.1build1 deb +libgmp10 2:6.3.0+dfsg-2ubuntu6.1 deb +libgnutls30t64 3.8.3-1.1ubuntu3.6 deb +libgpg-error0 1.47-3build2.1 deb +libgssapi-krb5-2 1.20.1-6ubuntu2.7 deb +libhogweed6t64 3.9.1-2.2build1.1 deb +libidn2-0 2.3.7-2build1.1 deb +libjq1 1.7.1-3ubuntu0.24.04.2 deb +libk5crypto3 1.20.1-6ubuntu2.7 deb +libkeyutils1 1.6.3-3build1 deb +libkrb5-3 1.20.1-6ubuntu2.7 deb +libkrb5support0 1.20.1-6ubuntu2.7 deb +libksba8 1.6.6-1build1 deb +libldap-common 2.6.10+dfsg-0ubuntu0.24.04.1 deb +libldap2 2.6.10+dfsg-0ubuntu0.24.04.1 deb +liblz4-1 1.9.4-1build1.1 deb +liblzma5 5.6.1+really5.4.5-1ubuntu0.3 deb +libmd0 1.1.0-2build1.1 deb +libmount1 2.39.3-9ubuntu6.5 deb +libncursesw6 6.4+20240113-1ubuntu2.1 deb +libnettle8t64 3.9.1-2.2build1.1 deb +libnghttp2-14 1.59.0-1ubuntu0.4 deb +libnpth0t64 1.6-3.1build1 deb +libonig5 6.9.9-1build1 deb +libp11-kit0 0.25.3-4ubuntu2.1 deb +libpam-modules 1.5.3-5ubuntu5.6 deb +libpam-modules-bin 1.5.3-5ubuntu5.6 deb +libpam-runtime 1.5.3-5ubuntu5.6 deb +libpam0g 1.5.3-5ubuntu5.6 deb +libpcre2-8-0 10.42-4ubuntu2.1 deb +libperl5.38t64 5.38.2-3.2ubuntu0.3 deb +libproc2-0 2:4.0.4-4ubuntu3.2 deb +libpsl5t64 0.21.2-1.1build1 deb +libreadline8t64 8.2-4build1 deb +librtmp1 2.4+20151223.gitfa8646d.1-2build7 deb +libsasl2-2 2.1.28+dfsg1-5ubuntu3.1 deb +libsasl2-modules 2.1.28+dfsg1-5ubuntu3.1 deb +libsasl2-modules-db 2.1.28+dfsg1-5ubuntu3.1 deb +libseccomp2 2.5.5-1ubuntu3.1 deb +libselinux1 3.5-2ubuntu2.1 deb +libsemanage-common 3.5-1build5 deb +libsemanage2 3.5-1build5 deb +libsepol2 3.5-2build1 deb +libsmartcols1 2.39.3-9ubuntu6.5 deb +libsqlite3-0 3.45.1-1ubuntu2.7 deb +libss2 1.47.0-2.4~exp1ubuntu4.1 deb +libssh-4 0.10.6-2ubuntu0.4 deb +libssl3t64 3.0.13-0ubuntu3.12 deb +libstdc++6 14.2.0-4ubuntu2~24.04.1 deb +libsystemd0 255.4-1ubuntu8.16 deb +libtasn1-6 4.19.0-3ubuntu0.24.04.2 deb +libtinfo6 6.4+20240113-1ubuntu2.1 deb +libudev1 255.4-1ubuntu8.16 deb +libunistring5 1.1-2build1.1 deb +libuuid1 2.39.3-9ubuntu6.5 deb +libx11-6 2:1.8.7-1build1 deb +libx11-data 2:1.8.7-1build1 deb +libxau6 1:1.0.9-1build6 deb +libxcb1 1.15-1ubuntu2 deb +libxdmcp6 1:1.1.3-0ubuntu6 deb +libxext6 2:1.3.4-1build2 deb +libxmuu1 2:1.1.3-3build2 deb +libxxhash0 0.8.2-2build1 deb +libzstd1 1.5.5+dfsg2-2build1.1 deb +limiter 2.1.0 npm +locales 2.39-0ubuntu8.8 deb +log 10.0.0 npm +login 1:4.13+dfsg1-4ubuntu3.2 deb +logsave 1.47.0-2.4~exp1ubuntu4.1 deb +lru-cache 11.5.1 npm +lru-cache 7.18.3 npm +lua 10.0.0 npm +make 10.0.0 npm +markdown 30.0.0 npm +markdown-language-features 10.0.0 npm +markdown-math 10.0.0 npm +math-intrinsics 1.1.0 npm +mawk 1.3.4.20240123-1build1 deb +md5 2.3.0 npm +media-preview 10.0.0 npm +media-typer 1.1.0 npm +merge-conflict 10.0.0 npm +merge-descriptors 2.0.0 npm +mermaid-markdown-features 10.0.0 npm +microsoft-authentication 0.0.1 npm +mime-db 1.54.0 npm +mime-types 3.0.2 npm +mimic-response 3.1.0 npm +minimist 1.2.8 npm +minipass 7.1.3 npm +minizlib 3.1.0 npm +mkdirp 1.0.4 npm +mkdirp-classic 0.5.3 npm +mount 2.39.3-9ubuntu6.5 deb +ms 2.0.0 npm +ms 2.1.2 npm +ms 2.1.3 npm +nano 7.2-2ubuntu0.2 deb +napi-build-utils 1.0.2 npm +napi-oop-runtime 1.0.9 npm +ncurses-base 6.4+20240113-1ubuntu2.1 deb +ncurses-bin 6.4+20240113-1ubuntu2.1 deb +negotiator 0.6.4 npm +negotiator 1.0.0 npm +net-tools 2.10-0.1ubuntu4.4 deb +netbase 6.4 deb +netcat-openbsd 1.226-1ubuntu2 deb +netmask 2.0.2 npm +node 24.18.0 binary +node-abi 3.8.0 npm +node-addon-api 8.6.0 npm +node-gyp-build 4.8.4 npm +node-pty 1.2.0-beta.13 npm +npm 10.0.0 npm +object-inspect 1.13.4 npm +objective-c 10.0.0 npm +on-finished 2.4.1 npm +on-headers 1.1.0 npm +once 1.4.0 npm (+1 duplicate) +openssh-client 1:9.6p1-3ubuntu13.18 deb +openssl 3.0.13-0ubuntu3.12 deb +opentype.js 2.0.0 npm +os-tmpdir 1.0.2 npm +pac-proxy-agent 7.2.0 npm +pac-resolver 7.0.1 npm +parseurl 1.3.3 npm +passwd 1:4.13+dfsg1-4ubuntu3.2 deb +patch 2.7.6-7build3 deb +path-key 3.1.1 npm +path-to-regexp 8.4.2 npm +pem 1.14.8 npm +pend 1.2.0 npm +perl 10.0.0 npm +perl 5.38.2-3.2ubuntu0.3 deb +perl-base 5.38.2-3.2ubuntu0.3 deb +perl-modules-5.38 5.38.2-3.2ubuntu0.3 deb +php 10.0.0 npm +php-language-features 10.0.0 npm +picomatch 4.0.4 npm +pinentry-curses 1.2.1-3ubuntu5 deb +powershell 10.0.0 npm +procps 2:4.0.4-4ubuntu3.2 deb +prompt 10.0.0 npm +proxy-addr 2.0.7 npm +proxy-agent 6.5.0 npm +proxy-from-env 1.1.0 npm +publicsuffix 20231001.0357-0.1 deb +pug 10.0.0 npm +pump 3.0.0 npm +python 10.0.0 npm +qs 6.15.2 npm +r 10.0.0 npm +range-parser 1.2.1 npm +raw-body 3.0.2 npm +razor 10.0.0 npm +rc 1.2.8 npm +readable-stream 3.6.0 npm +readline-common 8.2-4build1 deb +references-view 10.0.0 npm +requires-port 1.0.0 npm +restructuredtext 10.0.0 npm +rotating-file-stream 3.2.9 npm +router 2.2.0 npm +ruby 10.0.0 npm +rust 10.0.0 npm +safe-buffer 5.2.1 npm (+1 duplicate) +safe-compare 1.1.4 npm +safer-buffer 2.1.2 npm (+1 duplicate) +scss 10.0.0 npm +search-result 10.0.0 npm +sed 4.9-2ubuntu0.24.04.1 deb +semver 7.7.4 npm +semver 7.8.0 npm +send 1.2.1 npm +sensible-utils 0.0.22 deb +serve-static 2.2.1 npm +setprototypeof 1.2.0 npm +shaderlab 10.0.0 npm +shebang-command 2.0.0 npm +shebang-regex 3.0.0 npm +shell-quote 1.10.0 npm +shellscript 10.0.0 npm +side-channel 1.1.0 npm +side-channel-list 1.0.0 npm +side-channel-map 1.0.1 npm +side-channel-weakmap 1.0.2 npm +simple-browser 10.0.0 npm +simple-concat 1.0.1 npm +simple-get 4.0.1 npm +smart-buffer 4.2.0 npm (+1 duplicate) +socks 2.8.7 npm +socks 2.8.8 npm +socks-proxy-agent 8.0.4 npm +socks-proxy-agent 8.0.5 npm +source-map 0.6.1 npm +sql 10.0.0 npm +ssh2 1.17.0 npm +statuses 2.0.2 npm +string_decoder 1.3.0 npm +strip-json-comments 2.0.1 npm +sudo 1.9.15p5-3ubuntu5.24.04.2 deb +swift 10.0.0 npm +systemd-standalone-sysusers 255.4-1ubuntu8.16 deb +sysvinit-utils 3.08-6ubuntu3 deb +tar 1.35+dfsg-3ubuntu0.4 deb +tar 7.5.20 npm +tar-fs 2.1.4 npm +tar-stream 2.2.0 npm +tas-client 0.3.1 npm +terminal-suggest 1.0.1 npm +theme-abyss 10.0.0 npm +theme-defaults 10.0.0 npm +theme-kimbie-dark 10.0.0 npm +theme-monokai 10.0.0 npm +theme-monokai-dimmed 10.0.0 npm +theme-quietlight 10.0.0 npm +theme-red 10.0.0 npm +theme-solarized-dark 10.0.0 npm +theme-solarized-light 10.0.0 npm +theme-tomorrow-night-blue 10.0.0 npm +toidentifier 1.0.1 npm +tslib 2.8.1 npm +tunnel-agent 0.6.0 npm +tunnel-forwarding 10.0.0 npm +tweetnacl 0.14.5 npm +type-is 2.1.0 npm +typescript 10.0.0 npm +typescript 6.0.3 npm +typescript-language-features 10.0.0 npm +tzdata 2026c-0ubuntu0.24.04.1 deb +ubuntu-keyring 2023.11.28.1 deb +undici 7.28.0 npm +universalify 2.0.1 npm +unminimize 0.2.1 deb +unpipe 1.0.0 npm +util-deprecate 1.0.2 npm +util-linux 2.39.3-9ubuntu6.5 deb +uuid 14.0.0 npm +vary 1.1.2 npm +vb 10.0.0 npm +vscode-capi-scripts 1.0.0 npm +vscode-css-languageserver 10.0.0 npm +vscode-extensions 0.0.1 npm +vscode-html-languageserver 10.0.0 npm +vscode-js-profile-table 1.0.11 npm +vscode-json-languageserver 1.3.4 npm +vscode-jsonrpc 8.2.1 npm +vscode-oniguruma 1.7.0 npm +vscode-regexpp 3.1.0 npm +vscode-textmate 9.3.2 npm +vscode-theme-seti 10.0.0 npm +which 2.0.2 npm +wrappy 1.0.2 npm (+1 duplicate) +ws 8.21.0 npm (+1 duplicate) +wslcsdk UNKNOWN binary +xauth 1:1.1.2-1build1 deb +xdg-basedir 4.0.0 npm +xml 10.0.0 npm +yallist 5.0.0 npm +yaml 10.0.0 npm +yauzl 3.3.1 npm +yazl 2.4.3 npm +zlib1g 1:1.3.dfsg-3.1ubuntu2.1 deb +zod 3.25.76 npm +zod 4.4.3 npm diff --git a/readme-vars.yml b/readme-vars.yml index 3a3cff9b..3e4b7aa7 100644 --- a/readme-vars.yml +++ b/readme-vars.yml @@ -4,13 +4,20 @@ project_name: code-server project_url: "https://coder.com" project_logo: "https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/code-server-banner.png" -project_blurb: "[{{ project_name|capitalize }}]({{ project_url }}) is VS Code running on a remote server, accessible through the browser.\n- Code on your Chromebook, tablet, and laptop with a consistent dev environment.\n- If you have a Windows or Mac workstation, more easily develop for Linux.\n- Take advantage of large cloud servers to speed up tests, compilations, downloads, and more.\n- Preserve battery life when you're on the go.\n- All intensive computation runs on your server.\n- You're no longer running excess instances of Chrome." +project_blurb: | + [{{ project_name|capitalize }}]({{ project_url }}) is VS Code running on a remote server, accessible through the browser. + - Code on your Chromebook, tablet, and laptop with a consistent dev environment. + - If you have a Windows or Mac workstation, more easily develop for Linux. + - Take advantage of large cloud servers to speed up tests, compilations, downloads, and more. + - Preserve battery life when you're on the go. + - All intensive computation runs on your server. + - You're no longer running excess instances of Chrome. project_lsio_github_repo_url: "https://github.com/linuxserver/docker-{{ project_name }}" +project_categories: "Programming" # supported architectures available_architectures: - {arch: "{{ arch_x86_64 }}", tag: "amd64-latest"} - {arch: "{{ arch_arm64 }}", tag: "arm64v8-latest"} - # container parameters common_param_env_vars_enabled: true param_container_name: "{{ project_name }}" @@ -29,7 +36,14 @@ opt_param_env_vars: - {env_var: "SUDO_PASSWORD_HASH", env_value: "", desc: "Optionally set sudo password via hash (takes priority over `SUDO_PASSWORD` var). Format is `$type$salt$hashed`."} - {env_var: "PROXY_DOMAIN", env_value: "code-server.my.domain", desc: "If this optional variable is set, this domain will be proxied for subdomain proxying. See [Documentation](https://github.com/coder/code-server/blob/main/docs/guide.md#using-a-subdomain)"} - {env_var: "DEFAULT_WORKSPACE", env_value: "/config/workspace", desc: "If this optional variable is set, code-server will open this directory by default"} - + - {env_var: "PWA_APPNAME", env_value: "code-server", desc: "If this optional variable is set, the PWA app will the specified name."} +readonly_supported: true +readonly_message: | + * `/tmp` must be mounted to tmpfs + * `sudo` will not be available +nonroot_supported: true +nonroot_message: | + * `sudo` will not be available # application setup block app_setup_block_enabled: true app_setup_block: | @@ -45,8 +59,52 @@ app_setup_block: | ### Hashed code-server password How to create the [hashed password](https://github.com/cdr/code-server/blob/master/docs/FAQ.md#can-i-store-my-password-hashed). +# init diagram +init_diagram: | + "code-server:latest": { + docker-mods + base { + fix-attr +\nlegacy cont-init + } + docker-mods -> base + legacy-services + custom services + init-services -> legacy-services + init-services -> custom services + custom services -> legacy-services + legacy-services -> ci-service-check + init-migrations -> init-adduser + init-config -> init-code-server + init-os-end -> init-config + init-code-server -> init-config-end + init-config -> init-config-end + init-crontab-config -> init-config-end + init-config -> init-crontab-config + init-mods-end -> init-custom-files + init-adduser -> init-device-perms + base -> init-envfile + base -> init-migrations + init-config-end -> init-mods + init-mods-package-install -> init-mods-end + init-mods -> init-mods-package-install + init-adduser -> init-os-end + init-device-perms -> init-os-end + init-envfile -> init-os-end + init-custom-files -> init-services + init-services -> svc-code-server + svc-code-server -> legacy-services + init-services -> svc-cron + svc-cron -> legacy-services + } + Base Images: { + "baseimage-ubuntu:noble" + } + "code-server:latest" <- Base Images # changelog changelogs: + - {date: "17.05.26:", desc: "Let server listen on both ipv4 and ipv6 even when running container as root."} + - {date: "10.08.25:", desc: "Let server listen on both ipv4 and ipv6."} + - {date: "03.06.25:", desc: "Allow setting PWA name using env var `PWA_APPNAME`."} - {date: "13.10.24:", desc: "Only chown config folder when change to ownership or new install is detected."} - {date: "09.10.24:", desc: "Manage permissions in /config/.ssh according to file type"} - {date: "19.08.24:", desc: "Rebase to Ubuntu Noble."} diff --git a/root/etc/s6-overlay/s6-rc.d/init-code-server/run b/root/etc/s6-overlay/s6-rc.d/init-code-server/run index c0fceadc..8b42ed0b 100755 --- a/root/etc/s6-overlay/s6-rc.d/init-code-server/run +++ b/root/etc/s6-overlay/s6-rc.d/init-code-server/run @@ -3,18 +3,20 @@ mkdir -p /config/{extensions,data,workspace,.ssh} -if [[ -n "${SUDO_PASSWORD}" ]] || [[ -n "${SUDO_PASSWORD_HASH}" ]]; then - echo "setting up sudo access" - if ! grep -q 'abc' /etc/sudoers; then - echo "adding abc to sudoers" - echo "abc ALL=(ALL:ALL) ALL" >> /etc/sudoers - fi - if [[ -n "${SUDO_PASSWORD_HASH}" ]]; then - echo "setting sudo password using sudo password hash" - sed -i "s|^abc:\!:|abc:${SUDO_PASSWORD_HASH}:|" /etc/shadow - else - echo "setting sudo password using SUDO_PASSWORD env var" - echo -e "${SUDO_PASSWORD}\n${SUDO_PASSWORD}" | passwd abc +if [[ -z ${LSIO_NON_ROOT_USER} ]] && [[ -z ${LSIO_READ_ONLY_FS} ]]; then + if [[ -n "${SUDO_PASSWORD}" ]] || [[ -n "${SUDO_PASSWORD_HASH}" ]]; then + echo "setting up sudo access" + if ! grep -q 'abc' /etc/sudoers; then + echo "adding abc to sudoers" + echo "abc ALL=(ALL:ALL) ALL" >> /etc/sudoers + fi + if [[ -n "${SUDO_PASSWORD_HASH}" ]]; then + echo "setting sudo password using sudo password hash" + sed -i "s|^abc:\!:|abc:${SUDO_PASSWORD_HASH}:|" /etc/shadow + else + echo "setting sudo password using SUDO_PASSWORD env var" + echo -e "${SUDO_PASSWORD}\n${SUDO_PASSWORD}" | passwd abc + fi fi fi @@ -26,17 +28,19 @@ if [[ ! -f /config/.profile ]]; then cp /root/.profile /config/.profile fi -# fix permissions (ignore contents of workspace) -PUID=${PUID:-911} -if [[ ! "$(stat -c %u /config/.profile)" == "${PUID}" ]]; then - echo "Change in ownership or new install detected, please be patient while we chown existing files" - echo "This could take some time" - find /config -path "/config/workspace" -prune -o -exec lsiown abc:abc {} + - lsiown abc:abc /config/workspace -fi -chmod 700 /config/.ssh -if [[ -n "$(ls -A /config/.ssh)" ]]; then - find /config/.ssh/ -type d -exec chmod 700 '{}' \; - find /config/.ssh/ -type f -exec chmod 600 '{}' \; - find /config/.ssh/ -type f -iname '*.pub' -exec chmod 644 '{}' \; +if [[ -z ${LSIO_NON_ROOT_USER} ]]; then + # fix permissions (ignore contents of workspace) + PUID=${PUID:-911} + if [[ ! "$(stat -c %u /config/.profile)" == "${PUID}" ]]; then + echo "Change in ownership or new install detected, please be patient while we chown existing files" + echo "This could take some time" + find /config -path "/config/workspace" -prune -o -exec lsiown abc:abc {} + + lsiown abc:abc /config/workspace + fi + chmod 700 /config/.ssh + if [[ -n "$(ls -A /config/.ssh)" ]]; then + find /config/.ssh/ -type d -exec chmod 700 '{}' \; + find /config/.ssh/ -type f -exec chmod 600 '{}' \; + find /config/.ssh/ -type f -iname '*.pub' -exec chmod 644 '{}' \; + fi fi diff --git a/root/etc/s6-overlay/s6-rc.d/svc-code-server/run b/root/etc/s6-overlay/s6-rc.d/svc-code-server/run index 97c7e09e..5e2ecba4 100755 --- a/root/etc/s6-overlay/s6-rc.d/svc-code-server/run +++ b/root/etc/s6-overlay/s6-rc.d/svc-code-server/run @@ -14,14 +14,33 @@ else PROXY_DOMAIN_ARG="--proxy-domain=${PROXY_DOMAIN}" fi -exec \ - s6-notifyoncheck -d -n 300 -w 1000 -c "nc -z 127.0.0.1 8443" \ - s6-setuidgid abc \ +if [[ -z ${PWA_APPNAME} ]]; then + PWA_APPNAME="code-server" +fi + +if [[ -z ${LSIO_NON_ROOT_USER} ]]; then + exec \ + s6-notifyoncheck -d -n 300 -w 1000 -c "nc -z 127.0.0.1 8443" \ + s6-setuidgid abc \ + /app/code-server/bin/code-server \ + --bind-addr "[::]:8443" \ + --user-data-dir /config/data \ + --extensions-dir /config/extensions \ + --disable-telemetry \ + --auth "${AUTH}" \ + --app-name "${PWA_APPNAME}" \ + "${PROXY_DOMAIN_ARG}" \ + "${DEFAULT_WORKSPACE:-/config/workspace}" +else + exec \ + s6-notifyoncheck -d -n 300 -w 1000 -c "nc -z 127.0.0.1 8443" \ /app/code-server/bin/code-server \ - --bind-addr 0.0.0.0:8443 \ + --bind-addr "[::]:8443" \ --user-data-dir /config/data \ --extensions-dir /config/extensions \ --disable-telemetry \ --auth "${AUTH}" \ + --app-name "${PWA_APPNAME}" \ "${PROXY_DOMAIN_ARG}" \ "${DEFAULT_WORKSPACE:-/config/workspace}" +fi