mirror of
https://github.com/tiennm99/composes.git
synced 2026-10-04 04:12:56 +00:00
tiennm99
07991dabaf
Bind-mount /var/run/docker.sock so the universal-docker mod's CLI has a daemon to talk to, and document the sibling-container and permission caveats in the service README.
43 lines
1.7 KiB
Markdown
43 lines
1.7 KiB
Markdown
# code-server
|
|
|
|
[VS Code in the browser](https://github.com/linuxserver/docker-code-server),
|
|
from the LinuxServer image, set up as a full remote dev box.
|
|
|
|
Comes with Go, Node.js 24, Python 3, pnpm, and zsh via LinuxServer mods, plus
|
|
`gh`, `git`, `ffmpeg`, `imagemagick`, and other CLI tools through
|
|
`INSTALL_PACKAGES`. Git author/committer identity is injected from `.env`.
|
|
|
|
## Docker access
|
|
|
|
The `universal-docker` mod installs the Docker CLI but no daemon, so the host
|
|
socket is bind-mounted at `/var/run/docker.sock` to give it something to talk
|
|
to. Containers started from inside are siblings on the host, not children --
|
|
bind mounts in them resolve against host paths, so a path under `/config` will
|
|
not exist unless the same path exists on the host.
|
|
|
|
The socket is owned by the host's `docker` group, which the `abc` user inside
|
|
the container is not a member of; run `docker` under `sudo` (the `SUDO_PASSWORD`
|
|
is the same `PASSWORD`) or add the group by hand. Handing a container the
|
|
socket is equivalent to giving it root on the host -- that is accepted here
|
|
because this is a single-user dev box.
|
|
|
|
## Environment
|
|
|
|
| Variable | Purpose |
|
|
| --- | --- |
|
|
| `PASSWORD` | Web UI login, also the in-container sudo password. **A blank value disables authentication entirely.** |
|
|
| `GIT_NAME` / `GIT_EMAIL` | Git author and committer identity |
|
|
|
|
Generate a password with `openssl rand -base64 24`.
|
|
|
|
## Networking
|
|
|
|
Listens on `8443`. No ports are published — point the domain at that port in
|
|
Coolify or Dokploy. See the [root README](../README.md) for why.
|
|
|
|
## Storage
|
|
|
|
Everything lives in the `code-server-config` named volume mounted at `/config`;
|
|
the default workspace is `/config/workspace`. Removing the volume wipes your
|
|
files, settings, and extensions.
|