mirror of
https://github.com/zkldi/Tachi.git
synced 2026-09-25 08:27:59 +03:00
misakii
ef87b6430e
When the host project directory is mounted, Docker overwrites the image’s filesystem permissions, leaving the workspace owned by root instead of tachi. By moving the chown into the container startup (via ENTRYPOINT), permissions are corrected after the volume is mounted, restoring write access for the non-root user.
63 lines
2.2 KiB
Docker
63 lines
2.2 KiB
Docker
# For use via `devcontainer.json`. The docker-compose-dev file sets some other
|
|
# important variables.
|
|
|
|
FROM debian:13
|
|
|
|
WORKDIR /tachi
|
|
|
|
RUN DEBIAN_FRONTEND=noninteractive apt-get update \
|
|
&& apt-get upgrade -y \
|
|
&& apt-get install -y \
|
|
# essentials
|
|
git npm locales sudo \
|
|
# docs pythonisms
|
|
python-is-python3 pip mkdocs mkdocs-material \
|
|
# nice to haves
|
|
gh fish just fzf curl wget parallel neovim fd-find bat \
|
|
# uninstall lynx so people don't get a CLI browser that can't load anything when they do `gh auth login`
|
|
&& apt-get purge -y lynx
|
|
|
|
# so apt doesn't complain about the lack of a dialog-like program
|
|
ENV DEBIAN_FRONTEND=readline
|
|
|
|
# `fd` is called `fdfind` on debian. Awesome.
|
|
RUN ln -s $(which fdfind) /usr/bin/fd
|
|
|
|
# setup locales
|
|
# https://stackoverflow.com/questions/28405902/how-to-set-the-locale-inside-a-debian-ubuntu-docker-container
|
|
RUN echo 'en_US.UTF-8 UTF-8' > /etc/locale.gen && locale-gen
|
|
ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
|
|
|
|
# nodeisms
|
|
RUN npm install --silent -g pnpm@8.15.6
|
|
|
|
# https://github.com/python-babel/babel/issues/990
|
|
# it wouldn't be python without needing absurd global state manipulation to fix
|
|
# an incoherent error message
|
|
RUN rm -f /etc/localtime && ln -s /usr/share/zoneinfo/Etc/UTC /etc/localtime
|
|
|
|
# Fix locale issue perl repeatedly complains about
|
|
RUN echo "LC_ALL=en_US.UTF-8\nLANG=en_US.UTF-8" > /etc/default/locale
|
|
|
|
# create tachi user and give them sudo
|
|
RUN addgroup --gid 1000 tachi \
|
|
&& adduser --disabled-password --uid 1000 --gid 1000 --home /home/tachi tachi \
|
|
&& echo "tachi ALL=(ALL:ALL) NOPASSWD: ALL" >> /etc/sudoers
|
|
|
|
# Make the /tachi working directory owned by our user instead of root. Docker volumes
|
|
# are mounted as root UNLESS the folder already exists inside the host and has non-root
|
|
# ownership. This is the only way to declare a volume in docker has non-root ownership.
|
|
# Unbelievably obscure.
|
|
RUN chown -R tachi:tachi /tachi
|
|
|
|
USER tachi
|
|
|
|
# see above comment about non-root volumes
|
|
RUN mkdir node_modules .pnpm-store
|
|
|
|
# make pnpm be quiet about new versions
|
|
RUN echo "update-notifier=false" >> /home/tachi/.npmrc
|
|
|
|
# keep container alive indefinitely
|
|
ENTRYPOINT ["sh", "-c", "sudo chown -R tachi:tachi /tachi && exec /bin/fish"]
|