feat: initial project

Author: viceice

.dockerignore

@@ -0,0 +1 @@
+*

.editorconfig

@@ -0,0 +1,10 @@
+# editorconfig.org
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true

.github/workflows/build.yml

@@ -0,0 +1,69 @@
+name: build
+
+on:
+  push:
+    branches:
+      - main
+
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.number || github.ref }}
+  cancel-in-progress: true
+
+env:
+  DRY_RUN: ${{ github.ref_name != 'main' }}
+  OWNER: ${{ github.repository_owner }}
+  PLATFORMS: linux/amd64
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      packages: write
+
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      - uses: sigstore/cosign-installer@1fc5bd396d372bee37d608f955b336615edf79c8 # v3.2.0
+
+      - name: Docker registry login
+        if: env.DRY_RUN == 'false'
+        run: |
+          echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ env.OWNER }} --password-stdin
+
+      - name: Publish to ghcr.io
+        uses: containerbase/internal-tools@cce4ed496d2180a0ea727e82ec3e838c68d107b0 # v3.0.18
+        with:
+          command: docker-builder
+          image-prefix: ghcr.io/${{ env.OWNER }}
+          platforms: ${{ env.PLATFORMS }
+          last-only: true
+          major-minor: false
+          dry-run: ${{ env.DRY_RUN }}
+
+  release:
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+
+    steps:
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+
+      - name: Init
+        run: ./bin/init.sh
+
+      - uses: ncipollo/release-action@6c75be85e571768fa31b40abf38de58ba0397db5 # v1.13.0
+        if: env.DRY_RUN == 'false'
+        with:
+          allowUpdates: true
+          body: See https://github.com/containerbase/base/releases/tag/${{ env.VERSION }} for more changes
+          commit: ${{ github.sha }}
+          name: ${{ env.VERSION }}
+          tag: v${{ env.VERSION }}
+          token: ${{ secrets.GITHUB_TOKEN }}

.prettierrc

@@ -0,0 +1,4 @@
+{
+  "singleQuote": true,
+  "trailingComma": "all"
+}

Dockerfile

@@ -0,0 +1,61 @@
+# renovate: datasource=docker depName=ghcr.io/containerbase/base
+ARG CONTAINERBASE_VERSION=9.26.0
+
+FROM ghcr.io/containerbase/base:${CONTAINERBASE_VERSION} as containerbase
+
+FROM amd64/ubuntu:jammy as base
+
+ARG CONTAINERBASE_VERSION
+ARG APT_HTTP_PROXY
+
+LABEL org.opencontainers.image.source="https://github.com/containerbase/gitpod" \
+      org.opencontainers.image.version="${CONTAINERBASE_VERSION}"
+
+# Compatibillity
+LABEL org.label-schema.vcs-url="https://github.com/containerbase/gitpod" \
+      org.label-schema.version="${CONTAINERBASE_VERSION}"
+
+ARG USER_NAME=gitpod
+ARG USER_ID=33333
+ARG PRIMARY_GROUP_ID=33333
+
+# Set env and shell
+ENV BASH_ENV=/usr/local/etc/env ENV=/usr/local/etc/env PATH=/home/$USER_NAME/bin:$PATH
+SHELL ["/bin/bash" , "-c"]
+
+# This entry point ensures that dumb-init is run
+ENTRYPOINT [ "docker-entrypoint.sh" ]
+
+# Set up containerbase
+COPY --from=containerbase /usr/local/bin/ /usr/local/bin/
+COPY --from=containerbase /usr/local/containerbase/ /usr/local/containerbase/
+RUN install-containerbase
+
+# add required gitpod packages
+RUN set -ex; \
+  install-apt make shellcheck sudo locales; \
+  locale-gen en_US.UTF-8; \
+  true
+
+# allow sudo without password
+RUN echo "gitpod ALL=NOPASSWD:ALL" > /etc/sudoers.d/gitpod; sudo id
+
+# renovate: datasource=github-tags packageName=git/git
+RUN install-tool git v2.30.0
+
+# mark all directories as safe
+RUN git config --system --add safe.directory '*'
+
+# renovate: datasource=github-releases depName=docker lookupName=moby/moby
+RUN install-tool docker 20.10.7
+
+# renovate: datasource=docker versioning=docker
+RUN install-tool node 20.10.0
+
+# renovate: datasource=npm
+RUN install-tool corepack 0.23.0
+
+# prepare some tools for gitpod
+RUN prepare-tool python
+
+USER gitpod

README.md

@@ -1,2 +1,10 @@
-# gitpod
-Gitpod base image
+# containerbase gitpod
+
+[![Build status](https://github.com/containerbase/gitpod/actions/workflows/build.yml/badge.svg)](https://github.com/containerbase/gitpod/actions/workflows/build.yml?query=branch%3Amain)
+![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/containerbase/gitpod)
+![License: MIT](https://img.shields.io/github/license/containerbase/gitpod)
+
+A docker base image for Gitpod usage.
+
+This repository is the source for the Github container registry image [`ghcr.io/containerbase/gitpod`](https://github.com/containerbase/gitpod/pkgs/container/gitpod).
+Commits to `main` branch are automatically build and published.

bin/init.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+
+set -eo pipefail
+
+FROM=$(grep 'CONTAINERBASE_VERSION' Dockerfile)
+SEMVER_REGEX="=v?(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(-[a-z0-9]+)?"
+
+
+if ! [[ "$FROM" =~ $SEMVER_REGEX ]]; then
+  echo Not a semver tag - skipping
+  exit 1
+fi
+
+major=${BASH_REMATCH[1]}
+minor=${BASH_REMATCH[2]}
+patch=${BASH_REMATCH[3]}
+
+
+VERSION="${major}.${minor}.${patch}"
+echo "VERSION=${VERSION}" >> "$GITHUB_ENV"
+echo "Found version: ${VERSION}"

builder.json

@@ -0,0 +1,7 @@
+{
+  "image": "gitpod",
+  "versioning": "semver",
+  "startVersion": "9.25.0",
+  "cache": "docker-build-cache",
+  "buildArg": "CONTAINERBASE_VERSION"
+}

renovate.json

@@ -0,0 +1,10 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": ["local>containerbase/.github"],
+  "packageRules": [
+    {
+      "matchManagers": ["dockerfile"],
+      "enabled": false
+    }
+  ]
+}