-
Couldn't load subscription status.
- Fork 31
Add devcontainer configuration for development #65
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| { | ||
| "name": "Kernel Devcontainer", | ||
| "image": "mcr.microsoft.com/devcontainers/base:ubuntu", | ||
| "features": { | ||
| "ghcr.io/devcontainers/features/docker-in-docker:2": {}, | ||
| "ghcr.io/devcontainers/features/go:1": {}, | ||
| "ghcr.io/devcontainers/features/node:1": { | ||
| "nodeGypDependencies": false, | ||
| "version": "latest" | ||
| } | ||
| }, | ||
| "onCreateCommand": "sudo apt-get -y update && sudo apt-get -y install ca-certificates curl gnupg lsb-release && sudo mkdir -p /etc/apt/keyrings && curl -fsSL https://deb.pkg.kraftkit.sh/gpg.key | sudo gpg --dearmor -o /etc/apt/keyrings/unikraft.gpg && echo \"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/unikraft.gpg] https://deb.pkg.kraftkit.sh /\" | sudo tee /etc/apt/sources.list.d/unikraft.list >/dev/null && sudo apt-get -y update && sudo apt-get -y install kraftkit && sudo apt-get -y upgrade", | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. The onCreateCommand downloads and installs kraftkit from an external source without checksum verification. Consider verifying the GPG key fingerprint and using a specific version of kraftkit to ensure reproducible and secure builds. The current approach trusts the GPG key from the URL without verification. |
||
| "forwardPorts": [ | ||
| 444, | ||
| 8080, | ||
| 9222 | ||
| ], | ||
| "portsAttributes": { | ||
| "444": { | ||
| "label": "Kernel Images API", | ||
| "onAutoForward": "notify" | ||
| }, | ||
| "8080": { | ||
| "label": "Web Interface (Neko WebRTC UI)", | ||
| "onAutoForward": "notify" | ||
| }, | ||
| "9222": { | ||
| "label": "CDP (ncat Chromium)", | ||
| "onAutoForward": "notify" | ||
| } | ||
| }, | ||
| // WebRTC UDP ports | ||
| "appPort": [ | ||
| "56000-56100:56000-56100/udp" | ||
| ] | ||
| } | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Using "latest" for Node.js version can lead to inconsistent development environments across team members and over time. Consider pinning to a specific version or LTS version for reproducible builds.
Agent: 🤖 General