feat: install basic tooling

Author: nomicode

.devcontainer/Brewfile

@@ -0,0 +1,16 @@
+brew "bash-completion@2"
+brew "direnv"
+brew "fd"
+brew "gcc"
+brew "gh"
+brew "git"
+brew "moreutils"
+brew "the_silver_searcher"
+
+# TODO
+# -----------------------------------------------------------------------------
+
+# - [ ] ripgrep
+# - [ ] fzf
+#   - [ ] Install https://github.com/junegunn/fzf in devcontainer
+# - [ ] Install hooks in dotfiles repo

.devcontainer/Brewfile.lock.json

@@ -1,9 +1,11 @@
 # Use the latest Debian release
 FROM mcr.microsoft.com/vscode/devcontainers/base:bullseye as base
 
+ENV HOMEBREW_INSTALL_FROM_API='true'
 ENV BREW_BIN='/home/linuxbrew/.linuxbrew/bin'
+ENV BREW_SBIN='/home/linuxbrew/.linuxbrew/sbin'
 ENV SYS_PATH='/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
-ENV PATH="${BREW_BIN}:${SYS_PATH}"
+ENV PATH="${BREW_SBIN}:${BREW_BIN}:${SYS_PATH}"
 
 COPY . /opt/devcontainer
 WORKDIR /opt/devcontainer

.devcontainer/Dockerfile

@@ -0,0 +1,15 @@
+#!/bin/sh -ex
+
+# Fix Homebrew ownership
+# =============================================================================
+
+# Allow the current user to make changes to Homebrew by changing ownership of
+# the `HOMEBREW_PREFIX` directory and its contents to the current user
+
+if test -z "${HOMEBREW_PREFIX:=}"; then
+    HOMEBREW_PREFIX="/home/linuxbrew/.linuxbrew"
+fi
+
+whoami="$(whoami)"
+
+sudo chown -R "${whoami}" "${HOMEBREW_PREFIX}"

.devcontainer/fix-homebrew-owner.sh

@@ -1,4 +1,12 @@
 #!/bin/bash -e
 
+sudo npm update --global
+
+# Install `shellcheck` and `shfmt` independently from Trunk to avoid VS Code
+# extension errors when editing shell scripts outside of a Trunk project or
+# before initializing Trunk.
+
 npm install --global \
+    shellcheck \
+    shfmt \
     trunk

.devcontainer/run.d/01_npm.sh

@@ -1,28 +1,36 @@
-#!/bin/sh -e
+#!/bin/sh -ex
 
 GH_RAW_URL=https://raw.githubusercontent.com
 INSTALL_SCRIPT=install.sh
 INSTALL_URL="${GH_RAW_URL}/Homebrew/install/HEAD/${INSTALL_SCRIPT}"
 
 # Signal to the Homebrew installer that we can run as root
-touch /.dockerenv
+sudo touch /.dockerenv
 
 tmp_dir="$(mktemp -d)"
 clean() { rm -rf "${tmp_dir}"; }
 trap clean EXIT
 
-cd "${tmp_dir}"
-wget -q "${INSTALL_URL}" -O "${INSTALL_SCRIPT}"
-chmod 755 "${INSTALL_SCRIPT}"
-NONINTERACTIVE=false
-export NONINTERACTIVE
-HOMEBREW_INSTALL_FROM_API=true
-export HOMEBREW_INSTALL_FROM_API
-"./${INSTALL_SCRIPT}"
+# Run the installation in a subshell to allow us to snap back to the original
+# working directory on exit
+(
+    cd "${tmp_dir}"
+    wget -q "${INSTALL_URL}" -O "${INSTALL_SCRIPT}"
+    chmod 755 "${INSTALL_SCRIPT}"
+    NONINTERACTIVE=false
+    export NONINTERACTIVE
+    HOMEBREW_INSTALL_FROM_API=true
+    export HOMEBREW_INSTALL_FROM_API
+    "./${INSTALL_SCRIPT}"
+)
 
-brew install \
-    bash-completion@2 \
-    direnv \
-    gcc \
-    gh \
-    git
+# Get absolute path to script directory
+script_path="$(realpath "${0}")"
+script_dir="$(dirname "${script_path}")"
+
+# Fix Homebrew owner
+"${script_dir}/../fix-homebrew-owner.sh"
+
+brew update
+brew bundle
+brew doctor

.devcontainer/run.d/02_homebrew.sh

@@ -1,22 +1,40 @@
 #!/bin/sh -ex
 
+# Update content
+# ============================================================================
+
 # Run whenever the contents of the workspace mount are updated
 # https://containers.dev/implementors/json_reference/#lifecycle-scripts
 
-workspace_dir="${1:=}"
-
+# Print help if no argument is provided
+workspace_dir="${1}"
 if test -z "${workspace_dir}"; then
     echo "Usage: ${0} WORKSPACE_DIR" >&2
     exit 1
 fi
 
-# Remove ACLs on files in the workspace mount so that the default system umask
-# is respected
-# https://github.com/orgs/community/discussions/26026#discussioncomment-3250078
 whoami="$(whoami)"
+
+# Fix workspace umask
+# ----------------------------------------------------------------------------
+
+# After applying the changes below, the current user's default umask will
+# be respected for all files in the workspace directory
+
+# Change the ownership of the workspace directory and its contents to the
+# current user
 sudo chown -R "${whoami}" "${workspace_dir}"
+# Remove all extended ACL entries (preserved by Docker during mount)
 sudo setfacl -bnR "${workspace_dir}"
 
+# Fix Homebrew ownership
+# ----------------------------------------------------------------------------
+
+./fix-homebrew-owner.sh
+
+# Allow direnv
+# ----------------------------------------------------------------------------
+
 # The `PATH` variable set in Dockerfile should be picked up when image is built
 # and used as devcontainer (but it seems this is not the case)
 echo "${PATH}"

.devcontainer/update-content.sh

@@ -14,7 +14,7 @@ lint:
     - gitleaks@8.16.3
     - hadolint@2.12.0
     - prettier@2.8.8
-    - semgrep@1.20.0
+    - semgrep@1.21.0
     - shellcheck@0.9.0
     - shfmt@3.5.0
     - yamllint@1.31.0