wyrd/tools
esc

    ↑↓ Move ↵ Open Wyrd base image results first Search by Pagefind

    Wyrd base image

    Microsoft's Ubuntu Dev Container base with s6-overlay as PID 1.

    A Dev Container image that keeps the tools, non-root vscode user and metadata of Microsoft's Ubuntu base, adds s6-overlay as PID 1 for long-running services, and limits the vscode user's sudo to package installs and service control.

    Use in devcontainer.json

    "image": "ghcr.io/wyrd-company/devcontainers/base"
    Read the docs Star on GitHub Other install methods
    A terminal shows s6-svscan as PID 1, a sudo apt-get install of jq, a list of s6-rc services, and sudo id refused for want of a password.
    Inside the noble image as vscode, s6-overlay is PID 1, sudo installs a package and lists s6 services, and other sudo commands are denied.

    What it does

    1. s6-overlay 3 runs as PID 1, so services start, restart and stop under supervision.

    2. Ubuntu 24.04 LTS and 26.04 LTS variants, each for amd64 and arm64.

    3. Rolling tags name the Ubuntu release, so a tag never silently moves to another release.

    4. Every build also gets a dated immutable tag, and twelve are kept for rollback.

    5. The vscode user may use sudo only to install packages and control s6 services.

    6. Images are published with provenance and SBOM attestations.

    Install

    Image

    ghcr.io/wyrd-company/devcontainers/base

    Use in devcontainer.json

    "image": "ghcr.io/wyrd-company/devcontainers/base"

    Tags

    TagBaseArchitectures
    noble Ubuntu 24.04 LTS amd64, arm64
    ubuntu24.04 Ubuntu 24.04 LTS amd64, arm64
    resolute Ubuntu 26.04 LTS amd64, arm64
    ubuntu26.04 Ubuntu 26.04 LTS amd64, arm64

    Documentation

    Guide

    Start

    Reference

    Releases

    Latest 1.0.0 Release notes on GitHub

    Features

    • An Ubuntu image that is based on the Microsoft Dev Container base image. It keeps the upstream tools, the non-root vscode user and the Dev Container metadata.
    • s6-overlay 3 runs as PID 1. Add services as s6-rc definitions.
    • Variants noble (Ubuntu 24.04) and resolute (Ubuntu 26.04), each for amd64 and arm64. Each tag names its Ubuntu release, so a tag never changes to another release.
    • The vscode user has passwordless sudo only for apt-get and apt update and install, and for s6-overlay service control (s6-svc, s6-svstat and s6-rc). All other sudo commands are denied.
    All releases