Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 36 additions & 0 deletions .devcontainer/devcontainer.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
{
"name": "Kernel Devcontainer",
"image": "mcr.microsoft.com/devcontainers/base:ubuntu",
"features": {
"ghcr.io/devcontainers/features/docker-in-docker:2": {},
"ghcr.io/devcontainers/features/go:1": {},
"ghcr.io/devcontainers/features/node:1": {
"nodeGypDependencies": false,
"version": "latest"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Low Logic

Using "latest" for Node.js version can lead to inconsistent development environments across team members and over time. Consider pinning to a specific version or LTS version for reproducible builds.
Agent: 🤖 General

}
},
"onCreateCommand": "sudo apt-get -y update && sudo apt-get -y install ca-certificates curl gnupg lsb-release && sudo mkdir -p /etc/apt/keyrings && curl -fsSL https://deb.pkg.kraftkit.sh/gpg.key | sudo gpg --dearmor -o /etc/apt/keyrings/unikraft.gpg && echo \"deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/unikraft.gpg] https://deb.pkg.kraftkit.sh /\" | sudo tee /etc/apt/sources.list.d/unikraft.list >/dev/null && sudo apt-get -y update && sudo apt-get -y install kraftkit && sudo apt-get -y upgrade",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Medium Security

The onCreateCommand downloads and installs kraftkit from an external source without checksum verification. Consider verifying the GPG key fingerprint and using a specific version of kraftkit to ensure reproducible and secure builds. The current approach trusts the GPG key from the URL without verification.
Agent: 🤖 General

"forwardPorts": [
444,
8080,
9222
],
"portsAttributes": {
"444": {
"label": "Kernel Images API",
"onAutoForward": "notify"
},
"8080": {
"label": "Web Interface (Neko WebRTC UI)",
"onAutoForward": "notify"
},
"9222": {
"label": "CDP (ncat Chromium)",
"onAutoForward": "notify"
}
},
// WebRTC UDP ports
"appPort": [
"56000-56100:56000-56100/udp"
]
}
Loading