Use Devcontainer to contain the AI Agents and make it easy to get started (#13)

* add devcontainer

* github auth intructions with devcontainer

* devcontainer working

* devcontainer is working with a dockerfile

* ssh working with my config file and SSH

* documenation

---------

Co-authored-by: aligneddev <aligneddev@github.com>

Author: aligneddev

.devcontainer/DEVCONTAINER.md

@@ -0,0 +1,192 @@
+# DevContainer Configuration Guide
+
+## Overview
+
+This project uses a DevContainer for consistent local development across all team members and CI/CD environments.
+
+- **Image Build**: `.devcontainer/Dockerfile` (based on `mcr.microsoft.com/devcontainers/dotnet:1-10.0-noble`)
+- **Features**: Node.js 24+ and GitHub CLI
+- **Post-create bootstrap**: Restores NuGet packages, runs frontend `npm ci`, and builds the solution
+
+## Git Credentials Setup
+
+I did this to avoid getting commits from the wrong user. This is optional for you. If you have the straight forward setup, you don't need to mount ~/.ssh as the Forwarding should work fine. This is just for the edge case of having multiple GitHub accounts and needing to use different SSH keys for each.
+
+The DevContainer is configured for SSH-based Git access using two GitHub accounts (personal and company). The host `~/.ssh` directory is mounted read-only at `/root/.ssh-host` and copied to `/root/.ssh` with correct permissions during container creation.
+
+### Why the copy step?
+
+SSH refuses to use a config file that is world-writable, which is common when `~/.ssh` is mounted from a Windows host filesystem. Mounting to a staging path and copying to `/root/.ssh` with `chmod 600`/`700` fixes this without modifying the host files.
+
+### Multi-account SSH config
+
+The host `~/.ssh/config` defines two named GitHub hosts:
+
+```
+Host github.com-personal
+  HostName github.com
+  IdentityFile ~/.ssh/youruser_github
+
+Host github.com
+  HostName github.com
+  IdentityFile ~/.ssh/yourcompany_github
+```
+
+Use the host alias matching the account when cloning:
+
+```bash
+# Personal repos
+git clone git@github.com-personal:your-username/your-repo.git
+
+# Company repos
+git clone git@github.com:omnitech-org/your-repo.git
+```
+
+Verify both accounts inside the container:
+
+```bash
+ssh -T git@github.com-personal
+ssh -T git@github.com
+```
+
+### Prerequisites (one-time host setup)
+
+1. SSH keys for both accounts must exist in `~/.ssh` on the host machine
+2. Both public keys must be registered in the respective GitHub accounts ([GitHub SSH settings](https://github.com/settings/keys))
+3. The `~/.ssh/config` file on the host must define the `github.com-personal` host alias as shown above
+
+## Environment Variables
+
+The container exports these environment variables:
+
+- `NODE_ENV=development` — Frontend runs in development mode (hot reload, source maps)
+- `PATH` — Includes `/usr/local/share/dotnet-tools` and `/root/.dotnet/tools` for CLI tools (CSharpier, Aspire, etc.)
+
+## Post-Create Setup
+
+The `postCreateCommand` runs automatically after container creation:
+
+1. `dotnet restore BikeTracking.slnx`
+2. `npm ci --prefix src/BikeTracking.Frontend`
+3. `dotnet build BikeTracking.slnx`
+
+SDK/tool installation (required .NET SDK, CSharpier, Aspire CLI) is baked into the image build in `.devcontainer/Dockerfile`, not installed at container start.
+
+**Output**: Terminal shows progress; container is ready when build succeeds.
+
+## Debugging & Troubleshooting
+
+### Git commands fail inside container
+
+**Symptom**: `git clone` returns "Permission denied" or authentication errors
+
+**Solution**:
+- Verify SSH key exists on host: `ls ~/.ssh/id_ed25519` (or `id_rsa`)
+- Verify key is added to GitHub: https://github.com/settings/keys
+- Inside container, test connectivity: `ssh -T git@github.com`
+- If still failing, use Git credential helper instead: `git config --global credential.helper store`
+
+### SSH mount not working (Windows)
+
+**Symptom**: `ssh -T git@github.com` returns "ssh: connect to host... refused"
+
+**Solution**:
+- Ensure OpenSSH server is running on Windows (Control Panel → Optional Features → OpenSSH Server)
+- Or use Git credential helper (`credential.helper store`) instead
+- SSH mounting is most reliable on macOS/Linux; Windows users should consider credential helper
+
+### Container build fails
+
+**Symptom**: "failed to solve with frontend dockerfile.v0"
+
+**Solution**:
+- Rebuild container: `Ctrl+Shift+P` → "Dev Containers: Rebuild Container"
+- Check Docker Desktop is running (Windows/macOS)
+- Check disk space (DevContainer images are ~2-3 GB)
+
+### Node modules or NuGet packages missing
+
+**Symptom**: `npm: command not found` or `dotnet: command not found`
+
+**Solution**:
+- Ensure `postCreateCommand` completed successfully (check terminal output)
+- Manually run: `npm ci --prefix src/BikeTracking.Frontend`
+- Manually run: `dotnet restore` from repo root
+
+## Security
+
+### SSH Keys
+
+- SSH keys are mounted **read-only** — cannot be modified inside container
+- Private keys never leave host machine
+- Pre-commit hooks prevent accidental credential commits
+
+### Git Credentials
+
+- Use SSH keys or GitHub CLI authentication (recommended)
+- Never commit credentials to repository
+- `.gitignore` prevents `git config --global --show-origin credential.helper` output
+- For CI/CD, use GitHub deploy keys or `GITHUB_TOKEN` environment variable
+
+Note the devcontainer.json setup with
+
+"remoteEnv": {
+    "PATH": "${containerEnv:PATH}:/usr/local/share/dotnet-tools:/root/.dotnet/tools",
+    "SSH_AUTH_SOCK": "/ssh-agent"
+  },
+  "mounts": [
+    "source=${env:SSH_AUTH_SOCK},target=/ssh-agent,type=bind",
+    "source=/mnt/c/Users/klogan/.ssh,target=/root/.ssh-host,type=bind,readonly"
+  ]
+
+### Secrets Management
+
+- Local development: Use .NET User Secrets or environment variables
+- CI/CD: Use GitHub repository secrets or Azure Key Vault
+- DevContainer environment variables in `devcontainer.json` are for non-sensitive values only
+
+## Advanced Customization
+
+### Adding VS Code Extensions
+
+Edit `devcontainer.json`, add extension ID to `customizations.vscode.extensions`:
+
+```json
+"extensions": [
+  "GitHub.Copilot",
+  "eamodio.gitlens"
+]
+```
+
+Rebuild container: `Ctrl+Shift+P` → "Dev Containers: Rebuild Container"
+
+### Changing Node.js or .NET Version
+
+- Change **Node.js** in `devcontainer.json` features:
+
+```json
+"features": {
+  "ghcr.io/devcontainers/features/node:1": {
+    "version": "22"  // Change to different Node version
+  }
+}
+```
+
+- Change **.NET SDK** in `.devcontainer/Dockerfile` by updating `REQUIRED_DOTNET_SDK_VERSION`, then rebuild the container.
+
+### Mounting Additional Volumes
+
+Edit `mounts` array to add more host directories (e.g., for shared data):
+
+```json
+"mounts": [
+  "source=${localEnv:HOME}${localEnv:USERPROFILE}/.ssh,target=/root/.ssh,readonly",
+  "source=/path/on/host,target=/path/in/container"
+]
+```
+
+## Resources
+
+- [Dev Containers Documentation](https://containers.dev/)
+- [GitHub SSH Keys Guide](https://docs.github.com/en/authentication/connecting-to-github-with-ssh)
+- [GitHub CLI Documentation](https://cli.github.com/)

.devcontainer/devcontainer.Dockerfile

@@ -0,0 +1,26 @@
+# syntax=docker/dockerfile:1.7
+
+FROM mcr.microsoft.com/devcontainers/dotnet:1-10.0-noble
+
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+ARG REQUIRED_DOTNET_SDK_VERSION=10.0.200
+
+# Ensure the SDK version from global.json is available in the image.
+RUN if dotnet --list-sdks | grep -q "^${REQUIRED_DOTNET_SDK_VERSION}"; then \
+      echo ".NET SDK ${REQUIRED_DOTNET_SDK_VERSION} already installed."; \
+    else \
+      echo "Installing .NET SDK ${REQUIRED_DOTNET_SDK_VERSION}..." && \
+      curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh && \
+      bash /tmp/dotnet-install.sh --version "${REQUIRED_DOTNET_SDK_VERSION}" --install-dir /usr/share/dotnet --no-path && \
+      rm -f /tmp/dotnet-install.sh; \
+    fi
+
+# Install required CLI tools once at image build time.
+RUN mkdir -p /usr/local/share/dotnet-tools && \
+    dotnet tool install csharpier --tool-path /usr/local/share/dotnet-tools
+    
+RUN curl -fsSL https://aspire.dev/install.sh | bash
+
+ENV PATH="/usr/local/share/dotnet-tools:/root/.dotnet/tools:${PATH}"
+

.devcontainer/devcontainer.json

@@ -0,0 +1,65 @@
+{
+  "name": "Bike Tracking - Full Stack",
+  "build": {
+    "dockerfile": "devcontainer.Dockerfile",
+    "context": ".."
+  },
+  "features": {
+    "ghcr.io/devcontainers/features/node:1": {
+      "version": "24"
+    },
+    "ghcr.io/devcontainers/features/github-cli:1": {}
+  },
+  "containerEnv": {
+    "NODE_ENV": "development"
+  },
+  "postCreateCommand": "mkdir -p /root/.ssh && cp /root/.ssh-host/* /root/.ssh/ && chmod 700 /root/.ssh && chmod 600 /root/.ssh/config /root/.ssh/aligneddev_github /root/.ssh/omnitech_github && chmod 644 /root/.ssh/*.pub /root/.ssh/known_hosts 2>/dev/null; dotnet dev-certs https --trust && dotnet restore BikeTracking.slnx && npm ci --prefix src/BikeTracking.Frontend && dotnet build BikeTracking.slnx",
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "ms-dotnettools.csharp",
+        "ms-dotnettools.vscode-dotnet-runtime",
+        "Ionide.Ionide-fsharp",
+        "dbaeumer.vscode-eslint",
+        "esbenp.prettier-vscode",
+        "csharpier.csharpier-vscode",
+        "ms-azuretools.vscode-docker",
+        "ms-vscode.makefile-tools",
+        "ms-vscode-remote.remote-containers",
+        "ms-vscode-remote.remote-ssh",
+        "microsoft-aspire.aspire-vscode",
+        "ms-dotnettools.csdevkit",
+        "eamodio.gitlens"
+      ],
+      "settings": {
+        "dotnet.defaultSolutionOrFolder": "${workspaceFolder}/BikeTracking.slnx",
+        "[csharp]": {
+          "editor.defaultFormatter": "csharpier.csharpier-vscode",
+          "editor.formatOnSave": true
+        },
+        "[fsharp]": {
+          "editor.defaultFormatter": "Ionide.Ionide-fsharp",
+          "editor.formatOnSave": true
+        },
+        "[typescript]": {
+          "editor.defaultFormatter": "esbenp.prettier-vscode",
+          "editor.formatOnSave": true
+        },
+        "[json]": {
+          "editor.defaultFormatter": "esbenp.prettier-vscode",
+          "editor.formatOnSave": true
+        },
+        "eslint.validate": ["javascript", "typescript", "typescriptreact"]
+      }
+    }
+  },
+  "remoteUser": "root",
+  "remoteEnv": {
+    "PATH": "${containerEnv:PATH}:/usr/local/share/dotnet-tools:/root/.dotnet/tools",
+    "SSH_AUTH_SOCK": "/ssh-agent"
+  },
+  "mounts": [
+    "source=${env:SSH_AUTH_SOCK},target=/ssh-agent,type=bind",
+    "source=/mnt/c/Users/klogan/.ssh,target=/root/.ssh-host,type=bind,readonly"
+  ]
+}

.github/dependabot.yml

@@ -1,11 +1,11 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-
-version: 2
-updates:
-  - package-ecosystem: "" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "weekly"
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "weekly"