diff --git a/.editorconfig b/.editorconfig old mode 100755 new mode 100644 diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md old mode 100755 new mode 100644 diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml old mode 100755 new mode 100644 diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml old mode 100755 new mode 100644 diff --git a/.github/ISSUE_TEMPLATE/issue.bug.yml b/.github/ISSUE_TEMPLATE/issue.bug.yml old mode 100755 new mode 100644 diff --git a/.github/ISSUE_TEMPLATE/issue.feature.yml b/.github/ISSUE_TEMPLATE/issue.feature.yml old mode 100755 new mode 100644 diff --git a/.github/workflows/call_issue_pr_tracker.yml b/.github/workflows/call_issue_pr_tracker.yml old mode 100755 new mode 100644 index 2c307843..d07cf121 --- a/.github/workflows/call_issue_pr_tracker.yml +++ b/.github/workflows/call_issue_pr_tracker.yml @@ -8,6 +8,9 @@ on: pull_request_review: types: [submitted,edited,dismissed] +permissions: + contents: read + jobs: manage-project: permissions: diff --git a/.github/workflows/call_issues_cron.yml b/.github/workflows/call_issues_cron.yml old mode 100755 new mode 100644 index 5d333fa9..2031b772 --- a/.github/workflows/call_issues_cron.yml +++ b/.github/workflows/call_issues_cron.yml @@ -4,6 +4,9 @@ on: - cron: '31 1 * * *' workflow_dispatch: +permissions: + contents: read + jobs: stale: permissions: diff --git a/.github/workflows/external_trigger.yml b/.github/workflows/external_trigger.yml index 128ffd0b..c62e1beb 100644 --- a/.github/workflows/external_trigger.yml +++ b/.github/workflows/external_trigger.yml @@ -3,6 +3,9 @@ name: External Trigger Main on: workflow_dispatch: +permissions: + contents: read + jobs: external-trigger-master: runs-on: ubuntu-latest @@ -43,8 +46,8 @@ jobs: "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} exit 1 fi - EXT_RELEASE=$(echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g') - echo "External version: \`${EXT_RELEASE}\`" >> $GITHUB_STEP_SUMMARY + EXT_RELEASE_SANITIZED=$(echo ${EXT_RELEASE} | sed 's/[~,%@+;:/]//g') + echo "Sanitized external version: \`${EXT_RELEASE_SANITIZED}\`" >> $GITHUB_STEP_SUMMARY echo "Retrieving last pushed version" >> $GITHUB_STEP_SUMMARY image="linuxserver/code-server" tag="latest" @@ -100,8 +103,8 @@ jobs: exit 1 fi echo "Last pushed version: \`${IMAGE_VERSION}\`" >> $GITHUB_STEP_SUMMARY - if [ "${EXT_RELEASE}" == "${IMAGE_VERSION}" ]; then - echo "Version \`${EXT_RELEASE}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY + if [ "${EXT_RELEASE_SANITIZED}" == "${IMAGE_VERSION}" ]; then + echo "Sanitized version \`${EXT_RELEASE_SANITIZED}\` already pushed, exiting" >> $GITHUB_STEP_SUMMARY exit 0 elif [ $(curl -s https://ci.linuxserver.io/job/Docker-Pipeline-Builders/job/docker-code-server/job/master/lastBuild/api/json | jq -r '.building') == "true" ]; then echo "New version \`${EXT_RELEASE}\` found; but there already seems to be an active build on Jenkins; exiting" >> $GITHUB_STEP_SUMMARY @@ -116,7 +119,7 @@ jobs: "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} else printf "\n## Trigger new build\n\n" >> $GITHUB_STEP_SUMMARY - echo "New version \`${EXT_RELEASE}\` found; old version was \`${IMAGE_VERSION}\`. Triggering new build" >> $GITHUB_STEP_SUMMARY + echo "New sanitized version \`${EXT_RELEASE_SANITIZED}\` found; old version was \`${IMAGE_VERSION}\`. Triggering new build" >> $GITHUB_STEP_SUMMARY if [[ "${artifacts_found}" == "true" ]]; then echo "All artifacts seem to be uploaded." >> $GITHUB_STEP_SUMMARY fi @@ -136,7 +139,7 @@ jobs: --data-urlencode "description=GHA external trigger https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}" \ --data-urlencode "Submit=Submit" echo "**** Notifying Discord ****" - TRIGGER_REASON="A version change was detected for code-server tag latest. Old version:${IMAGE_VERSION} New version:${EXT_RELEASE}" + TRIGGER_REASON="A version change was detected for code-server tag latest. Old version:${IMAGE_VERSION} New version:${EXT_RELEASE_SANITIZED}" curl -X POST -H "Content-Type: application/json" --data '{"avatar_url": "https://cdn.discordapp.com/avatars/354986384542662657/df91181b3f1cf0ef1592fbe18e0962d7.png","embeds": [{"color": 9802903, "description": "**Build Triggered** \n**Reason:** '"${TRIGGER_REASON}"' \n**Build URL:** '"${buildurl}display/redirect"' \n"}], "username": "Github Actions"}' ${{ secrets.DISCORD_WEBHOOK }} diff --git a/.github/workflows/external_trigger_scheduler.yml b/.github/workflows/external_trigger_scheduler.yml index 38bb794a..94943e5a 100644 --- a/.github/workflows/external_trigger_scheduler.yml +++ b/.github/workflows/external_trigger_scheduler.yml @@ -5,6 +5,9 @@ on: - cron: '32 * * * *' workflow_dispatch: +permissions: + contents: read + jobs: external-trigger-scheduler: runs-on: ubuntu-latest diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml old mode 100755 new mode 100644 index c071b7fe..f63a55e8 --- a/.github/workflows/greetings.yml +++ b/.github/workflows/greetings.yml @@ -2,8 +2,14 @@ name: Greetings on: [pull_request_target, issues] +permissions: + contents: read + jobs: greeting: + permissions: + issues: write + pull-requests: write runs-on: ubuntu-latest steps: - uses: actions/first-interaction@v1 diff --git a/.github/workflows/package_trigger_scheduler.yml b/.github/workflows/package_trigger_scheduler.yml index 9100e7ca..d0982556 100644 --- a/.github/workflows/package_trigger_scheduler.yml +++ b/.github/workflows/package_trigger_scheduler.yml @@ -5,6 +5,9 @@ on: - cron: '0 20 * * 6' workflow_dispatch: +permissions: + contents: read + jobs: package-trigger-scheduler: runs-on: ubuntu-latest diff --git a/.github/workflows/permissions.yml b/.github/workflows/permissions.yml old mode 100755 new mode 100644 diff --git a/Jenkinsfile b/Jenkinsfile index ff3e8445..e49fc044 100644 --- a/Jenkinsfile +++ b/Jenkinsfile @@ -94,7 +94,11 @@ pipeline { env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DOCKERHUB_IMAGE + '/tags/' env.PULL_REQUEST = env.CHANGE_ID env.TEMPLATED_FILES = 'Jenkinsfile README.md LICENSE .editorconfig ./.github/CONTRIBUTING.md ./.github/FUNDING.yml ./.github/ISSUE_TEMPLATE/config.yml ./.github/ISSUE_TEMPLATE/issue.bug.yml ./.github/ISSUE_TEMPLATE/issue.feature.yml ./.github/PULL_REQUEST_TEMPLATE.md ./.github/workflows/external_trigger_scheduler.yml ./.github/workflows/greetings.yml ./.github/workflows/package_trigger_scheduler.yml ./.github/workflows/call_issue_pr_tracker.yml ./.github/workflows/call_issues_cron.yml ./.github/workflows/permissions.yml ./.github/workflows/external_trigger.yml' + if ( env.SYFT_IMAGE_TAG == null ) { + env.SYFT_IMAGE_TAG = 'latest' + } } + echo "Using syft image tag ${SYFT_IMAGE_TAG}" sh '''#! /bin/bash echo "The default github branch detected as ${GH_DEFAULT_BRANCH}" ''' script{ @@ -204,6 +208,7 @@ pipeline { env.META_TAG = env.EXT_RELEASE_CLEAN + '-ls' + env.LS_TAG_NUMBER env.EXT_RELEASE_TAG = 'version-' + env.EXT_RELEASE_CLEAN env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'latest' } } } @@ -229,6 +234,7 @@ pipeline { env.EXT_RELEASE_TAG = 'version-' + env.EXT_RELEASE_CLEAN env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.DEV_DOCKERHUB_IMAGE + '/tags/' env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'develop' } } } @@ -254,6 +260,7 @@ pipeline { env.CODE_URL = 'https://github.com/' + env.LS_USER + '/' + env.LS_REPO + '/pull/' + env.PULL_REQUEST env.DOCKERHUB_LINK = 'https://hub.docker.com/r/' + env.PR_DOCKERHUB_IMAGE + '/tags/' env.BUILDCACHE = 'docker.io/lsiodev/buildcache,registry.gitlab.com/linuxserver.io/docker-jenkins-builder/lsiodev-buildcache,ghcr.io/linuxserver/lsiodev-buildcache,quay.io/linuxserver.io/lsiodev-buildcache' + env.CITEST_IMAGETAG = 'develop' } } } @@ -276,7 +283,7 @@ pipeline { -v ${WORKSPACE}:/mnt \ -e AWS_ACCESS_KEY_ID=\"${S3_KEY}\" \ -e AWS_SECRET_ACCESS_KEY=\"${S3_SECRET}\" \ - ghcr.io/linuxserver/baseimage-alpine:3.20 s6-envdir -fn -- /var/run/s6/container_environment /bin/bash -c "\ + ghcr.io/linuxserver/baseimage-alpine:3.23 s6-envdir -fn -- /var/run/s6/container_environment /bin/bash -c "\ apk add --no-cache python3 && \ python3 -m venv /lsiopy && \ pip install --no-cache-dir -U pip && \ @@ -611,13 +618,16 @@ pipeline { echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin + if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids IFS=',' read -ra CACHE <<< "$BUILDCACHE" for i in "${CACHE[@]}"; do docker push ${i}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" done - for p in $(jobs -p); do - wait "$p" || { echo "job $p failed" >&2; exit 1; } + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } done fi ''' @@ -677,13 +687,16 @@ pipeline { echo $GITHUB_TOKEN | docker login ghcr.io -u LinuxServer-CI --password-stdin echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin + if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids IFS=',' read -ra CACHE <<< "$BUILDCACHE" for i in "${CACHE[@]}"; do docker push ${i}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" done - for p in $(jobs -p); do - wait "$p" || { echo "job $p failed" >&2; exit 1; } + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } done fi ''' @@ -737,12 +750,14 @@ pipeline { echo $GITLAB_TOKEN | docker login registry.gitlab.com -u LinuxServer.io --password-stdin echo $QUAYPASS | docker login quay.io -u $QUAYUSER --password-stdin if [[ "${PACKAGE_CHECK}" != "true" ]]; then + declare -A pids IFS=',' read -ra CACHE <<< "$BUILDCACHE" for i in "${CACHE[@]}"; do docker push ${i}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} & + pids[$!]="$i" done - for p in $(jobs -p); do - wait "$p" || { echo "job $p failed" >&2; exit 1; } + for p in "${!pids[@]}"; do + wait "$p" || { [[ "${pids[$p]}" != *"quay.io"* ]] && exit 1; } done fi ''' @@ -780,7 +795,7 @@ pipeline { docker run --rm \ -v /var/run/docker.sock:/var/run/docker.sock:ro \ -v ${TEMPDIR}:/tmp \ - ghcr.io/anchore/syft:latest \ + ghcr.io/anchore/syft:${SYFT_IMAGE_TAG} \ ${LOCAL_CONTAINER} -o table=/tmp/package_versions.txt NEW_PACKAGE_TAG=$(md5sum ${TEMPDIR}/package_versions.txt | cut -c1-8 ) echo "Package tag sha from current packages in buit container is ${NEW_PACKAGE_TAG} comparing to old ${PACKAGE_TAG} from github" @@ -867,7 +882,7 @@ pipeline { CI_DOCKERENV="LSIO_FIRST_PARTY=true" fi fi - docker pull ghcr.io/linuxserver/ci:latest + docker pull ghcr.io/linuxserver/ci:${CITEST_IMAGETAG} if [ "${MULTIARCH}" == "true" ]; then docker pull ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} --platform=arm64 docker tag ghcr.io/linuxserver/lsiodev-buildcache:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} ${IMAGE}:arm64v8-${META_TAG} @@ -890,7 +905,10 @@ pipeline { -e WEB_AUTH=\"${CI_AUTH}\" \ -e WEB_PATH=\"${CI_WEBPATH}\" \ -e NODE_NAME=\"${NODE_NAME}\" \ - -t ghcr.io/linuxserver/ci:latest \ + -e SYFT_IMAGE_TAG=\"${CI_SYFT_IMAGE_TAG:-${SYFT_IMAGE_TAG}}\" \ + -e COMMIT_SHA=\"${COMMIT_SHA}\" \ + -e BUILD_NUMBER=\"${BUILD_NUMBER}\" \ + -t ghcr.io/linuxserver/ci:${CITEST_IMAGETAG} \ python3 test_build.py''' } } @@ -916,9 +934,11 @@ pipeline { CACHEIMAGE=${i} fi done - docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${META_TAG} -t ${PUSHIMAGE}:latest -t ${PUSHIMAGE}:${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${META_TAG} -t ${PUSHIMAGE}:latest -t ${PUSHIMAGE}:${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${PUSHIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } if [ -n "${SEMVER}" ]; then - docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${PUSHIMAGE}:${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${PUSHIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } fi done ''' @@ -943,20 +963,27 @@ pipeline { CACHEIMAGE=${i} fi done - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${META_TAG} -t ${MANIFESTIMAGE}:amd64-latest -t ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${META_TAG} -t ${MANIFESTIMAGE}:arm64v8-latest -t ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${META_TAG} -t ${MANIFESTIMAGE}:amd64-latest -t ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${META_TAG} -t ${MANIFESTIMAGE}:arm64v8-latest -t ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } if [ -n "${SEMVER}" ]; then - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} - docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${SEMVER} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:amd64-${SEMVER} ${CACHEIMAGE}:amd64-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create --prefer-index=false -t ${MANIFESTIMAGE}:arm64v8-${SEMVER} ${CACHEIMAGE}:arm64v8-${COMMIT_SHA}-${BUILD_NUMBER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } fi done for MANIFESTIMAGE in "${IMAGE}" "${GITLABIMAGE}" "${GITHUBIMAGE}" "${QUAYIMAGE}"; do - docker buildx imagetools create -t ${MANIFESTIMAGE}:latest ${MANIFESTIMAGE}:amd64-latest ${MANIFESTIMAGE}:arm64v8-latest - docker buildx imagetools create -t ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} - - docker buildx imagetools create -t ${MANIFESTIMAGE}:${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} + docker buildx imagetools create -t ${MANIFESTIMAGE}:latest ${MANIFESTIMAGE}:amd64-latest ${MANIFESTIMAGE}:arm64v8-latest || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create -t ${MANIFESTIMAGE}:${META_TAG} ${MANIFESTIMAGE}:amd64-${META_TAG} ${MANIFESTIMAGE}:arm64v8-${META_TAG} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } + docker buildx imagetools create -t ${MANIFESTIMAGE}:${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:amd64-${EXT_RELEASE_TAG} ${MANIFESTIMAGE}:arm64v8-${EXT_RELEASE_TAG} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } if [ -n "${SEMVER}" ]; then - docker buildx imagetools create -t ${MANIFESTIMAGE}:${SEMVER} ${MANIFESTIMAGE}:amd64-${SEMVER} ${MANIFESTIMAGE}:arm64v8-${SEMVER} + docker buildx imagetools create -t ${MANIFESTIMAGE}:${SEMVER} ${MANIFESTIMAGE}:amd64-${SEMVER} ${MANIFESTIMAGE}:arm64v8-${SEMVER} || \ + { if [[ "${MANIFESTIMAGE}" != "${QUAYIMAGE}" ]]; then exit 1; fi; } fi done ''' @@ -974,23 +1001,41 @@ pipeline { environment name: 'EXIT_STATUS', value: '' } steps { - echo "Pushing New tag for current commit ${META_TAG}" - sh '''curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/git/tags \ - -d '{"tag":"'${META_TAG}'",\ - "object": "'${COMMIT_SHA}'",\ - "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to master",\ - "type": "commit",\ - "tagger": {"name": "LinuxServer-CI","email": "ci@linuxserver.io","date": "'${GITHUB_DATE}'"}}' ''' - echo "Pushing New release for Tag" sh '''#! /bin/bash + echo "Auto-generating release notes" + if [ "$(git tag --points-at HEAD)" != "" ]; then + echo "Existing tag points to current commit, suggesting no new LS changes" + AUTO_RELEASE_NOTES="No changes" + else + AUTO_RELEASE_NOTES=$(curl -fsL -H "Authorization: token ${GITHUB_TOKEN}" -H "Accept: application/vnd.github+json" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases/generate-notes \ + -d '{"tag_name":"'${META_TAG}'",\ + "target_commitish": "master"}' \ + | jq -r '.body' | sed 's|## What.s Changed||') + fi + echo "Pushing New tag for current commit ${META_TAG}" + curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/git/tags \ + -d '{"tag":"'${META_TAG}'",\ + "object": "'${COMMIT_SHA}'",\ + "message": "Tagging Release '${EXT_RELEASE_CLEAN}'-ls'${LS_TAG_NUMBER}' to master",\ + "type": "commit",\ + "tagger": {"name": "LinuxServer-CI","email": "ci@linuxserver.io","date": "'${GITHUB_DATE}'"}}' + echo "Pushing New release for Tag" echo "Updating to ${EXT_RELEASE_CLEAN}" > releasebody.json - echo '{"tag_name":"'${META_TAG}'",\ - "target_commitish": "master",\ - "name": "'${META_TAG}'",\ - "body": "**CI Report:**\\n\\n'${CI_URL:-N/A}'\\n\\n**LinuxServer Changes:**\\n\\n'${LS_RELEASE_NOTES}'\\n\\n**Remote Changes:**\\n\\n' > start - printf '","draft": false,"prerelease": false}' >> releasebody.json - paste -d'\\0' start releasebody.json > releasebody.json.done - curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases -d @releasebody.json.done''' + jq -n \ + --arg tag_name "$META_TAG" \ + --arg target_commitish "master" \ + --arg ci_url "${CI_URL:-N/A}" \ + --arg ls_notes "$AUTO_RELEASE_NOTES" \ + --arg remote_notes "$(cat releasebody.json)" \ + '{ + "tag_name": $tag_name, + "target_commitish": $target_commitish, + "name": $tag_name, + "body": ("**CI Report:**\\n\\n" + $ci_url + "\\n\\n**LinuxServer Changes:**\\n\\n" + $ls_notes + "\\n\\n**Remote Changes:**\\n\\n" + $remote_notes), + "draft": false, + "prerelease": false }' > releasebody.json.done + curl -H "Authorization: token ${GITHUB_TOKEN}" -X POST https://api.github.com/repos/${LS_USER}/${LS_REPO}/releases -d @releasebody.json.done + ''' } } // Add protection to the release branch diff --git a/LICENSE b/LICENSE old mode 100755 new mode 100644 diff --git a/README.md b/README.md index d1a5f0f5..45e2782c 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,6 @@ [![Blog](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=Blog)](https://blog.linuxserver.io "all the things you can do with our containers including How-To guides, opinions and much more!") [![Discord](https://img.shields.io/discord/354974912613449730.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Discord&logo=discord)](https://linuxserver.io/discord "realtime support / chat with the community and the team.") [![Discourse](https://img.shields.io/discourse/https/discourse.linuxserver.io/topics.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&logo=discourse)](https://discourse.linuxserver.io "post on our community forum.") -[![Fleet](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=Fleet)](https://fleet.linuxserver.io "an online web interface which displays all of our maintained images.") [![GitHub](https://img.shields.io/static/v1.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=linuxserver.io&message=GitHub&logo=github)](https://github.com/linuxserver "view the source for all of our repositories.") [![Open Collective](https://img.shields.io/opencollective/all/linuxserver.svg?color=94398d&labelColor=555555&logoColor=ffffff&style=for-the-badge&label=Supporters&logo=open%20collective)](https://opencollective.com/linuxserver "please consider helping us by either donating or contributing to our budget") @@ -22,7 +21,6 @@ Find us at: * [Blog](https://blog.linuxserver.io) - all the things you can do with our containers including How-To guides, opinions and much more! * [Discord](https://linuxserver.io/discord) - realtime support / chat with the community and the team. * [Discourse](https://discourse.linuxserver.io) - post on our community forum. -* [Fleet](https://fleet.linuxserver.io) - an online web interface which displays all of our maintained images. * [GitHub](https://github.com/linuxserver) - view the source for all of our repositories. * [Open Collective](https://opencollective.com/linuxserver) - please consider helping us by either donating or contributing to our budget @@ -61,7 +59,6 @@ The architectures supported by this image are: | :----: | :----: | ---- | | x86-64 | ✅ | amd64-\ | | arm64 | ✅ | arm64v8-\ | -| armhf | ❌ | | ## Application Setup @@ -78,12 +75,29 @@ git config --global user.email "email address" How to create the [hashed password](https://github.com/cdr/code-server/blob/master/docs/FAQ.md#can-i-store-my-password-hashed). +## Read-Only Operation + +This image can be run with a read-only container filesystem. For details please [read the docs](https://docs.linuxserver.io/misc/read-only/). + +### Caveats + +* `/tmp` must be mounted to tmpfs +* `sudo` will not be available + +## Non-Root Operation + +This image can be run with a non-root user. For details please [read the docs](https://docs.linuxserver.io/misc/non-root/). + +### Caveats + +* `sudo` will not be available + ## Usage To help you get started creating a container from this image you can either use docker-compose or the docker cli. >[!NOTE] ->Unless a parameter is flaged as 'optional', it is *mandatory* and a value must be provided. +>Unless a parameter is flagged as 'optional', it is *mandatory* and a value must be provided. ### docker-compose (recommended, [click here for more info](https://docs.linuxserver.io/general/docker-compose)) @@ -103,6 +117,7 @@ services: - SUDO_PASSWORD_HASH= #optional - PROXY_DOMAIN=code-server.my.domain #optional - DEFAULT_WORKSPACE=/config/workspace #optional + - PWA_APPNAME=code-server #optional volumes: - /path/to/code-server/config:/config ports: @@ -124,6 +139,7 @@ docker run -d \ -e SUDO_PASSWORD_HASH= `#optional` \ -e PROXY_DOMAIN=code-server.my.domain `#optional` \ -e DEFAULT_WORKSPACE=/config/workspace `#optional` \ + -e PWA_APPNAME=code-server `#optional` \ -p 8443:8443 \ -v /path/to/code-server/config:/config \ --restart unless-stopped \ @@ -146,7 +162,10 @@ Containers are configured using parameters passed at runtime (such as those abov | `-e SUDO_PASSWORD_HASH=` | Optionally set sudo password via hash (takes priority over `SUDO_PASSWORD` var). Format is `$type$salt$hashed`. | | `-e PROXY_DOMAIN=code-server.my.domain` | If this optional variable is set, this domain will be proxied for subdomain proxying. See [Documentation](https://github.com/coder/code-server/blob/main/docs/guide.md#using-a-subdomain) | | `-e DEFAULT_WORKSPACE=/config/workspace` | If this optional variable is set, code-server will open this directory by default | +| `-e PWA_APPNAME=code-server` | If this optional variable is set, the PWA app will the specified name. | | `-v /config` | Contains all relevant configuration files. | +| `--read-only=true` | Run container with a read-only filesystem. Please [read the docs](https://docs.linuxserver.io/misc/read-only/). | +| `--user=1000:1000` | Run container with a non-root user. Please [read the docs](https://docs.linuxserver.io/misc/non-root/). | ## Environment variables from files (Docker secrets) @@ -310,6 +329,8 @@ Once registered you can define the dockerfile to use with `-f Dockerfile.aarch64 ## Versions +* **10.08.25:** - Let server listen on both ipv4 and ipv6. +* **03.06.25:** - Allow setting PWA name using env var `PWA_APPNAME`. * **13.10.24:** - Only chown config folder when change to ownership or new install is detected. * **09.10.24:** - Manage permissions in /config/.ssh according to file type * **19.08.24:** - Rebase to Ubuntu Noble. diff --git a/package_versions.txt b/package_versions.txt index a95b79b2..a82bafbe 100755 --- a/package_versions.txt +++ b/package_versions.txt @@ -1,573 +1,527 @@ -NAME VERSION TYPE -@babel/runtime 7.27.0 npm -@c4312/eventsource-umd 3.0.5 npm -@coder/logger 3.0.1 npm -@mapbox/node-pre-gyp 1.0.11 npm -@microsoft/1ds-core-js 3.2.13 npm -@microsoft/1ds-post-js 3.2.13 npm -@microsoft/applicationinsights-core-js 2.8.15 npm -@microsoft/applicationinsights-shims 2.0.2 npm -@microsoft/dynamicproto-js 1.1.9 npm -@parcel/watcher 2.5.1 npm -@parcel/watcher-linux-x64-glibc 2.5.1 npm -@parcel/watcher-linux-x64-musl 2.5.1 npm -@phc/format 1.0.0 npm -@tootallnate/once 3.0.0 npm -@tootallnate/quickjs-emscripten 0.23.0 npm -@vscode/deviceid 0.1.1 npm -@vscode/iconv-lite-umd 0.7.0 npm -@vscode/proxy-agent 0.32.0 npm -@vscode/ripgrep 1.15.11 npm -@vscode/spdlog 0.15.1 npm -@vscode/tree-sitter-wasm 0.1.4 npm -@vscode/vscode-languagedetection 1.0.21 npm -@vscode/windows-process-tree 0.6.0 npm -@vscode/windows-registry 1.1.0 npm -@xterm/addon-clipboard 0.2.0-beta.82 npm -@xterm/addon-image 0.9.0-beta.99 npm -@xterm/addon-ligatures 0.10.0-beta.99 npm -@xterm/addon-progress 0.2.0-beta.5 npm -@xterm/addon-search 0.16.0-beta.99 npm -@xterm/addon-serialize 0.14.0-beta.99 npm -@xterm/addon-unicode11 0.9.0-beta.99 npm -@xterm/addon-webgl 0.19.0-beta.99 npm -@xterm/headless 5.6.0-beta.99 npm -@xterm/xterm 5.6.0-beta.99 npm -abbrev 1.1.1 npm -accepts 2.0.0 npm -adduser 3.137ubuntu1 deb -agent-base 6.0.2 npm -agent-base 7.1.1 npm -agent-base 7.1.3 npm (+3 duplicates) -ansi-regex 5.0.1 npm -aproba 2.0.0 npm -apt 2.7.14build2 deb -apt-utils 2.7.14build2 deb -are-we-there-yet 2.0.0 npm -argon2 0.31.2 npm -argparse 2.0.1 npm -ast-types 0.13.4 npm -balanced-match 1.0.2 npm -base-files 13ubuntu10.2 deb -base-passwd 3.6.3build1 deb -base64-js 1.5.1 npm -bash 5.2.21-2ubuntu4 deb -basic-ftp 5.0.5 npm -bat 1.0.0 npm -beep-boop 1.2.3 npm -bindings 1.5.0 npm -bl 4.1.0 npm -body-parser 2.1.0 npm -brace-expansion 1.1.11 npm -braces 3.0.3 npm -bsdutils 1:2.39.3-9ubuntu6.2 deb -buffer 5.7.1 npm -buffer-alloc 1.2.0 npm -buffer-alloc-unsafe 1.1.0 npm -buffer-crc32 0.2.13 npm -buffer-fill 1.0.0 npm -builtin-notebook-renderers 1.0.0 npm -bytes 3.1.2 npm -ca-certificates 20240203 deb -call-bind-apply-helpers 1.0.2 npm -call-bound 1.0.4 npm -catatonit 0.1.7-1 deb -charenc 0.0.2 npm -chownr 1.1.4 npm -chownr 2.0.0 npm -clojure 1.0.0 npm -code-server 1.99.3 npm -code-server 4.99.4 npm -coffeescript 1.0.0 npm -color-support 1.1.3 npm -compressible 2.0.18 npm -compression 1.8.0 npm -concat-map 0.0.1 npm -configuration-editing 1.0.0 npm -console-control-strings 1.1.0 npm -content-disposition 1.0.0 npm -content-type 1.0.5 npm -cookie 0.7.1 npm -cookie 0.7.2 npm (+1 duplicate) -cookie-parser 1.4.7 npm -cookie-signature 1.0.6 npm -cookie-signature 1.2.2 npm -coreutils 9.4-3ubuntu6 deb -cpp 1.0.0 npm -cron 3.0pl1-184ubuntu2 deb -cron-daemon-common 3.0pl1-184ubuntu2 deb -crypt 0.0.2 npm -csharp 1.0.0 npm -css 1.0.0 npm -css-language-features 1.0.0 npm -curl 8.5.0-2ubuntu10.6 deb -dart 1.0.0 npm -dash 0.5.12-6ubuntu5 deb -data-uri-to-buffer 6.0.2 npm -debconf 1.5.86ubuntu1 deb -debianutils 5.17build1 deb -debug 2.6.9 npm -debug 4.3.4 npm -debug 4.3.6 npm -debug 4.4.0 npm -debug-auto-launch 1.0.0 npm -debug-server-ready 1.0.0 npm -decompress-response 6.0.0 npm -deep-extend 0.6.0 npm -degenerator 5.0.1 npm -delegates 1.0.0 npm -depd 2.0.0 npm -destroy 1.2.0 npm -detect-libc 1.0.3 npm -detect-libc 2.0.1 npm -detect-libc 2.0.3 npm -diff 1.0.0 npm -diffutils 1:3.10-1build1 deb -dirmngr 2.4.4-2ubuntu17.2 deb -docker 1.0.0 npm -dpkg 1.22.6ubuntu6.1 deb -dunder-proto 1.0.1 npm -e2fsprogs 1.47.0-2.4~exp1ubuntu4.1 deb -ee-first 1.1.1 npm -emmet 1.0.0 npm -emoji-regex 8.0.0 npm -encodeurl 2.0.0 npm -end-of-stream 1.4.4 npm -env-paths 2.2.1 npm -es-define-property 1.0.1 npm -es-errors 1.3.0 npm -es-object-atoms 1.1.1 npm -es6-promisify 7.0.0 npm -escape-html 1.0.3 npm -escodegen 2.1.0 npm -esprima 4.0.1 npm -estraverse 5.3.0 npm -esutils 2.0.3 npm -etag 1.8.1 npm -eventemitter3 4.0.7 npm -eventsource-parser 3.0.0 npm -expand-template 2.0.3 npm -express 5.0.1 npm -extension-editing 1.0.0 npm -fd-slicer 1.1.0 npm -file-uri-to-path 1.0.0 npm -fill-range 7.1.1 npm -finalhandler 2.1.0 npm -findutils 4.9.0-5build1 deb -follow-redirects 1.15.9 npm -font-finder 1.1.0 npm -font-ligatures 1.4.1 npm -forwarded 0.2.0 npm -fresh 0.5.2 npm -fresh 2.0.0 npm -fs-constants 1.0.0 npm -fs-extra 11.2.0 npm -fs-minipass 2.1.0 npm -fs.realpath 1.0.0 npm -fsharp 1.0.0 npm -function-bind 1.1.2 npm -gauge 3.0.2 npm -gcc-14-base 14.2.0-4ubuntu2~24.04 deb -get-intrinsic 1.3.0 npm -get-proto 1.0.1 npm -get-system-fonts 2.0.2 npm -get-uri 6.0.4 npm -git 1.0.0 npm -git 1:2.43.0-1ubuntu7.2 deb -git-base 1.0.0 npm -git-man 1:2.43.0-1ubuntu7.2 deb -github 0.0.1 npm -github-authentication 0.0.2 npm -github-from-package 0.0.0 npm -glob 7.2.3 npm -gnupg 2.4.4-2ubuntu17.2 deb -gnupg-l10n 2.4.4-2ubuntu17.2 deb -gnupg-utils 2.4.4-2ubuntu17.2 deb -go 1.0.0 npm -gopd 1.2.0 npm -gpg 2.4.4-2ubuntu17.2 deb -gpg-agent 2.4.4-2ubuntu17.2 deb -gpg-wks-client 2.4.4-2ubuntu17.2 deb -gpgconf 2.4.4-2ubuntu17.2 deb -gpgsm 2.4.4-2ubuntu17.2 deb -gpgv 2.4.4-2ubuntu17.2 deb -graceful-fs 4.2.11 npm -grep 3.11-4build1 deb -groovy 1.0.0 npm -grunt 1.0.0 npm -gulp 1.0.0 npm -gzip 1.12-1ubuntu3 deb -handlebars 1.0.0 npm -has-symbols 1.1.0 npm -has-unicode 2.0.1 npm -hasown 2.0.2 npm -hlsl 1.0.0 npm -hostname 3.23+nmu2ubuntu2 deb -html 1.0.0 npm -html-language-features 1.0.0 npm -http-errors 2.0.0 npm -http-proxy 1.18.1 npm -http-proxy-agent 7.0.0 npm -http-proxy-agent 7.0.2 npm -httpolyglot 0.1.2 npm -https-proxy-agent 5.0.1 npm -https-proxy-agent 7.0.2 npm -https-proxy-agent 7.0.6 npm (+1 duplicate) -i18next 23.16.4 npm -iconv-lite 0.5.2 npm -iconv-lite 0.6.3 npm -ieee754 1.2.1 npm -inflight 1.0.6 npm -inherits 2.0.4 npm (+1 duplicate) -ini 1.0.0 npm -ini 1.3.8 npm -init-system-helpers 1.66ubuntu1 deb -ip-address 9.0.5 npm (+1 duplicate) -ipaddr.js 1.9.1 npm -ipynb 1.0.0 npm -is-buffer 1.1.6 npm -is-extglob 2.1.1 npm -is-fullwidth-code-point 3.0.0 npm -is-glob 4.0.3 npm -is-number 7.0.0 npm -is-promise 4.0.0 npm -isexe 2.0.0 npm -jake 1.0.0 npm -java 1.0.0 npm -javascript 1.0.0 npm -jq 1.7.1-3build1 deb -js-base64 3.7.7 npm -js-debug 1.97.1 npm -js-debug-companion 1.1.3 npm -js-yaml 4.1.0 npm -jsbn 1.1.0 npm (+1 duplicate) -jschardet 3.1.4 npm -json 1.0.0 npm -json-language-features 1.0.0 npm -jsonfile 6.1.0 npm -julia 1.0.0 npm -just-performance 4.3.0 npm -kerberos 2.1.1 npm -keyboxd 2.4.4-2ubuntu17.2 deb -krb5-locales 1.20.1-6ubuntu2.5 deb -latex 1.0.0 npm -less 1.0.0 npm -less 590-2ubuntu2.1 deb -libacl1 2.3.2-1build1.1 deb -libapparmor1 4.0.1really4.0.1-0ubuntu0.24.04.4 deb -libapt-pkg6.0t64 2.7.14build2 deb -libassuan0 2.5.6-1build1 deb -libatomic1 14.2.0-4ubuntu2~24.04 deb -libattr1 1:2.5.2-1build1.1 deb -libaudit-common 1:3.1.2-2.1build1.1 deb -libaudit1 1:3.1.2-2.1build1.1 deb -libblkid1 2.39.3-9ubuntu6.2 deb -libbrotli1 1.1.0-2build2 deb -libbsd0 0.12.1-1build1.1 deb -libbz2-1.0 1.0.8-5.1build0.1 deb -libc-bin 2.39-0ubuntu8.4 deb -libc6 2.39-0ubuntu8.4 deb -libcap-ng0 0.8.4-2build2 deb -libcap2 1:2.66-5ubuntu2.2 deb -libcbor0.10 0.10.2-1.2ubuntu2 deb -libcom-err2 1.47.0-2.4~exp1ubuntu4.1 deb -libcrypt1 1:4.4.36-4build1 deb -libcurl3t64-gnutls 8.5.0-2ubuntu10.6 deb -libcurl4t64 8.5.0-2ubuntu10.6 deb -libdb5.3t64 5.3.28+dfsg2-7 deb -libdebconfclient0 0.271ubuntu3 deb -libedit2 3.1-20230828-1build1 deb -liberror-perl 0.17029-2 deb -libexpat1 2.6.1-2ubuntu0.3 deb -libext2fs2t64 1.47.0-2.4~exp1ubuntu4.1 deb -libffi8 3.4.6-1build1 deb -libfido2-1 1.14.0-1build3 deb -libgcc-s1 14.2.0-4ubuntu2~24.04 deb -libgcrypt20 1.10.3-2build1 deb -libgdbm-compat4t64 1.23-5.1build1 deb -libgdbm6t64 1.23-5.1build1 deb -libgmp10 2:6.3.0+dfsg-2ubuntu6.1 deb -libgnutls30t64 3.8.3-1.1ubuntu3.3 deb -libgpg-error0 1.47-3build2.1 deb -libgssapi-krb5-2 1.20.1-6ubuntu2.5 deb -libhogweed6t64 3.9.1-2.2build1.1 deb -libidn2-0 2.3.7-2build1.1 deb -libjq1 1.7.1-3build1 deb -libk5crypto3 1.20.1-6ubuntu2.5 deb -libkeyutils1 1.6.3-3build1 deb -libkrb5-3 1.20.1-6ubuntu2.5 deb -libkrb5support0 1.20.1-6ubuntu2.5 deb -libksba8 1.6.6-1build1 deb -libldap-common 2.6.7+dfsg-1~exp1ubuntu8.2 deb -libldap2 2.6.7+dfsg-1~exp1ubuntu8.2 deb -liblz4-1 1.9.4-1build1.1 deb -liblzma5 5.6.1+really5.4.5-1ubuntu0.2 deb -libmd0 1.1.0-2build1.1 deb -libmount1 2.39.3-9ubuntu6.2 deb -libncursesw6 6.4+20240113-1ubuntu2 deb -libnettle8t64 3.9.1-2.2build1.1 deb -libnghttp2-14 1.59.0-1ubuntu0.2 deb -libnpth0t64 1.6-3.1build1 deb -libonig5 6.9.9-1build1 deb -libp11-kit0 0.25.3-4ubuntu2.1 deb -libpam-modules 1.5.3-5ubuntu5.1 deb -libpam-modules-bin 1.5.3-5ubuntu5.1 deb -libpam-runtime 1.5.3-5ubuntu5.1 deb -libpam0g 1.5.3-5ubuntu5.1 deb -libpcre2-8-0 10.42-4ubuntu2.1 deb -libperl5.38t64 5.38.2-3.2ubuntu0.1 deb -libproc2-0 2:4.0.4-4ubuntu3.2 deb -libpsl5t64 0.21.2-1.1build1 deb -libreadline8t64 8.2-4build1 deb -librtmp1 2.4+20151223.gitfa8646d.1-2build7 deb -libsasl2-2 2.1.28+dfsg1-5ubuntu3.1 deb -libsasl2-modules 2.1.28+dfsg1-5ubuntu3.1 deb -libsasl2-modules-db 2.1.28+dfsg1-5ubuntu3.1 deb -libseccomp2 2.5.5-1ubuntu3.1 deb -libselinux1 3.5-2ubuntu2.1 deb -libsemanage-common 3.5-1build5 deb -libsemanage2 3.5-1build5 deb -libsepol2 3.5-2build1 deb -libsmartcols1 2.39.3-9ubuntu6.2 deb -libsqlite3-0 3.45.1-1ubuntu2.1 deb -libss2 1.47.0-2.4~exp1ubuntu4.1 deb -libssh-4 0.10.6-2build2 deb -libssl3t64 3.0.13-0ubuntu3.5 deb -libstdc++6 14.2.0-4ubuntu2~24.04 deb -libsystemd0 255.4-1ubuntu8.6 deb -libtasn1-6 4.19.0-3ubuntu0.24.04.1 deb -libtinfo6 6.4+20240113-1ubuntu2 deb -libudev1 255.4-1ubuntu8.6 deb -libunistring5 1.1-2build1.1 deb -libuuid1 2.39.3-9ubuntu6.2 deb -libx11-6 2:1.8.7-1build1 deb -libx11-data 2:1.8.7-1build1 deb -libxau6 1:1.0.9-1build6 deb -libxcb1 1.15-1ubuntu2 deb -libxdmcp6 1:1.1.3-0ubuntu6 deb -libxext6 2:1.3.4-1build2 deb -libxmuu1 2:1.1.3-3build2 deb -libxxhash0 0.8.2-2build1 deb -libzstd1 1.5.5+dfsg2-2build1.1 deb -limiter 2.1.0 npm -locales 2.39-0ubuntu8.4 deb -log 1.0.0 npm -login 1:4.13+dfsg1-4ubuntu3.2 deb -logsave 1.47.0-2.4~exp1ubuntu4.1 deb -lru-cache 6.0.0 npm -lru-cache 7.18.3 npm -lua 1.0.0 npm -make 1.0.0 npm -make-dir 3.1.0 npm -markdown 1.0.0 npm -markdown-language-features 1.0.0 npm -markdown-math 1.0.0 npm -math-intrinsics 1.1.0 npm -mawk 1.3.4.20240123-1build1 deb -md5 2.3.0 npm -media-preview 1.0.0 npm -media-typer 1.1.0 npm -merge-conflict 1.0.0 npm -merge-descriptors 2.0.0 npm -methods 1.1.2 npm -micromatch 4.0.8 npm -microsoft-authentication 0.0.1 npm -mime-db 1.52.0 npm -mime-db 1.53.0 npm -mime-types 2.1.35 npm -mime-types 3.0.0 npm -mimic-response 3.1.0 npm -minimatch 3.1.2 npm -minimist 1.2.6 npm -minipass 3.3.6 npm (+1 duplicate) -minipass 5.0.0 npm -minizlib 2.1.2 npm -mkdirp 1.0.4 npm (+1 duplicate) -mkdirp-classic 0.5.3 npm -mount 2.39.3-9ubuntu6.2 deb -ms 2.0.0 npm -ms 2.1.2 npm (+1 duplicate) -ms 2.1.3 npm -nano 7.2-2ubuntu0.1 deb -napi-build-utils 1.0.2 npm -native-watchdog 1.4.2 npm -ncurses-base 6.4+20240113-1ubuntu2 deb -ncurses-bin 6.4+20240113-1ubuntu2 deb -negotiator 0.6.4 npm -negotiator 1.0.0 npm -net-tools 2.10-0.1ubuntu4 deb -netbase 6.4 deb -netcat-openbsd 1.226-1ubuntu2 deb -netmask 2.0.2 npm -node 20.18.3 binary -node-abi 3.8.0 npm -node-addon-api 7.1.0 npm -node-addon-api 7.1.1 npm -node-fetch 2.7.0 npm -node-pty 1.1.0-beta33 npm -nopt 5.0.0 npm -npm 1.0.1 npm -npmlog 5.0.1 npm -nw-pre-gyp-module-test 0.0.1 npm -object-assign 4.1.1 npm -object-inspect 1.13.4 npm -objective-c 1.0.0 npm -on-finished 2.4.1 npm -on-headers 1.0.2 npm -once 1.4.0 npm (+1 duplicate) -openssh-client 1:9.6p1-3ubuntu13.11 deb -openssl 3.0.13-0ubuntu3.5 deb -opentype.js 0.8.0 npm -os-tmpdir 1.0.2 npm -pac-proxy-agent 7.2.0 npm -pac-resolver 7.0.1 npm -parseurl 1.3.3 npm -passwd 1:4.13+dfsg1-4ubuntu3.2 deb -patch 2.7.6-7build3 deb -path-is-absolute 1.0.1 npm -path-to-regexp 8.2.0 npm -pem 1.14.8 npm -pend 1.2.0 npm -perl 1.0.0 npm -perl 5.38.2-3.2ubuntu0.1 deb -perl-base 5.38.2-3.2ubuntu0.1 deb -perl-modules-5.38 5.38.2-3.2ubuntu0.1 deb -php 1.0.0 npm -php-language-features 1.0.0 npm -picomatch 2.3.1 npm -pinentry-curses 1.2.1-3ubuntu5 deb -powershell 1.0.0 npm -prebuild-install 7.1.2 npm -procps 2:4.0.4-4ubuntu3.2 deb -promise-stream-reader 1.0.1 npm -proxy-addr 2.0.7 npm -proxy-agent 6.5.0 npm -proxy-from-env 1.1.0 npm (+1 duplicate) -publicsuffix 20231001.0357-0.1 deb -pug 1.0.0 npm -pump 3.0.0 npm -python 1.0.0 npm -qs 6.13.0 npm -qs 6.14.0 npm -r 1.0.0 npm -range-parser 1.2.1 npm -raw-body 3.0.0 npm -razor 1.0.0 npm -rc 1.2.8 npm -readable-stream 3.6.0 npm -readable-stream 3.6.2 npm -readline-common 8.2-4build1 deb -references-view 1.0.0 npm -regenerator-runtime 0.14.1 npm -requires-port 1.0.0 npm -restructuredtext 1.0.0 npm -rimraf 3.0.2 npm -rotating-file-stream 3.2.5 npm -router 2.1.0 npm -ruby 1.0.0 npm -rust 1.0.0 npm -safe-buffer 5.2.1 npm (+1 duplicate) -safe-compare 1.1.4 npm -safer-buffer 2.1.2 npm -scss 1.0.0 npm -search-result 1.0.0 npm -sed 4.9-2build1 deb -semver 6.3.1 npm -semver 7.5.4 npm -semver 7.7.1 npm -send 1.1.0 npm -sensible-utils 0.0.22 deb -serve-static 2.1.0 npm -set-blocking 2.0.0 npm -setprototypeof 1.2.0 npm -shaderlab 1.0.0 npm -shellscript 1.0.0 npm -side-channel 1.1.0 npm -side-channel-list 1.0.0 npm -side-channel-map 1.0.1 npm -side-channel-weakmap 1.0.2 npm -signal-exit 3.0.7 npm -simple-browser 1.0.0 npm -simple-concat 1.0.1 npm -simple-get 4.0.1 npm -smart-buffer 4.2.0 npm (+1 duplicate) -socks 2.8.3 npm -socks 2.8.4 npm -socks-proxy-agent 8.0.4 npm -socks-proxy-agent 8.0.5 npm -source-map 0.6.1 npm -sprintf-js 1.1.3 npm (+1 duplicate) -sql 1.0.0 npm -statuses 2.0.1 npm -string-width 4.2.3 npm -string_decoder 1.3.0 npm (+1 duplicate) -strip-ansi 6.0.1 npm -strip-json-comments 2.0.1 npm -sudo 1.9.15p5-3ubuntu5 deb -swift 1.0.0 npm -systemd-standalone-sysusers 255.4-1ubuntu8.6 deb -sysvinit-utils 3.08-6ubuntu3 deb -tar 1.35+dfsg-3build1 deb -tar 6.2.1 npm -tar-fs 2.1.1 npm -tar-stream 2.2.0 npm -tas-client-umd 0.2.0 npm -terminal-suggest 1.0.1 npm -theme-abyss 1.0.0 npm -theme-defaults 1.0.0 npm -theme-kimbie-dark 1.0.0 npm -theme-monokai 1.0.0 npm -theme-monokai-dimmed 1.0.0 npm -theme-quietlight 1.0.0 npm -theme-red 1.0.0 npm -theme-solarized-dark 1.0.0 npm -theme-solarized-light 1.0.0 npm -theme-tomorrow-night-blue 1.0.0 npm -tiny-inflate 1.0.3 npm -to-regex-range 5.0.1 npm -toidentifier 1.0.1 npm -tr46 0.0.3 npm -tslib 2.7.0 npm -tslib 2.8.1 npm -tunnel-agent 0.6.0 npm -tunnel-forwarding 1.0.0 npm -type-is 2.0.0 npm -typescript 1.0.0 npm -typescript 5.8.2 npm -typescript-language-features 1.0.0 npm -tzdata 2025b-0ubuntu0.24.04 deb -ubuntu-keyring 2023.11.28.1 deb -undici 7.3.0 npm -universalify 2.0.1 npm -unminimize 0.2.1 deb -unpipe 1.0.0 npm -util-deprecate 1.0.2 npm (+1 duplicate) -util-linux 2.39.3-9ubuntu6.2 deb -utils-merge 1.0.1 npm -uuid 9.0.1 npm -vary 1.1.2 npm -vb 1.0.0 npm -vscode-css-languageserver 1.0.0 npm -vscode-extensions 0.0.1 npm -vscode-html-languageserver 1.0.0 npm -vscode-js-profile-table 1.0.10 npm -vscode-json-languageserver 1.3.4 npm -vscode-oniguruma 1.7.0 npm -vscode-regexpp 3.1.0 npm -vscode-textmate 9.2.0 npm -vscode-theme-seti 1.0.0 npm -webidl-conversions 3.0.1 npm -whatwg-url 5.0.0 npm -which 2.0.2 npm -wide-align 1.1.5 npm -wrappy 1.0.2 npm (+1 duplicate) -ws 8.18.0 npm -xauth 1:1.1.2-1build1 deb -xdg-basedir 4.0.0 npm -xml 1.0.0 npm -yallist 4.0.0 npm (+1 duplicate) -yaml 1.0.0 npm -yauzl 2.10.0 npm -yauzl 3.1.1 npm -yazl 2.4.3 npm -zlib1g 1:1.3.dfsg-3.1ubuntu2.1 deb +NAME VERSION TYPE +@anthropic-ai/sandbox-runtime 0.0.23 npm +@babel/runtime 7.28.6 npm +@coder/logger 3.0.1 npm +@epic-web/invariant 1.0.0 npm +@microsoft/1ds-core-js 3.2.13 npm +@microsoft/1ds-post-js 3.2.13 npm +@microsoft/applicationinsights-core-js 2.8.15 npm +@microsoft/applicationinsights-shims 2.0.2 npm +@microsoft/dynamicproto-js 1.1.9 npm +@parcel/watcher 2.5.6 npm +@parcel/watcher-linux-x64-glibc 2.5.6 npm +@parcel/watcher-linux-x64-musl 2.5.6 npm +@phc/format 1.0.0 npm +@pondwader/socks5-server 1.0.10 npm +@tootallnate/once 3.0.1 npm +@tootallnate/quickjs-emscripten 0.23.0 npm +@types/lodash 4.17.23 npm +@types/lodash-es 4.17.12 npm +@vscode/deviceid 0.1.4 npm +@vscode/iconv-lite-umd 0.7.1 npm +@vscode/native-watchdog 1.4.6 npm +@vscode/proxy-agent 0.38.0 npm +@vscode/ripgrep 1.17.0 npm +@vscode/spdlog 0.15.7 npm +@vscode/tree-sitter-wasm 0.3.0 npm +@vscode/vscode-languagedetection 1.0.23 npm +@vscode/windows-process-tree 0.6.3 npm +@vscode/windows-registry 1.2.0 npm +@xterm/addon-clipboard 0.3.0-beta.168 npm +@xterm/addon-image 0.10.0-beta.168 npm +@xterm/addon-ligatures 0.11.0-beta.168 npm +@xterm/addon-progress 0.3.0-beta.168 npm +@xterm/addon-search 0.17.0-beta.168 npm +@xterm/addon-serialize 0.15.0-beta.168 npm +@xterm/addon-unicode11 0.10.0-beta.168 npm +@xterm/addon-webgl 0.20.0-beta.167 npm +@xterm/headless 6.1.0-beta.168 npm +@xterm/xterm 6.1.0-beta.168 npm +ConPTY Interface Library 1.23.251008001 binary (+1 duplicate) +Console Window and PTY Host (Open Source) 1.23.251008001 binary (+1 duplicate) +accepts 2.0.0 npm +adduser 3.137ubuntu1 deb +agent-base 7.1.1 npm +agent-base 7.1.4 npm +apt 2.8.3 deb +apt-utils 2.8.3 deb +argon2 0.44.0 npm +argparse 2.0.1 npm +ast-types 0.13.4 npm +base-files 13ubuntu10.4 deb +base-passwd 3.6.3build1 deb +base64-js 1.5.1 npm +bash 5.2.21-2ubuntu4 deb +basic-ftp 5.2.0 npm +bat 10.0.0 npm +beep-boop 1.2.3 npm +bindings 1.5.0 npm +bl 4.1.0 npm +body-parser 2.2.2 npm +bsdutils 1:2.39.3-9ubuntu6.4 deb +buffer 5.7.1 npm +buffer-alloc 1.2.0 npm +buffer-alloc-unsafe 1.1.0 npm +buffer-crc32 0.2.13 npm +buffer-fill 1.0.0 npm +builtin-notebook-renderers 10.0.0 npm +bytes 3.1.2 npm +ca-certificates 20240203 deb +call-bind-apply-helpers 1.0.2 npm +call-bound 1.0.4 npm +catatonit 0.1.7-1 deb +charenc 0.0.2 npm +chownr 1.1.4 npm +clojure 10.0.0 npm +code-server 1.111.0 npm +code-server 4.111.0 npm +coffeescript 10.0.0 npm +commander 12.1.0 npm +commander 8.3.0 npm +compressible 2.0.18 npm +compression 1.8.1 npm +configuration-editing 10.0.0 npm +content-disposition 1.0.1 npm +content-type 1.0.5 npm +cookie 0.7.2 npm (+1 duplicate) +cookie-parser 1.4.7 npm +cookie-signature 1.0.6 npm +cookie-signature 1.2.2 npm +coreutils 9.4-3ubuntu6.1 deb +cpp 10.0.0 npm +cron 3.0pl1-184ubuntu2 deb +cron-daemon-common 3.0pl1-184ubuntu2 deb +cross-env 10.1.0 npm +cross-spawn 7.0.6 npm +crypt 0.0.2 npm +csharp 10.0.0 npm +css 10.0.0 npm +css-language-features 10.0.0 npm +curl 8.5.0-2ubuntu10.8 deb +dart 10.0.0 npm +dash 0.5.12-6ubuntu5 deb +data-uri-to-buffer 6.0.2 npm +debconf 1.5.86ubuntu1 deb +debianutils 5.17build1 deb +debug 2.6.9 npm +debug 4.3.4 npm +debug 4.4.3 npm +debug-auto-launch 10.0.0 npm +debug-server-ready 10.0.0 npm +decompress-response 6.0.0 npm +deep-extend 0.6.0 npm +degenerator 5.0.1 npm +depd 2.0.0 npm +detect-libc 2.0.4 npm +diff 10.0.0 npm +diffutils 1:3.10-1build1 deb +dirmngr 2.4.4-2ubuntu17.4 deb +docker 10.0.0 npm +dotenv 10.0.0 npm +dpkg 1.22.6ubuntu6.5 deb +dunder-proto 1.0.1 npm +e2fsprogs 1.47.0-2.4~exp1ubuntu4.1 deb +ee-first 1.1.1 npm +emmet 10.0.0 npm +encodeurl 2.0.0 npm +end-of-stream 1.4.4 npm +env-paths 2.2.1 npm +es-define-property 1.0.1 npm +es-errors 1.3.0 npm +es-object-atoms 1.1.1 npm +es6-promisify 7.0.0 npm +escape-html 1.0.3 npm +escodegen 2.1.0 npm +esprima 4.0.1 npm +estraverse 5.3.0 npm +esutils 2.0.3 npm +etag 1.8.1 npm +eventemitter3 4.0.7 npm +expand-template 2.0.3 npm +express 5.2.1 npm +extension-editing 10.0.0 npm +fd-slicer 1.1.0 npm +file-uri-to-path 1.0.0 npm +finalhandler 2.1.1 npm +findutils 4.9.0-5build1 deb +follow-redirects 1.15.11 npm +forwarded 0.2.0 npm +fresh 2.0.0 npm +fs-constants 1.0.0 npm +fs-extra 11.2.0 npm +fsharp 10.0.0 npm +function-bind 1.1.2 npm +gcc-14-base 14.2.0-4ubuntu2~24.04.1 deb +get-intrinsic 1.3.0 npm +get-proto 1.0.1 npm +get-uri 6.0.5 npm +git 10.0.0 npm +git 1:2.43.0-1ubuntu7.3 deb +git-base 10.0.0 npm +git-man 1:2.43.0-1ubuntu7.3 deb +github 0.0.1 npm +github-authentication 0.0.2 npm +github-from-package 0.0.0 npm +gnupg 2.4.4-2ubuntu17.4 deb +gnupg-l10n 2.4.4-2ubuntu17.4 deb +gnupg-utils 2.4.4-2ubuntu17.4 deb +go 10.0.0 npm +gopd 1.2.0 npm +gpg 2.4.4-2ubuntu17.4 deb +gpg-agent 2.4.4-2ubuntu17.4 deb +gpg-wks-client 2.4.4-2ubuntu17.4 deb +gpgconf 2.4.4-2ubuntu17.4 deb +gpgsm 2.4.4-2ubuntu17.4 deb +gpgv 2.4.4-2ubuntu17.4 deb +graceful-fs 4.2.11 npm +grep 3.11-4build1 deb +groovy 10.0.0 npm +grunt 10.0.0 npm +gulp 10.0.0 npm +gzip 1.12-1ubuntu3.1 deb +handlebars 10.0.0 npm +has-symbols 1.1.0 npm +hasown 2.0.2 npm +hlsl 10.0.0 npm +hostname 3.23+nmu2ubuntu2 deb +html 10.0.0 npm +html-language-features 10.0.0 npm +http-errors 2.0.1 npm +http-proxy 1.18.1 npm +http-proxy-agent 7.0.0 npm +http-proxy-agent 7.0.2 npm +httpolyglot 0.1.2 npm +https-proxy-agent 7.0.2 npm +https-proxy-agent 7.0.6 npm +i18next 25.8.13 npm +iconv-lite 0.7.2 npm +ieee754 1.2.1 npm +inherits 2.0.4 npm (+1 duplicate) +ini 1.3.8 npm +ini 10.0.0 npm +init-system-helpers 1.66ubuntu1 deb +ip-address 10.1.0 npm +ip-address 9.0.5 npm +ipaddr.js 1.9.1 npm +ipynb 10.0.0 npm +is-buffer 1.1.6 npm +is-extglob 2.1.1 npm +is-glob 4.0.3 npm +is-promise 4.0.0 npm +isexe 2.0.0 npm +jake 10.0.0 npm +java 10.0.0 npm +javascript 10.0.0 npm +jq 1.7.1-3ubuntu0.24.04.1 deb +js-base64 3.7.7 npm +js-debug 1.110.0 npm +js-debug-companion 1.1.3 npm +js-yaml 4.1.1 npm +jsbn 1.1.0 npm +jschardet 3.1.4 npm +json 10.0.0 npm +json-language-features 10.0.0 npm +jsonfile 6.1.0 npm +julia 10.0.0 npm +just-performance 4.3.0 npm +katex 0.16.22 npm +kerberos 2.1.1 npm +keyboxd 2.4.4-2ubuntu17.4 deb +krb5-locales 1.20.1-6ubuntu2.6 deb +latex 10.0.0 npm +less 10.0.0 npm +less 590-2ubuntu2.1 deb +libacl1 2.3.2-1build1.1 deb +libapparmor1 4.0.1really4.0.1-0ubuntu0.24.04.5 deb +libapt-pkg6.0t64 2.8.3 deb +libassuan0 2.5.6-1build1 deb +libatomic1 14.2.0-4ubuntu2~24.04.1 deb +libattr1 1:2.5.2-1build1.1 deb +libaudit-common 1:3.1.2-2.1build1.1 deb +libaudit1 1:3.1.2-2.1build1.1 deb +libblkid1 2.39.3-9ubuntu6.4 deb +libbrotli1 1.1.0-2build2 deb +libbsd0 0.12.1-1build1.1 deb +libbz2-1.0 1.0.8-5.1build0.1 deb +libc-bin 2.39-0ubuntu8.7 deb +libc6 2.39-0ubuntu8.7 deb +libcap-ng0 0.8.4-2build2 deb +libcap2 1:2.66-5ubuntu2.2 deb +libcbor0.10 0.10.2-1.2ubuntu2 deb +libcom-err2 1.47.0-2.4~exp1ubuntu4.1 deb +libcrypt1 1:4.4.36-4build1 deb +libcurl3t64-gnutls 8.5.0-2ubuntu10.8 deb +libcurl4t64 8.5.0-2ubuntu10.8 deb +libdb5.3t64 5.3.28+dfsg2-7 deb +libdebconfclient0 0.271ubuntu3 deb +libedit2 3.1-20230828-1build1 deb +liberror-perl 0.17029-2 deb +libexpat1 2.6.1-2ubuntu0.4 deb +libext2fs2t64 1.47.0-2.4~exp1ubuntu4.1 deb +libffi8 3.4.6-1build1 deb +libfido2-1 1.14.0-1build3 deb +libgcc-s1 14.2.0-4ubuntu2~24.04.1 deb +libgcrypt20 1.10.3-2build1 deb +libgdbm-compat4t64 1.23-5.1build1 deb +libgdbm6t64 1.23-5.1build1 deb +libgmp10 2:6.3.0+dfsg-2ubuntu6.1 deb +libgnutls30t64 3.8.3-1.1ubuntu3.5 deb +libgpg-error0 1.47-3build2.1 deb +libgssapi-krb5-2 1.20.1-6ubuntu2.6 deb +libhogweed6t64 3.9.1-2.2build1.1 deb +libidn2-0 2.3.7-2build1.1 deb +libjq1 1.7.1-3ubuntu0.24.04.1 deb +libk5crypto3 1.20.1-6ubuntu2.6 deb +libkeyutils1 1.6.3-3build1 deb +libkrb5-3 1.20.1-6ubuntu2.6 deb +libkrb5support0 1.20.1-6ubuntu2.6 deb +libksba8 1.6.6-1build1 deb +libldap-common 2.6.10+dfsg-0ubuntu0.24.04.1 deb +libldap2 2.6.10+dfsg-0ubuntu0.24.04.1 deb +liblz4-1 1.9.4-1build1.1 deb +liblzma5 5.6.1+really5.4.5-1ubuntu0.2 deb +libmd0 1.1.0-2build1.1 deb +libmount1 2.39.3-9ubuntu6.4 deb +libncursesw6 6.4+20240113-1ubuntu2 deb +libnettle8t64 3.9.1-2.2build1.1 deb +libnghttp2-14 1.59.0-1ubuntu0.2 deb +libnpth0t64 1.6-3.1build1 deb +libonig5 6.9.9-1build1 deb +libp11-kit0 0.25.3-4ubuntu2.1 deb +libpam-modules 1.5.3-5ubuntu5.5 deb +libpam-modules-bin 1.5.3-5ubuntu5.5 deb +libpam-runtime 1.5.3-5ubuntu5.5 deb +libpam0g 1.5.3-5ubuntu5.5 deb +libpcre2-8-0 10.42-4ubuntu2.1 deb +libperl5.38t64 5.38.2-3.2ubuntu0.2 deb +libproc2-0 2:4.0.4-4ubuntu3.2 deb +libpsl5t64 0.21.2-1.1build1 deb +libreadline8t64 8.2-4build1 deb +librtmp1 2.4+20151223.gitfa8646d.1-2build7 deb +libsasl2-2 2.1.28+dfsg1-5ubuntu3.1 deb +libsasl2-modules 2.1.28+dfsg1-5ubuntu3.1 deb +libsasl2-modules-db 2.1.28+dfsg1-5ubuntu3.1 deb +libseccomp2 2.5.5-1ubuntu3.1 deb +libselinux1 3.5-2ubuntu2.1 deb +libsemanage-common 3.5-1build5 deb +libsemanage2 3.5-1build5 deb +libsepol2 3.5-2build1 deb +libsmartcols1 2.39.3-9ubuntu6.4 deb +libsqlite3-0 3.45.1-1ubuntu2.5 deb +libss2 1.47.0-2.4~exp1ubuntu4.1 deb +libssh-4 0.10.6-2ubuntu0.3 deb +libssl3t64 3.0.13-0ubuntu3.7 deb +libstdc++6 14.2.0-4ubuntu2~24.04.1 deb +libsystemd0 255.4-1ubuntu8.12 deb +libtasn1-6 4.19.0-3ubuntu0.24.04.2 deb +libtinfo6 6.4+20240113-1ubuntu2 deb +libudev1 255.4-1ubuntu8.12 deb +libunistring5 1.1-2build1.1 deb +libuuid1 2.39.3-9ubuntu6.4 deb +libx11-6 2:1.8.7-1build1 deb +libx11-data 2:1.8.7-1build1 deb +libxau6 1:1.0.9-1build6 deb +libxcb1 1.15-1ubuntu2 deb +libxdmcp6 1:1.1.3-0ubuntu6 deb +libxext6 2:1.3.4-1build2 deb +libxmuu1 2:1.1.3-3build2 deb +libxxhash0 0.8.2-2build1 deb +libzstd1 1.5.5+dfsg2-2build1.1 deb +limiter 2.1.0 npm +locales 2.39-0ubuntu8.7 deb +lodash-es 4.17.23 npm +log 10.0.0 npm +login 1:4.13+dfsg1-4ubuntu3.2 deb +logsave 1.47.0-2.4~exp1ubuntu4.1 deb +lru-cache 6.0.0 npm +lru-cache 7.18.3 npm +lua 10.0.0 npm +make 10.0.0 npm +markdown 10.0.0 npm +markdown-language-features 10.0.0 npm +markdown-math 10.0.0 npm +math-intrinsics 1.1.0 npm +mawk 1.3.4.20240123-1build1 deb +md5 2.3.0 npm +media-preview 10.0.0 npm +media-typer 1.1.0 npm +merge-conflict 10.0.0 npm +merge-descriptors 2.0.0 npm +mermaid-chat-features 10.0.0 npm +microsoft-authentication 0.0.1 npm +mime-db 1.54.0 npm +mime-types 3.0.2 npm +mimic-response 3.1.0 npm +minimist 1.2.8 npm +mkdirp 1.0.4 npm +mkdirp-classic 0.5.3 npm +mount 2.39.3-9ubuntu6.4 deb +ms 2.0.0 npm +ms 2.1.2 npm +ms 2.1.3 npm +nano 7.2-2ubuntu0.1 deb +napi-build-utils 1.0.2 npm +ncurses-base 6.4+20240113-1ubuntu2 deb +ncurses-bin 6.4+20240113-1ubuntu2 deb +negotiator 0.6.4 npm +negotiator 1.0.0 npm +net-tools 2.10-0.1ubuntu4.4 deb +netbase 6.4 deb +netcat-openbsd 1.226-1ubuntu2 deb +netmask 2.0.2 npm +node 22.22.0 binary +node-abi 3.8.0 npm +node-addon-api 7.1.0 npm +node-addon-api 8.6.0 npm +node-gyp-build 4.8.4 npm +node-pty 1.2.0-beta.10 npm +npm 1.0.1 npm +object-inspect 1.13.4 npm +objective-c 10.0.0 npm +on-finished 2.4.1 npm +on-headers 1.1.0 npm +once 1.4.0 npm (+1 duplicate) +openssh-client 1:9.6p1-3ubuntu13.15 deb +openssl 3.0.13-0ubuntu3.7 deb +opentype.js 0.8.0 npm +os-tmpdir 1.0.2 npm +pac-proxy-agent 7.2.0 npm +pac-resolver 7.0.1 npm +parseurl 1.3.3 npm +passwd 1:4.13+dfsg1-4ubuntu3.2 deb +patch 2.7.6-7build3 deb +path-key 3.1.1 npm +path-to-regexp 8.3.0 npm +pem 1.14.8 npm +pend 1.2.0 npm +perl 10.0.0 npm +perl 5.38.2-3.2ubuntu0.2 deb +perl-base 5.38.2-3.2ubuntu0.2 deb +perl-modules-5.38 5.38.2-3.2ubuntu0.2 deb +php 10.0.0 npm +php-language-features 10.0.0 npm +picomatch 4.0.3 npm +pinentry-curses 1.2.1-3ubuntu5 deb +powershell 10.0.0 npm +prebuild-install 7.1.2 npm +procps 2:4.0.4-4ubuntu3.2 deb +prompt 10.0.0 npm +proxy-addr 2.0.7 npm +proxy-agent 6.5.0 npm +proxy-from-env 1.1.0 npm (+1 duplicate) +publicsuffix 20231001.0357-0.1 deb +pug 10.0.0 npm +pump 3.0.0 npm +python 10.0.0 npm +qs 6.15.0 npm +r 10.0.0 npm +range-parser 1.2.1 npm +raw-body 3.0.2 npm +razor 10.0.0 npm +rc 1.2.8 npm +readable-stream 3.6.0 npm +readline-common 8.2-4build1 deb +references-view 10.0.0 npm +requires-port 1.0.0 npm +restructuredtext 10.0.0 npm +rotating-file-stream 3.2.9 npm +router 2.2.0 npm +ruby 10.0.0 npm +rust 10.0.0 npm +safe-buffer 5.2.1 npm (+1 duplicate) +safe-compare 1.1.4 npm +safer-buffer 2.1.2 npm +scss 10.0.0 npm +search-result 10.0.0 npm +sed 4.9-2build1 deb +semver 7.5.4 npm +semver 7.7.4 npm +send 1.2.1 npm +sensible-utils 0.0.22 deb +serve-static 2.2.1 npm +setprototypeof 1.2.0 npm +shaderlab 10.0.0 npm +shebang-command 2.0.0 npm +shebang-regex 3.0.0 npm +shell-quote 1.8.3 npm +shellscript 10.0.0 npm +side-channel 1.1.0 npm +side-channel-list 1.0.0 npm +side-channel-map 1.0.1 npm +side-channel-weakmap 1.0.2 npm +simple-browser 10.0.0 npm +simple-concat 1.0.1 npm +simple-get 4.0.1 npm +smart-buffer 4.2.0 npm (+1 duplicate) +socks 2.8.3 npm +socks 2.8.7 npm +socks-proxy-agent 8.0.4 npm +socks-proxy-agent 8.0.5 npm +source-map 0.6.1 npm +sprintf-js 1.1.3 npm +sql 10.0.0 npm +statuses 2.0.2 npm +string_decoder 1.3.0 npm +strip-json-comments 2.0.1 npm +sudo 1.9.15p5-3ubuntu5.24.04.2 deb +swift 10.0.0 npm +systemd-standalone-sysusers 255.4-1ubuntu8.12 deb +sysvinit-utils 3.08-6ubuntu3 deb +tar 1.35+dfsg-3build1 deb +tar-fs 2.1.4 npm +tar-stream 2.2.0 npm +tas-client 0.3.1 npm +terminal-suggest 1.0.1 npm +theme-2026 0.1.0 npm +theme-abyss 10.0.0 npm +theme-defaults 10.0.0 npm +theme-kimbie-dark 10.0.0 npm +theme-monokai 10.0.0 npm +theme-monokai-dimmed 10.0.0 npm +theme-quietlight 10.0.0 npm +theme-red 10.0.0 npm +theme-solarized-dark 10.0.0 npm +theme-solarized-light 10.0.0 npm +theme-tomorrow-night-blue 10.0.0 npm +tiny-inflate 1.0.3 npm +toidentifier 1.0.1 npm +tslib 2.8.1 npm (+1 duplicate) +tunnel-agent 0.6.0 npm +tunnel-forwarding 10.0.0 npm +type-is 2.0.1 npm +typescript 10.0.0 npm +typescript 5.9.3 npm (+1 duplicate) +typescript-language-features 10.0.0 npm +tzdata 2025b-0ubuntu0.24.04.1 deb +ubuntu-keyring 2023.11.28.1 deb +undici 7.19.0 npm +universalify 2.0.1 npm +unminimize 0.2.1 deb +unpipe 1.0.0 npm +util-deprecate 1.0.2 npm +util-linux 2.39.3-9ubuntu6.4 deb +uuid 9.0.1 npm +vary 1.1.2 npm +vb 10.0.0 npm +vscode-css-languageserver 10.0.0 npm +vscode-extensions 0.0.1 npm +vscode-html-languageserver 10.0.0 npm +vscode-js-profile-table 1.0.10 npm +vscode-json-languageserver 1.3.4 npm +vscode-oniguruma 1.7.0 npm +vscode-regexpp 3.1.0 npm +vscode-textmate 9.3.2 npm +vscode-theme-seti 10.0.0 npm +which 2.0.2 npm +wrappy 1.0.2 npm (+1 duplicate) +ws 8.19.0 npm +xauth 1:1.1.2-1build1 deb +xdg-basedir 4.0.0 npm +xml 10.0.0 npm +yallist 4.0.0 npm +yaml 10.0.0 npm +yauzl 2.10.0 npm +yauzl 3.1.1 npm +yazl 2.4.3 npm +zlib1g 1:1.3.dfsg-3.1ubuntu2.1 deb +zod 3.25.76 npm diff --git a/readme-vars.yml b/readme-vars.yml index a6a29efd..3996ca39 100644 --- a/readme-vars.yml +++ b/readme-vars.yml @@ -36,6 +36,14 @@ opt_param_env_vars: - {env_var: "SUDO_PASSWORD_HASH", env_value: "", desc: "Optionally set sudo password via hash (takes priority over `SUDO_PASSWORD` var). Format is `$type$salt$hashed`."} - {env_var: "PROXY_DOMAIN", env_value: "code-server.my.domain", desc: "If this optional variable is set, this domain will be proxied for subdomain proxying. See [Documentation](https://github.com/coder/code-server/blob/main/docs/guide.md#using-a-subdomain)"} - {env_var: "DEFAULT_WORKSPACE", env_value: "/config/workspace", desc: "If this optional variable is set, code-server will open this directory by default"} + - {env_var: "PWA_APPNAME", env_value: "code-server", desc: "If this optional variable is set, the PWA app will the specified name."} +readonly_supported: true +readonly_message: | + * `/tmp` must be mounted to tmpfs + * `sudo` will not be available +nonroot_supported: true +nonroot_message: | + * `sudo` will not be available # application setup block app_setup_block_enabled: true app_setup_block: | @@ -73,12 +81,14 @@ init_diagram: | init-crontab-config -> init-config-end init-config -> init-crontab-config init-mods-end -> init-custom-files + init-adduser -> init-device-perms base -> init-envfile base -> init-migrations init-config-end -> init-mods init-mods-package-install -> init-mods-end init-mods -> init-mods-package-install init-adduser -> init-os-end + init-device-perms -> init-os-end init-envfile -> init-os-end init-custom-files -> init-services init-services -> svc-code-server @@ -92,6 +102,8 @@ init_diagram: | "code-server:latest" <- Base Images # changelog changelogs: + - {date: "10.08.25:", desc: "Let server listen on both ipv4 and ipv6."} + - {date: "03.06.25:", desc: "Allow setting PWA name using env var `PWA_APPNAME`."} - {date: "13.10.24:", desc: "Only chown config folder when change to ownership or new install is detected."} - {date: "09.10.24:", desc: "Manage permissions in /config/.ssh according to file type"} - {date: "19.08.24:", desc: "Rebase to Ubuntu Noble."} diff --git a/root/etc/s6-overlay/s6-rc.d/init-code-server/run b/root/etc/s6-overlay/s6-rc.d/init-code-server/run index c0fceadc..8b42ed0b 100755 --- a/root/etc/s6-overlay/s6-rc.d/init-code-server/run +++ b/root/etc/s6-overlay/s6-rc.d/init-code-server/run @@ -3,18 +3,20 @@ mkdir -p /config/{extensions,data,workspace,.ssh} -if [[ -n "${SUDO_PASSWORD}" ]] || [[ -n "${SUDO_PASSWORD_HASH}" ]]; then - echo "setting up sudo access" - if ! grep -q 'abc' /etc/sudoers; then - echo "adding abc to sudoers" - echo "abc ALL=(ALL:ALL) ALL" >> /etc/sudoers - fi - if [[ -n "${SUDO_PASSWORD_HASH}" ]]; then - echo "setting sudo password using sudo password hash" - sed -i "s|^abc:\!:|abc:${SUDO_PASSWORD_HASH}:|" /etc/shadow - else - echo "setting sudo password using SUDO_PASSWORD env var" - echo -e "${SUDO_PASSWORD}\n${SUDO_PASSWORD}" | passwd abc +if [[ -z ${LSIO_NON_ROOT_USER} ]] && [[ -z ${LSIO_READ_ONLY_FS} ]]; then + if [[ -n "${SUDO_PASSWORD}" ]] || [[ -n "${SUDO_PASSWORD_HASH}" ]]; then + echo "setting up sudo access" + if ! grep -q 'abc' /etc/sudoers; then + echo "adding abc to sudoers" + echo "abc ALL=(ALL:ALL) ALL" >> /etc/sudoers + fi + if [[ -n "${SUDO_PASSWORD_HASH}" ]]; then + echo "setting sudo password using sudo password hash" + sed -i "s|^abc:\!:|abc:${SUDO_PASSWORD_HASH}:|" /etc/shadow + else + echo "setting sudo password using SUDO_PASSWORD env var" + echo -e "${SUDO_PASSWORD}\n${SUDO_PASSWORD}" | passwd abc + fi fi fi @@ -26,17 +28,19 @@ if [[ ! -f /config/.profile ]]; then cp /root/.profile /config/.profile fi -# fix permissions (ignore contents of workspace) -PUID=${PUID:-911} -if [[ ! "$(stat -c %u /config/.profile)" == "${PUID}" ]]; then - echo "Change in ownership or new install detected, please be patient while we chown existing files" - echo "This could take some time" - find /config -path "/config/workspace" -prune -o -exec lsiown abc:abc {} + - lsiown abc:abc /config/workspace -fi -chmod 700 /config/.ssh -if [[ -n "$(ls -A /config/.ssh)" ]]; then - find /config/.ssh/ -type d -exec chmod 700 '{}' \; - find /config/.ssh/ -type f -exec chmod 600 '{}' \; - find /config/.ssh/ -type f -iname '*.pub' -exec chmod 644 '{}' \; +if [[ -z ${LSIO_NON_ROOT_USER} ]]; then + # fix permissions (ignore contents of workspace) + PUID=${PUID:-911} + if [[ ! "$(stat -c %u /config/.profile)" == "${PUID}" ]]; then + echo "Change in ownership or new install detected, please be patient while we chown existing files" + echo "This could take some time" + find /config -path "/config/workspace" -prune -o -exec lsiown abc:abc {} + + lsiown abc:abc /config/workspace + fi + chmod 700 /config/.ssh + if [[ -n "$(ls -A /config/.ssh)" ]]; then + find /config/.ssh/ -type d -exec chmod 700 '{}' \; + find /config/.ssh/ -type f -exec chmod 600 '{}' \; + find /config/.ssh/ -type f -iname '*.pub' -exec chmod 644 '{}' \; + fi fi diff --git a/root/etc/s6-overlay/s6-rc.d/svc-code-server/run b/root/etc/s6-overlay/s6-rc.d/svc-code-server/run index 97c7e09e..d8a6e224 100755 --- a/root/etc/s6-overlay/s6-rc.d/svc-code-server/run +++ b/root/etc/s6-overlay/s6-rc.d/svc-code-server/run @@ -14,14 +14,33 @@ else PROXY_DOMAIN_ARG="--proxy-domain=${PROXY_DOMAIN}" fi -exec \ - s6-notifyoncheck -d -n 300 -w 1000 -c "nc -z 127.0.0.1 8443" \ - s6-setuidgid abc \ +if [[ -z ${PWA_APPNAME} ]]; then + PWA_APPNAME="code-server" +fi + +if [[ -z ${LSIO_NON_ROOT_USER} ]]; then + exec \ + s6-notifyoncheck -d -n 300 -w 1000 -c "nc -z 127.0.0.1 8443" \ + s6-setuidgid abc \ + /app/code-server/bin/code-server \ + --bind-addr 0.0.0.0:8443 \ + --user-data-dir /config/data \ + --extensions-dir /config/extensions \ + --disable-telemetry \ + --auth "${AUTH}" \ + --app-name "${PWA_APPNAME}" \ + "${PROXY_DOMAIN_ARG}" \ + "${DEFAULT_WORKSPACE:-/config/workspace}" +else + exec \ + s6-notifyoncheck -d -n 300 -w 1000 -c "nc -z 127.0.0.1 8443" \ /app/code-server/bin/code-server \ - --bind-addr 0.0.0.0:8443 \ + --bind-addr "[::]:8443" \ --user-data-dir /config/data \ --extensions-dir /config/extensions \ --disable-telemetry \ --auth "${AUTH}" \ + --app-name "${PWA_APPNAME}" \ "${PROXY_DOMAIN_ARG}" \ "${DEFAULT_WORKSPACE:-/config/workspace}" +fi