Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Labs devcontainer #1

Open
wants to merge 7 commits into
base: main
Choose a base branch
from
Open

Labs devcontainer #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
6bcef25
update devcontainer to use workshops devcontainer
Oct 9, 2023
3e63912
basic devcontainer is working
Oct 12, 2023
248aa47
adjust ci job for the devcontainer
Oct 16, 2023
5273a4f
install plugins/templates as the vscode user
Oct 16, 2023
2216aba
move rust install to after we set the current user
Oct 16, 2023
b0cdbd3
adjusting devcontainer to include a basic labs cli
Oct 17, 2023
5dcb826
add a few more methods and the notes for the first lab
Oct 17, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
314 changes: 36 additions & 278 deletions .devcontainer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,288 +1,46 @@
# The goal of this Dockerfile is to be architecture independent. To that end,
# it avoids downloading any platform-specific binaries, and installs the required
# tools either through Debian's package manager, or through installation scripts
# that download the appropriate binaries.
FROM mcr.microsoft.com/devcontainers/base:jammy

# If the examples in this repository require it, update this Dockerfile to install
# more language toolchains (such as .NET or TinyGo).

FROM ubuntu:22.04
# provided by docker
ARG TARGETARCH
ARG USERNAME=vscode
ARG USER_UID=1000
ARG USER_GID=$USER_UID

RUN apt-get update && apt-get install -y \
bash \
git \
curl \
nodejs \
npm \
golang-go \
build-essential libssl-dev pkg-config\
glibc-source \
wget \
ca-certificates

# Install Rust
RUN curl https://sh.rustup.rs -sSf | bash -s -- -y
ENV PATH="/root/.cargo/bin:${PATH}"
RUN rustup target add wasm32-wasi

# Install the gopls Go Language Server, see https://github.com/golang/tools/tree/master/gopls
RUN go install golang.org/x/tools/gopls@latest

# Install Spin and required plugins
RUN (curl -fsSL https://developer.fermyon.com/downloads/install.sh | bash && mv spin /usr/local/bin/) && \
spin plugin install js2wasm -y && \
spin templates install --git https://github.com/fermyon/spin --update && \
spin templates install --git https://github.com/fermyon/spin-js-sdk --update && \
spin templates install --git https://github.com/radu-matei/spin-kv-explorer --update && \
spin templates install --git https://github.com/radu-matei/spin-nextjs --update

# Install Docker
#RUN [ -e /etc/nsswitch.conf ] && grep '^hosts: files dns' /etc/nsswitch.conf

ENV DOCKER_VERSION 24.0.5

RUN set -eux; \
\
UNAME_ARC="$(uname -m)"; \
echo "$UNAME_ARC"; \
case "$UNAME_ARC" in \
'x86_64') \
url='https://download.docker.com/linux/static/stable/x86_64/docker-24.0.5.tgz'; \
;; \
'armhf') \
url='https://download.docker.com/linux/static/stable/armel/docker-24.0.5.tgz'; \
;; \
'armv7') \
url='https://download.docker.com/linux/static/stable/armhf/docker-24.0.5.tgz'; \
;; \
'aarch64') \
url='https://download.docker.com/linux/static/stable/aarch64/docker-24.0.5.tgz'; \
;; \
*) echo >&2 "error: unsupported 'docker.tgz' architecture ($UNAME_ARC)"; exit 1 ;; \
esac; \
\
wget -O 'docker.tgz' "$url"; \
\
tar --extract \
--file docker.tgz \
--strip-components 1 \
--directory /usr/local/bin/ \
--no-same-owner \
'docker/docker' \
; \
rm docker.tgz; \
\
docker --version

ENV DOCKER_BUILDX_VERSION 0.11.2
RUN set -eux; \
\
UNAME_ARC="$(uname -m)"; \
case "$UNAME_ARC" in \
'x86_64') \
url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-amd64'; \
sha256='311568ee69715abc46163fd688e56c77ab0144ff32e116d0f293bfc3470e75b7'; \
;; \
'armhf') \
url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v6'; \
sha256='c1bab0c7374406d5069f60b291971d71161fbd3c00e8a8fb1b68b9053eda8a4e'; \
;; \
'armv7') \
url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm-v7'; \
sha256='4defdf463ca2516d3f58fef69a6f78cbbb8baf16d936cdfc54df4a4be0d48f7f'; \
;; \
'aarch64') \
url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-arm64'; \
sha256='565e36085a35bba5104f37365ba796c111338eea1a0902b3a7ff42e2e1248815'; \
;; \
'ppc64le') \
url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-ppc64le'; \
sha256='c5f5cb9957890873a537c7ff5c4eef36132339622baeabb37a4b9b7251ddf836'; \
;; \
'riscv64') \
url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-riscv64'; \
sha256='c0adc4b4625f7e3df7dcdec840568f918673f2ed4bcd03ca1e63ea2a5627ca35'; \
;; \
's390x') \
url='https://github.com/docker/buildx/releases/download/v0.11.2/buildx-v0.11.2.linux-s390x'; \
sha256='02916c76c3872fd0b3fa57e71403fee92b6be10f350b96a5ff99e7914dd277b8'; \
;; \
*) echo >&2 "warning: unsupported 'docker-buildx' architecture ($UNAME_ARC); skipping"; exit 0 ;; \
esac; \
\
wget -O 'docker-buildx' "$url"; \
echo "$sha256 *"'docker-buildx' | sha256sum -c -; \
\
plugin='/usr/local/libexec/docker/cli-plugins/docker-buildx'; \
mkdir -p "$(dirname "$plugin")"; \
mv -vT 'docker-buildx' "$plugin"; \
chmod +x "$plugin"; \
\
docker buildx version

ENV DOCKER_COMPOSE_VERSION 2.20.2
RUN set -eux; \
\
UNAME_ARC="$(uname -m)"; \
case "$UNAME_ARC" in \
'x86_64') \
url='https://github.com/docker/compose/releases/download/v2.20.2/docker-compose-linux-x86_64'; \
sha256='b9385dabb7931636a3afc0aee94625ebff3bb29584493a87804afb6ebaf2d916'; \
;; \
'armhf') \
url='https://github.com/docker/compose/releases/download/v2.20.2/docker-compose-linux-armv6'; \
sha256='39cef332454d1c7a26e12f8d9ee297908d1da9cb71112ede1816c550766ddb8e'; \
;; \
'armv7') \
url='https://github.com/docker/compose/releases/download/v2.20.2/docker-compose-linux-armv7'; \
sha256='139275f3453761b46f0837a4e4c2a00883b778abee997e299c52e1bcf3d8fc9f'; \
;; \
'aarch64') \
url='https://github.com/docker/compose/releases/download/v2.20.2/docker-compose-linux-aarch64'; \
sha256='e63a24e57d2104a09b37ee6aa04c76f4ae85bdf7a59e1bf79adc6d5f55340a31'; \
;; \
'ppc64le') \
url='https://github.com/docker/compose/releases/download/v2.20.2/docker-compose-linux-ppc64le'; \
sha256='9c08eb875a7ffd4a832a585540a4c9c81da5dcab263ec3e704ab1d62b573636f'; \
;; \
'riscv64') \
url='https://github.com/docker/compose/releases/download/v2.20.2/docker-compose-linux-riscv64'; \
sha256='5a3bff32ecf0a5a38a83afeb3dc2effd8ca3d52eb2e07ec000334663d493055b'; \
;; \
's390x') \
url='https://github.com/docker/compose/releases/download/v2.20.2/docker-compose-linux-s390x'; \
sha256='297be6a0ece070ae95d5caf91a23b89dc1b2563e928db80eee480d7018919ee6'; \
;; \
*) echo >&2 "warning: unsupported 'docker-compose' architecture ($UNAME_ARC); skipping"; exit 0 ;; \
esac; \
\
wget -O 'docker-compose' "$url"; \
echo "$sha256 *"'docker-compose' | sha256sum -c -; \
\
plugin='/usr/local/libexec/docker/cli-plugins/docker-compose'; \
mkdir -p "$(dirname "$plugin")"; \
mv -vT 'docker-compose' "$plugin"; \
chmod +x "$plugin"; \
\
ln -sv "$plugin" /usr/local/bin/; \
docker-compose --version; \
docker compose version

COPY modprobe.sh /usr/local/bin/modprobe

# https://github.com/docker/docker/blob/master/project/PACKAGERS.md#runtime-dependencies
RUN apt-get install -y \
btrfs-progs \
e2fsprogs \
iptables \
openssl \
xfsprogs \
# pigz: https://github.com/moby/moby/pull/35697 (faster gzip implementation)
pigz
python3-pip

# TODO aufs-tools
# Install TinyGo
ARG TINYGO_VERSION="0.30.0"
RUN wget "https://github.com/tinygo-org/tinygo/releases/download/v${TINYGO_VERSION}/tinygo_${TINYGO_VERSION}_${TARGETARCH}.deb" && \
dpkg -i "tinygo_${TINYGO_VERSION}_${TARGETARCH}.deb"

# set up subuid/subgid so that "--userns-remap=default" works out-of-the-box
RUN set -eux; \
useradd -U -m -u 1001 dockremap
# Install Spin
ARG SPIN_VERSION="v1.5.0"
ENV PATH="$PATH:/usr/local/spin"
RUN mkdir -p /usr/local/spin && \
cd /usr/local/spin && \
curl -fsSL https://developer.fermyon.com/downloads/install.sh | bash -s -- -v $SPIN_VERSION

RUN set -eux; \
\
UNAME_ARC="$(uname -m)"; \
case "$UNAME_ARC" in \
'x86_64') \
url='https://download.docker.com/linux/static/stable/x86_64/docker-24.0.5.tgz'; \
;; \
'armhf') \
url='https://download.docker.com/linux/static/stable/armel/docker-24.0.5.tgz'; \
;; \
'armv7') \
url='https://download.docker.com/linux/static/stable/armhf/docker-24.0.5.tgz'; \
;; \
'aarch64') \
url='https://download.docker.com/linux/static/stable/aarch64/docker-24.0.5.tgz'; \
;; \
*) echo >&2 "error: unsupported 'docker.tgz' architecture ($UNAME_ARC)"; exit 1 ;; \
esac; \
\
wget -O 'docker.tgz' "$url"; \
\
tar --extract \
--file docker.tgz \
--strip-components 1 \
--directory /usr/local/bin/ \
--no-same-owner \
# we exclude the CLI binary because we already extracted that over in the "docker:24-cli" image that we're FROM and we don't want to duplicate those bytes again in this layer
--exclude 'docker/docker' \
; \
rm docker.tgz; \
\
dockerd --version; \
containerd --version; \
ctr --version; \
runc --version
# Set the current user before spin install for plugins/templates
USER $USERNAME

# https://github.com/docker/docker/tree/master/hack/dind
ENV DIND_COMMIT d58df1fc6c866447ce2cd129af10e5b507705624

RUN set -eux; \
wget -O /usr/local/bin/dind "https://raw.githubusercontent.com/docker/docker/${DIND_COMMIT}/hack/dind"; \
chmod +x /usr/local/bin/dind

VOLUME /var/lib/docker
EXPOSE 2375 2376


# https://github.com/docker-library/docker/pull/166
# dockerd-entrypoint.sh uses DOCKER_TLS_CERTDIR for auto-generating TLS certificates
# docker-entrypoint.sh uses DOCKER_TLS_CERTDIR for auto-setting DOCKER_TLS_VERIFY and DOCKER_CERT_PATH
# (For this to work, at least the "client" subdirectory of this path needs to be shared between the client and server containers via a volume, "docker cp", or other means of data sharing.)
ENV DOCKER_TLS_CERTDIR=/certs
# also, ensure the directory pre-exists and has wide enough permissions for "dockerd-entrypoint.sh" to create subdirectories, even when run in "rootless" mode
RUN mkdir /certs /certs/client && chmod 1777 /certs /certs/client
# (doing both /certs and /certs/client so that if Docker does a "copy-up" into a volume defined on /certs/client, it will "do the right thing" by default in a way that still works for rootless users)


RUN apt-get install -y iproute2 fuse-overlayfs

# "/run/user/UID" will be used by default as the value of XDG_RUNTIME_DIR
RUN mkdir -p /run/user && chmod 1777 /run/user

# create a default user preconfigured for running rootless dockerd
RUN set -eux; \
useradd -U -m -u 1000 rootless

RUN set -eux; \
\
UNAME_ARC="$(uname -m)"; \
case "$UNAME_ARC" in \
'x86_64') \
url='https://download.docker.com/linux/static/stable/x86_64/docker-rootless-extras-24.0.5.tgz'; \
;; \
'aarch64') \
url='https://download.docker.com/linux/static/stable/aarch64/docker-rootless-extras-24.0.5.tgz'; \
;; \
*) echo >&2 "error: unsupported 'rootless.tgz' architecture ($UNAME_ARC)"; exit 1 ;; \
esac; \
\
wget -O 'rootless.tgz' "$url"; \
\
tar --extract \
--file rootless.tgz \
--strip-components 1 \
--directory /usr/local/bin/ \
'docker-rootless-extras/rootlesskit' \
'docker-rootless-extras/rootlesskit-docker-proxy' \
'docker-rootless-extras/vpnkit' \
; \
rm rootless.tgz; \
\
rootlesskit --version; \
vpnkit --version

# pre-create "/var/lib/docker" for our rootless user
RUN set -eux; \
mkdir -p /home/rootless/.local/share/docker; \
chown -R rootless:rootless /home/rootless/.local/share/docker
VOLUME /home/rootless/.local/share/docker
USER root
# Install Rust
ENV PATH="$PATH:/home/$USERNAME/.cargo/bin"
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | bash -s -- \
-y --target wasm32-wasi

# Install Spin Plugins & Templates
RUN spin plugins update && \
spin plugins install check-for-update -y && \
spin plugins install cloud -y && \
spin plugins install js2wasm -y && \
spin plugins install py2wasm -y && \
spin templates install --upgrade --git https://github.com/fermyon/spin && \
spin templates install --upgrade --git https://github.com/fermyon/spin-js-sdk && \
spin templates install --upgrade --git https://github.com/fermyon/spin-python-sdk

# Source the labs-cli.sh for the default shell
RUN echo ". /workspaces/spin-fundamentals/labs/labs-cli.sh" >> $HOME/.zshenv
65 changes: 28 additions & 37 deletions .devcontainer/devcontainer.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,41 +1,32 @@
// For format details, see https://aka.ms/devcontainer.json. For config options, see the
// README at: https://github.com/devcontainers/templates/tree/main/src/ubuntu
{
"name": "Fermyon Spin",
"name": "Spin Fundamentals",
// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
//"image": "ghcr.io/fermyon/workshops/dev-container:20230610-183549-gf41b5aa",
"build": {
"dockerfile": "Dockerfile"
},
// "image": "mcr.microsoft.com/devcontainers/base:jammy",
"build": {
"dockerfile": "Dockerfile",
"context": "."
},

// Most features are built into the Dockerfile for startup time reduction. For more information, see
"features": {},

// Configure tool-specific properties.
"customizations": {
"vscode": {
"extensions": [
"rust-lang.rust-analyzer",
"golang.Go",
"ms-dotnettools.vscode-dotnet-runtime",
"ms-dotnettools.csharp",
"alexcvzz.vscode-sqlite",
"qwtel.sqlite-viewer"
]
},
// Use 'mounts' to make the cargo cache persistent in a Docker Volume.
// "mounts": [
// {
// "source": "devcontainer-cargo-cache-${devcontainerId}",
// "target": "/usr/local/cargo",
// "type": "volume"
// }
// ]
// Use 'forwardPorts' to make a list of ports inside the container available locally.
"forwardPorts": [
3000,
3001,
3002,
3003
]
// Use 'postCreateCommand' to run commands after the container is created.
// "postCreateCommand": "rustc --version",
// Configure tool-specific properties.
// "customizations": {},
// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
// "remoteUser": "root"
}
"vscode": {
"settings": {
"terminal.integrated.defaultProfile.linux": "zsh",
"terminal.integrated.profiles.linux": {
"zsh": {
"path": "/usr/bin/zsh",
"icon": "terminal-linux"
}
}
}
}
},

// Uncomment to connect as root instead. More info: https://aka.ms/dev-containers-non-root.
"remoteUser": "vscode"
}
Loading