lucasvmigotto/devenv repository overview

⁠devenv - v1.2.0

Reproducible, non-root DevContainer⁠ images for Debian, Ubuntu, Alpine, and Arch Linux.

⁠Features

• Non-root by default — a developer user (UID 1000) with passwordless sudo or doas.
• ZSH + Spaceship prompt and Nerd Fonts (FiraCode, FiraMono, NerdFontsSymbolsOnly), driven by the dottod⁠ dotfiles.
• Persistent caches — every language image declares VOLUMEs for its dependency caches, mapped under /home/developer, so caches survive container rebuilds.
• 28 languages across 4 distros, built and pushed with multi-arch Buildx, type=gha layer caching, and SLSA provenance.
• Flutter with Android SDK — Flutter images bundle a JDK and the Android SDK (commandline-tools, platforms, build-tools), pre-cached engine artifacts, and VOLUMEs for .pub-cache, .gradle, and .android.

⁠Documentation

Full documentation — architecture, image catalog, usage, and development guides: https://devenv.lucasvmigotto.me⁠

⁠Tags

⁠Base images

Tag pattern: {distro}-{version} (sudo by default; append -doas). latest is an alias for debian-trixie.

Examples: debian-trixie, debian-trixie-doas, ubuntu-noble, alpine-3.23, archlinux-base.

⁠Language images

Tag pattern: {lang}-{version}-{distro} (e.g. go-1.26-debian, python-3.14-alpine).

Example variant tags: node-24.20.0-npm-debian, flutter-3.47.0-jdk21-ubuntu.

Upstream glibc-linked toolchains are why some images skip Alpine (musl); see the manifest⁠ as the single source of truth for the full tag matrix.

⁠Quick start

# base image (interactive zsh)
docker run -it --rm lucasvmigotto/devenv:latest

# a language image
docker run -it --rm lucasvmigotto/devenv:go-1.26-debian

⁠Persistent caches

Declared VOLUMEs are anonymous by default; use named volumes to persist them across runs:

docker run -it --rm \
  -v rust-cargo:/home/developer/.cargo \
  lucasvmigotto/devenv:rust-1.89-debian

⁠DevContainer usage

.devcontainer/devcontainer.json:

{
  "image": "lucasvmigotto/devenv:go-1.26-debian",
  "remoteUser": "developer"
}

docker-compose.yml:

services:
  dev:
    image: lucasvmigotto/devenv:rust-1.89-debian
    user: developer
    volumes:
      - rust-cargo:/home/developer/.cargo
      - ./:/workspace
    working_dir: /workspace

volumes:
  rust-cargo:

⁠Languages & cache volumes

Every language image declares VOLUMEs (owned by developer, under $HOME) for its dependency caches:

⁠Privilege escalation

The non-root developer user has passwordless escalation. Base images default to sudo; append -doas to the tag for doas:

docker run -it --rm lucasvmigotto/devenv:debian-trixie-doas

⁠Build from source

The base image is a single parametrized Dockerfile:

docker build -f .docker/base.Dockerfile \
    --build-arg _BASE_IMAGE=debian:trixie-slim \
    --build-arg _DISTRO=debian \
    --build-arg _PRIV_TOOL=sudo \
    -t devenv:debian-trixie .

Source and build matrix: https://github.com/lucasvmigotto/devenv/tree/1.2.0⁠.