I got tired of using ordinary devcontainers. Here's what I wanted to build instead:
We sandbox our agents and control their context via clever mounting. See ADR005.md.
If you're unfamiliar, the Universal Base Image 10 is what they (and their customers) put at the core of any containerized workload.
That makes them incredibly stable. EOL for this base image is in 2035.
Each layer of the Containerfile is decoupled from the other layers, so that only a few layers need to be rebuilt when things change. More details in ADR002.md and ADR003.md.
I tend to go the extra few steps up front to strip out excess personal/opinionated config, but there's still plenty of opinions included. I'm willing to accept any pull request that maintains my defaults.
See docs/ADR*.md