Merge pull request #90 from thediveo/develop

Develop

Author: thediveo

.devcontainer/fully-privileged/devcontainer.json

@@ -52,6 +52,7 @@
         "node-for-all-with-yawn": "sudo ln -sf \"${NVM_BIN}/node\" /usr/local/bin/node",
         "yawn": ". ${NVM_DIR}/nvm.sh && cd web/lxkns && corepack enable && CI=1 yarn set version latest",
         "go-for-root": "echo 'Defaults:vscode secure_path = \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin\"' | sudo tee -a /etc/sudoers.d/vscode",
+        "no-first-run-notice": "rm -f /workspaces/.codespaces/shared/first-run-notice.txt",
         // considering the enormous noise made by the user namespace proponents
         // it breaks any existing and future irony meter that the same
         // distributions pushing user namespaces down our throats are now doing
@@ -64,10 +65,11 @@
     "customizations": {
         "vscode": {
             "extensions": [
-                "stkb.rewrap",
+                "dnut.rewrap-revived",
                 "brunnerh.insert-unicode",
                 "mhutchie.git-graph",
                 "ms-vscode.live-server",
+                "github.vscode-github-actions",
                 "docker.docker"
             ]
         }

.devcontainer/minimal-tooling/devcontainer.json

@@ -36,6 +36,7 @@
         "node-for-all-with-yawn": "sudo ln -sf \"${NVM_BIN}/node\" /usr/local/bin/node",
         "yawn": ". ${NVM_DIR}/nvm.sh && cd web/lxkns && corepack enable && CI=1 yarn set version latest",
         "go-for-root": "echo 'Defaults:vscode secure_path = \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin\"' | sudo tee -a /etc/sudoers.d/vscode",
+        "no-first-run-notice": "rm -f /workspaces/.codespaces/shared/first-run-notice.txt",
         // considering the enormous noise made by the user namespace proponents
         // it breaks any existing and future irony meter that the same
         // distributions pushing user namespaces down our throats are now doing
@@ -48,10 +49,11 @@
     "customizations": {
         "vscode": {
             "extensions": [
-                "stkb.rewrap",
+                "dnut.rewrap-revived",
                 "brunnerh.insert-unicode",
                 "mhutchie.git-graph",
                 "ms-vscode.live-server",
+                "github.vscode-github-actions",
                 "docker.docker"
             ]
         }

.devcontainer/minimal-with-go/devcontainer.json

@@ -38,6 +38,7 @@
     "postCreateCommand": {
         "use-project-lxknsrc": "ln -sf ${containerWorkspaceFolder}/.lxknsrc.yaml ${HOME}/.lxknsrc.yaml",
         "go-for-root": "echo 'Defaults:vscode secure_path = \"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin\"' | sudo tee -a /etc/sudoers.d/vscode",
+        "no-first-run-notice": "rm -f /workspaces/.codespaces/shared/first-run-notice.txt",
         // considering the enormous noise made by the user namespace proponents
         // it breaks any existing and future irony meter that the same
         // distributions pushing user namespaces down our throats are now doing
@@ -50,10 +51,11 @@
     "customizations": {
         "vscode": {
             "extensions": [
-                "stkb.rewrap",
+                "dnut.rewrap-revived",
                 "brunnerh.insert-unicode",
                 "mhutchie.git-graph",
                 "ms-vscode.live-server",
+                "github.vscode-github-actions",
                 "docker.docker"
             ]
         }

.github/workflows/buildandrelease.yaml

@@ -6,6 +6,9 @@ on:
       - 'v[0-9]+.[0-9]+.[0-9]+'
       - 'v[0-9]+.[0-9]+.[0-9]+-*'
 
+permissions:
+  contents: read
+
 env:
   PLATFORMS: linux/amd64,linux/arm64
   BUILDCONTEXTS: "" # ugly band-aid as per https://github.com/github/vscode-github-actions/issues/47#issuecomment-1488592302

.github/workflows/codeql-analysis.yaml

@@ -24,7 +24,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'go', 'javascript' ]
+        language: [ 'go', 'javascript', 'actions' ]
 
     steps:
       - name: Checkout repository

deployments/industrial-edge/lxkns-ieapp/docker-compose.yaml

@@ -7,6 +7,13 @@ services:
         command:
             - "/lxkns"
         user: "65534"
+        security_opt:
+            # apparmor only accepts a profile name, or unconfined; now there
+            # are Industrial Edge configurations that enable AppArmor and the
+            # default container rules conflict with what lxkns needs to do on
+            # behalf of its user. So switch AppArmor off for the lxkns service
+            # container.
+            - apparmor:unconfined
         # Clean all default capabilities Docker might otherwise grant us and
         # several of them we don't need; add only those capabilities we really
         # need, such as CAP_WORLD_DOMINATION.

lxkns.code-workspace

@@ -26,6 +26,7 @@
 		"markdown.styles": [
 			"style.css"
 		],
+		"workbench.tree.indent": 16,
 	},
 	"extensions": {
 		"recommendations": [