From 8d875af26623601b27a44985779d36090d9cec25 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 13 Jul 2026 22:50:32 +0000 Subject: [PATCH] docs: link recommended Dev Container templates from READMEs Point users to the bare-devcontainer/templates repository, which provides the recommended Dev Container configuration for each image (security hardening and, where applicable, cache directory volume mounts): - Expand the template section in the root README to describe what the templates provide. - Add a 'Dev Container Template' section to each image README linking to its corresponding template. The cache-mount wording is omitted for the debian and node templates, which define no cache volume mounts. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01RBmRbSubXmgPVedqR727rh --- README.md | 2 +- bun/README.md | 7 +++++++ debian/README.md | 6 ++++++ golang/README.md | 7 +++++++ mise/README.md | 7 +++++++ node/README.md | 6 ++++++ rust/README.md | 7 +++++++ terraform/README.md | 7 +++++++ uv/README.md | 7 +++++++ zig/README.md | 7 +++++++ 10 files changed, 62 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 227dddf..74d1890 100644 --- a/README.md +++ b/README.md @@ -43,7 +43,7 @@ See the individual image directories for more details on each image, including a ### Using a Dev Container Template (Recommended) -The quickest way to get started is to use one of the pre-built templates from the [bare-devcontainer/templates](https://github.com/bare-devcontainer/templates) repository. These templates provide ready-to-use Dev Container configurations for available images. +The quickest way to get started is to use one of the pre-built templates from the [bare-devcontainer/templates](https://github.com/bare-devcontainer/templates) repository. Each image in this repository has a corresponding template that provides the recommended Dev Container configuration out of the box, including security hardening (dropping all Linux capabilities, `no-new-privileges`, running as a non-root user) and volume mounts that persist language and package manager cache directories for faster rebuilds. ### Using Directly in devcontainer.json diff --git a/bun/README.md b/bun/README.md index 0a68d46..0de48cb 100644 --- a/bun/README.md +++ b/bun/README.md @@ -13,6 +13,13 @@ verified against Bun's release signing key before installation. ghcr.io/bare-devcontainer/bun: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/bun). +It provides the recommended configuration for this image, including security hardening and +volume mounts that persist cache directories for faster rebuilds. + ## Tags diff --git a/debian/README.md b/debian/README.md index 6ead0f3..0470eb4 100644 --- a/debian/README.md +++ b/debian/README.md @@ -8,6 +8,12 @@ Minimal Debian base image for dev containers. All other images in this repositor ghcr.io/bare-devcontainer/debian: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/debian). +It provides the recommended configuration for this image, including security hardening. + ## Tags diff --git a/golang/README.md b/golang/README.md index 2d0ff40..c6e19d2 100644 --- a/golang/README.md +++ b/golang/README.md @@ -10,6 +10,13 @@ The Go toolchain is downloaded directly from [go.dev](https://go.dev/dl/) and ve ghcr.io/bare-devcontainer/golang: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/golang). +It provides the recommended configuration for this image, including security hardening and +volume mounts that persist cache directories for faster rebuilds. + ## Tags diff --git a/mise/README.md b/mise/README.md index 301f6ef..7fdd9c0 100644 --- a/mise/README.md +++ b/mise/README.md @@ -12,6 +12,13 @@ The mise binary is downloaded from GitHub Releases and verified with a minisign ghcr.io/bare-devcontainer/mise: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/mise). +It provides the recommended configuration for this image, including security hardening and +volume mounts that persist cache directories for faster rebuilds. + ## Tags diff --git a/node/README.md b/node/README.md index 3734646..287f48d 100644 --- a/node/README.md +++ b/node/README.md @@ -10,6 +10,12 @@ The Node.js binary is downloaded from nodejs.org and verified against a GPG sign ghcr.io/bare-devcontainer/node: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/node). +It provides the recommended configuration for this image, including security hardening. + ## Tags diff --git a/rust/README.md b/rust/README.md index d1900d3..122f983 100644 --- a/rust/README.md +++ b/rust/README.md @@ -10,6 +10,13 @@ Dev container image with Rust installed via `rustup`, built on the [debian](../d ghcr.io/bare-devcontainer/rust: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/rust). +It provides the recommended configuration for this image, including security hardening and +volume mounts that persist cache directories for faster rebuilds. + ## Tags diff --git a/terraform/README.md b/terraform/README.md index 4470110..f1ef3d6 100644 --- a/terraform/README.md +++ b/terraform/README.md @@ -15,6 +15,13 @@ key before installation. ghcr.io/bare-devcontainer/terraform: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/terraform). +It provides the recommended configuration for this image, including security hardening and +volume mounts that persist cache directories for faster rebuilds. + ## Tags diff --git a/uv/README.md b/uv/README.md index df23718..67c4196 100644 --- a/uv/README.md +++ b/uv/README.md @@ -15,6 +15,13 @@ attestation bundle is fetched from GitHub's public REST API). ghcr.io/bare-devcontainer/uv: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/uv). +It provides the recommended configuration for this image, including security hardening and +volume mounts that persist cache directories for faster rebuilds. + ## Tags diff --git a/zig/README.md b/zig/README.md index fe5da60..5772d95 100644 --- a/zig/README.md +++ b/zig/README.md @@ -10,6 +10,13 @@ The Zig binary is downloaded from ziglang.org and verified with a minisign signa ghcr.io/bare-devcontainer/zig: ``` +## Dev Container Template + +A ready-to-use Dev Container template for this image is available at +[bare-devcontainer/templates](https://github.com/bare-devcontainer/templates/tree/main/src/zig). +It provides the recommended configuration for this image, including security hardening and +volume mounts that persist cache directories for faster rebuilds. + ## Tags