Thore CimbalandClaude Sonnet 5
328b028c5d
The devcontainer could never actually be built successfully - verified by building it from scratch for the first time in a while. Found and fixed six issues: - kubectl: apt.kubernetes.io was deprecated/shut down by Google in 2023, switched to the official successor repo pkgs.k8s.io - docker-ce-cli: apt line hardcoded arch=amd64, breaking the build on Apple Silicon; resolved dynamically via dpkg --print-architecture - useradd -G docker failed because only the Docker CLI (no daemon) is installed, so no package ever creates the docker group; added explicit groupadd - oh-my-zsh install had a nested-quoting bug that made the RUN step fail; simplified to download-then-run instead of one nested `su -c "sh -c ..."` - sops binary was hardcoded to linux.amd64, only working on arm64 by luck via Docker Desktop's QEMU emulation; resolved dynamically like docker-ce - docker.sock was mounted but unusable (permission denied) since the container's docker group GID never matched the host socket's GID; added a root entrypoint (docker-init.sh) that reconciles this at container start, then drops to the vscode user via gosu Also fixed two stale mas-secrets.sops.yaml references (actual filename is mas-secret.yaml) in README.md and postCreateCommand.sh, set the vscode user's default shell to zsh (oh-my-zsh was installed but never used by default), and documented all of the above plus a build+run verification snippet in README.md so this class of drift is caught before it goes unnoticed again. Verified end-to-end: cold `docker build --no-cache`, then a real container run against the actual mounted kubeconfig, age key, and docker socket - kubectl reaches the live cluster, sops decrypts a real secret, and docker ps talks to the real daemon as the vscode user. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
36 lines
1.0 KiB
Bash
Executable File
36 lines
1.0 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
echo "🚀 Setting up ESS Community GitOps devcontainer..."
|
|
|
|
# Verify all required tools are installed
|
|
echo "✅ Verifying installed tools..."
|
|
commands=("kubectl" "flux" "helm" "sops" "age" "git" "docker")
|
|
|
|
for cmd in "${commands[@]}"; do
|
|
if command -v $cmd &> /dev/null; then
|
|
version=$($cmd version 2>/dev/null | head -1 || echo "installed")
|
|
echo " ✓ $cmd: $version"
|
|
else
|
|
echo " ✗ $cmd: NOT FOUND"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
# Create necessary directories
|
|
echo "📁 Creating home directories..."
|
|
mkdir -p ~/.kube ~/.ssh ~/.age
|
|
|
|
# Print useful information
|
|
echo ""
|
|
echo "📚 Useful commands:"
|
|
echo " - kubectl get pods -n matrix (check pod status)"
|
|
echo " - flux get helmreleases -A (check helm releases)"
|
|
echo " - sops apps/production/custom-configs/mas-secret.yaml (edit secrets)"
|
|
echo ""
|
|
echo "🔗 For kubeconfig setup:"
|
|
echo " - Copy your ~/.kube/config to access the cluster"
|
|
echo " - Run: kubectl get nodes"
|
|
echo ""
|
|
echo "✨ Devcontainer setup complete!"
|