Skip to content

Pushed to develop and requested to merge in pr #16#15

Closed
d4rm5 wants to merge 8 commits intotheredguild:mainfrom
d4rm5:main
Closed

Pushed to develop and requested to merge in pr #16#15
d4rm5 wants to merge 8 commits intotheredguild:mainfrom
d4rm5:main

Conversation

@d4rm5
Copy link
Copy Markdown
Collaborator

@d4rm5 d4rm5 commented Aug 26, 2025

This pull request introduces a major restructuring of the devcontainer setup, along with significant improvements to the CI workflow and development environment.

Devcontainer Restructuring

  • Multiple Devcontainer Variants: The project now supports multiple devcontainer variants within the .devcontainer directory. This allows for different development
    environments tailored to specific needs (e.g., auditor, hardened, isolated, minimal, legacy).
  • Comprehensive Documentation: The README has been updated with comprehensive documentation for each devcontainer variant, explaining their purpose and included tools.

CI Workflow Enhancements

  • Tiered Testing: The GitHub Actions workflow for testing the devcontainers has been updated to use a tiered approach:
    • A "Minimal Tools" test runs on all containers to verify baseline functionality (e.g., Foundry).
    • An "Auditor Tools" test runs on auditor, hardened, and isolated containers to check for specialized tools like Slither, Mythril, and Echidna.
    • An "Isolation" test runs exclusively on the isolated container to ensure its security features (read-only filesystem, no network) are active.

Python Environment Management

  • asdf replaced with uv: The python version management has been migrated from asdf to uv. uv is a faster and more modern python package installer and resolver.

Other Changes

  • Minor updates to the README file.

d4rm5 added 8 commits August 21, 2025 13:21
…`.devcontainer`

(devcontainer): Added prebuilt devcontainers: auditor, minimal, legacy and legacy-minimal

(actions): Added workflow to build and test devcontainers
…tation

- Restructure devcontainer directory layout for better organization
- Add new isolated and hardened variants for enhanced security options
- Rename legacy-theredguild to legacy for clarity
- Remove legacy-minimal variant (functionality moved to minimal)
- Add comprehensive comments to all Dockerfile and devcontainer.json files
- Update README.md with accurate variant descriptions and use cases

New variants:
- isolated: Maximum security isolation with read-only filesystem
- hardened: Enhanced security with maintained network connectivity
- auditor: Specialized audit environment with Docker-in-Docker
- minimal: Essential tools with basic security hardening
- legacy: Complete toolchain (original experience)

Security improvements:
- Capability dropping across all variants
- Security options and hardening features
- Resource limits and isolation mechanisms
- Comprehensive documentation of security features

This commit provides users with clear choices for different security
requirements while maintaining the comprehensive tooling of the original
devcontainer.
This commit modernizes the Python development environment by replacing asdf with uv for Python version and package management. This change simplifies the Dockerfiles and provides a faster, more efficient development workflow.

Key changes:

- Replaced asdf with uv for Python installation and management across all devcontainer variants.

- Updated Dockerfiles to use a multi-stage installation process for system and Python dependencies, improving clarity and maintainability.

- Installed Python 3.12 using uv in all devcontainer variants.

- Updated the README.md to remove asdf instructions for Python and added a comprehensive guide for using uv.

- Updated the GitHub Actions workflow to reflect the devcontainer changes.
@d4rm5 d4rm5 requested a review from mattaereal August 26, 2025 01:38
d4rm5 added a commit that referenced this pull request Aug 26, 2025
@d4rm5 d4rm5 closed this Aug 26, 2025
@d4rm5 d4rm5 changed the title feat: restructure devcontainers and improve CI Pushed to develop and requested to merge in pr #16 Aug 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant