// .devcontainer/devcontainer.json
{
  "name": "My Project Dev",
 
  // ベースイメージ（シンプルな場合）
  "image": "mcr.microsoft.com/devcontainers/typescript-node:20-bookworm",
 
  // または Dockerfile を使う場合
  // "build": {
  //   "dockerfile": "Dockerfile",
  //   "context": "..",
  //   "args": { "NODE_VERSION": "20" }
  // },
 
  // または Docker Compose を使う場合
  // "dockerComposeFile": "docker-compose.yml",
  // "service": "app",
  // "workspaceFolder": "/workspace",
 
  // Features (追加ツールのモジュラーインストール)
  "features": {
    "ghcr.io/devcontainers/features/git:1": {},
    "ghcr.io/devcontainers/features/github-cli:1": {},
    "ghcr.io/devcontainers/features/docker-in-docker:2": {},
    "ghcr.io/devcontainers/features/node:1": {
      "version": "20"
    }
  },
 
  // VS Code 設定
  "customizations": {
    "vscode": {
      "extensions": [
        "dbaeumer.vscode-eslint",
        "esbenp.prettier-vscode",
        "bradlc.vscode-tailwindcss",
        "ms-vscode.vscode-typescript-next"
      ],
      "settings": {
        "editor.formatOnSave": true,
        "editor.defaultFormatter": "esbenp.prettier-vscode",
        "typescript.tsdk": "node_modules/typescript/lib"
      }
    }
  },
 
  // ポートフォワーディング
  "forwardPorts": [3000, 5432, 6379],
  "portsAttributes": {
    "3000": { "label": "App", "onAutoForward": "openBrowser" },
    "5432": { "label": "PostgreSQL", "onAutoForward": "silent" },
    "6379": { "label": "Redis", "onAutoForward": "silent" }
  },
 
  // ライフサイクルコマンド
  "postCreateCommand": "npm ci",
  "postStartCommand": "npm run db:migrate",
  "postAttachCommand": "echo 'Dev Container ready!'",
 
  // コンテナユーザー
  "remoteUser": "node",
 
  // マウント設定
  "mounts": [
    "source=${localWorkspaceFolder}/.env,target=/workspace/.env,type=bind,consistency=cached",
    "source=node_modules,target=/workspace/node_modules,type=volume"
  ],
 
  // 環境変数
  "remoteEnv": {
    "NODE_ENV": "development",
    "DATABASE_URL": "postgresql://postgres:postgres@db:5432/myapp_dev"
  }
}

# .devcontainer/Dockerfile
FROM mcr.microsoft.com/devcontainers/typescript-node:20-bookworm
 
# システムパッケージ
RUN apt-get update && apt-get install -y \
    postgresql-client \
    redis-tools \
    jq \
    && rm -rf /var/lib/apt/lists/*
 
# グローバル npm パッケージ
RUN su node -c "npm install -g \
    tsx \
    prisma \
    @biomejs/biome \
    turbo"
 
# AWS CLI (オプション)
RUN curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" \
    -o "awscliv2.zip" \
    && unzip awscliv2.zip \
    && ./aws/install \
    && rm -rf aws awscliv2.zip
 
# カスタムシェル設定
COPY .devcontainer/.zshrc /home/node/.zshrc
RUN chown node:node /home/node/.zshrc

# .devcontainer/Dockerfile (マルチステージ)
 
# ステージ1: システム依存関係
FROM mcr.microsoft.com/devcontainers/typescript-node:20-bookworm AS base
 
RUN apt-get update && apt-get install -y --no-install-recommends \
    postgresql-client-16 \
    redis-tools \
    jq \
    curl \
    gnupg \
    && rm -rf /var/lib/apt/lists/*
 
# ステージ2: CLI ツール群
FROM base AS tools
 
# Terraform
RUN curl -fsSL https://apt.releases.hashicorp.com/gpg | gpg --dearmor -o /usr/share/keyrings/hashicorp.gpg \
    && echo "deb [signed-by=/usr/share/keyrings/hashicorp.gpg] https://apt.releases.hashicorp.com bookworm main" \
    > /etc/apt/sources.list.d/hashicorp.list \
    && apt-get update && apt-get install -y terraform \
    && rm -rf /var/lib/apt/lists/*
 
# AWS CLI v2
RUN curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip" \
    && unzip awscliv2.zip && ./aws/install && rm -rf aws awscliv2.zip
 
# gcloud CLI (オプション)
# RUN curl https://dl.google.com/dl/cloudsdk/release/google-cloud-sdk.tar.gz > /tmp/gcloud.tar.gz \
#     && mkdir -p /usr/local/gcloud && tar -C /usr/local/gcloud -xf /tmp/gcloud.tar.gz \
#     && /usr/local/gcloud/google-cloud-sdk/install.sh --quiet
 
# ステージ3: 最終イメージ
FROM tools AS devcontainer
 
# Node.js グローバルパッケージ (node ユーザーで)
RUN su node -c "npm install -g \
    tsx \
    prisma \
    @biomejs/biome \
    turbo \
    wrangler"
 
# シェル設定
COPY .devcontainer/.zshrc /home/node/.zshrc
COPY .devcontainer/.p10k.zsh /home/node/.p10k.zsh
RUN chown -R node:node /home/node
 
# ワークスペース
WORKDIR /workspace

# .devcontainer/docker-compose.yml
version: '3.8'
 
services:
  app:
    build:
      context: ..
      dockerfile: .devcontainer/Dockerfile
    volumes:
      - ..:/workspace:cached
      - node_modules:/workspace/node_modules
    command: sleep infinity
    networks:
      - dev
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_started
 
  db:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
      POSTGRES_DB: myapp_dev
    volumes:
      - pgdata:/var/lib/postgresql/data
      - ../scripts/init-db.sql:/docker-entrypoint-initdb.d/init.sql
    ports:
      - "5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - dev
 
  redis:
    image: redis:7-alpine
    restart: unless-stopped
    ports:
      - "6379:6379"
    networks:
      - dev
 
volumes:
  node_modules:
  pgdata:
 
networks:
  dev:

{
  // Docker run に渡す追加引数
  "runArgs": [
    "--cap-add=SYS_PTRACE",   // デバッガのアタッチに必要
    "--security-opt", "seccomp=unconfined",  // パフォーマンスプロファイリング
    "--name", "my-devcontainer",
    "--network", "host",       // ホストネットワークモード (Linux のみ)
    "--gpus", "all"            // GPU アクセス (ML 開発)
  ]
}

{
  // containerEnv: コンテナ全体で有効（ライフサイクルコマンドにも適用）
  "containerEnv": {
    "TZ": "Asia/Tokyo",
    "LANG": "ja_JP.UTF-8",
    "DOCKER_BUILDKIT": "1"
  },
 
  // remoteEnv: VS Code のターミナルプロセスでのみ有効
  "remoteEnv": {
    "NODE_ENV": "development",
    "DATABASE_URL": "postgresql://postgres:postgres@db:5432/myapp_dev",
    // ホストの環境変数を参照
    "LOCAL_USER": "${localEnv:USER}",
    // コンテナ内の環境変数を参照
    "PATH": "${containerEnv:PATH}:/workspace/scripts"
  }
}

// my-org-feature/devcontainer-feature.json
{
  "id": "my-org-tools",
  "version": "1.0.0",
  "name": "My Organization Development Tools",
  "description": "社内標準の開発ツールセット",
  "options": {
    "installLinter": {
      "type": "boolean",
      "default": true,
      "description": "社内カスタムリンターをインストールする"
    },
    "environment": {
      "type": "string",
      "enum": ["staging", "production"],
      "default": "staging",
      "description": "接続先環境"
    }
  }
}

#!/bin/bash
# my-org-feature/install.sh
set -e
 
# オプションの取得
INSTALL_LINTER="${INSTALLLINTER:-true}"
ENVIRONMENT="${ENVIRONMENT:-staging}"
 
echo "Installing My Org Tools..."
 
# 社内 CLI ツール
curl -fsSL https://internal.example.com/cli/install.sh | bash
 
# カスタムリンター
if [ "$INSTALL_LINTER" = "true" ]; then
    npm install -g @my-org/linter@latest
fi
 
# 環境設定ファイル
cat > /etc/my-org/config.json << EOF
{
  "environment": "$ENVIRONMENT",
  "apiEndpoint": "https://${ENVIRONMENT}.api.example.com"
}
EOF
 
echo "My Org Tools installed successfully!"

# .github/workflows/publish-feature.yml
name: Publish Dev Container Feature
 
on:
  push:
    tags:
      - 'v*'
 
jobs:
  publish:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4
 
      - name: Publish Feature
        uses: devcontainers/action@v1
        with:
          publish-features: true
          base-path-to-features: ./features
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

{
  "features": {
    "ghcr.io/my-org/devcontainer-features/my-org-tools:1": {
      "installLinter": true,
      "environment": "staging"
    }
  }
}

{
  "features": {
    // 1. まず common-utils で zsh をインストール
    "ghcr.io/devcontainers/features/common-utils:2": {
      "installZsh": true,
      "configureZshAsDefaultShell": true
    },
    // 2. 次に Node.js をインストール（zsh の PATH に追加される）
    "ghcr.io/devcontainers/features/node:1": {
      "version": "20"
    },
    // 3. 最後に Docker-in-Docker（Docker デーモン起動）
    "ghcr.io/devcontainers/features/docker-in-docker:2": {
      "dockerDashComposeVersion": "v2"
    }
  }
}

{
  "overrideFeatureInstallOrder": [
    "ghcr.io/devcontainers/features/common-utils",
    "ghcr.io/devcontainers/features/node",
    "ghcr.io/devcontainers/features/docker-in-docker"
  ]
}

// .devcontainer/devcontainer.json (Codespaces 用追加設定)
{
  "name": "My Project (Codespaces)",
  "image": "mcr.microsoft.com/devcontainers/typescript-node:20",
 
  // Codespaces 固有設定
  "hostRequirements": {
    "cpus": 4,
    "memory": "8gb",
    "storage": "32gb"
  },
 
  // Prebuild 設定（初回起動を高速化）
  "updateContentCommand": "npm ci",
  "postCreateCommand": "npm run setup",
 
  // GitHub Codespaces 固有のカスタマイズ
  "customizations": {
    "codespaces": {
      "openFiles": ["README.md", "src/index.ts"]
    },
    "vscode": {
      "extensions": [
        "GitHub.copilot",
        "dbaeumer.vscode-eslint"
      ]
    }
  },
 
  // シークレット (Codespaces Settings で設定)
  // GITHUB_TOKEN は自動注入
  // その他は Settings > Codespaces > Secrets で管理
  "secrets": {
    "DATABASE_URL": {
      "description": "PostgreSQL connection string"
    },
    "API_KEY": {
      "description": "External API key for development"
    }
  }
}

# .github/codespaces/prebuild-configuration.yml
# リポジトリ Settings > Codespaces > Prebuild configuration で設定
 
# または devcontainer.json の lifecycle commands で対応:
# "updateContentCommand" は Prebuild 時に実行される
# "postCreateCommand" は初回作成時に実行される
# "postStartCommand" は起動ごとに実行される

// .devcontainer/devcontainer.json (Prebuild 最適化)
{
  "name": "My Project (Prebuild Optimized)",
  "build": {
    "dockerfile": "Dockerfile",
    "context": "..",
    "cacheFrom": "ghcr.io/my-org/my-project-devcontainer:latest"
  },
 
  // updateContentCommand: Prebuild 時に実行される
  // → 依存関係のインストールをここで行う
  "updateContentCommand": {
    "install": "npm ci",
    "prisma": "npx prisma generate",
    "build-libs": "npm run build:libs"
  },
 
  // postCreateCommand: 初回作成時のみ
  // → DB マイグレーションなど環境固有の処理
  "postCreateCommand": {
    "migrate": "npm run db:migrate",
    "seed": "npm run db:seed",
    "hooks": "npx husky install"
  },
 
  // postStartCommand: 起動ごと
  // → 短時間で完了するタスクのみ
  "postStartCommand": "npm run dev:prepare"
}

// リポジトリの .devcontainer/devcontainer.json
{
  // 最小限のマシンスペックを指定
  "hostRequirements": {
    "cpus": 2,        // フロントエンド開発なら 2 コアで十分
    "memory": "8gb"
  }
}

// .devcontainer/devcontainer.json (フルスタック)
{
  "name": "Full Stack App",
  "dockerComposeFile": "docker-compose.yml",
  "service": "app",
  "workspaceFolder": "/workspace",
 
  "features": {
    "ghcr.io/devcontainers/features/github-cli:1": {},
    "ghcr.io/devcontainers/features/docker-in-docker:2": {}
  },
 
  "customizations": {
    "vscode": {
      "extensions": [
        "dbaeumer.vscode-eslint",
        "esbenp.prettier-vscode",
        "prisma.prisma",
        "bradlc.vscode-tailwindcss",
        "ms-azuretools.vscode-docker",
        "humao.rest-client"
      ],
      "settings": {
        "editor.formatOnSave": true,
        "editor.codeActionsOnSave": {
          "source.fixAll.eslint": "explicit"
        },
        "[prisma]": {
          "editor.defaultFormatter": "Prisma.prisma"
        }
      }
    }
  },
 
  "forwardPorts": [3000, 5432, 6379, 8025],
  "portsAttributes": {
    "3000": { "label": "Frontend", "onAutoForward": "openBrowser" },
    "5432": { "label": "PostgreSQL", "onAutoForward": "silent" },
    "6379": { "label": "Redis", "onAutoForward": "silent" },
    "8025": { "label": "MailHog UI", "onAutoForward": "notify" }
  },
 
  "postCreateCommand": "bash .devcontainer/post-create.sh",
  "postStartCommand": "npm run dev &",
  "remoteUser": "node"
}

// .devcontainer/devcontainer.json (Python FastAPI)
{
  "name": "Python FastAPI Dev",
  "build": {
    "dockerfile": "Dockerfile",
    "context": ".."
  },
 
  "features": {
    "ghcr.io/devcontainers/features/python:1": {
      "version": "3.12"
    },
    "ghcr.io/devcontainers/features/github-cli:1": {},
    "ghcr.io/devcontainers/features/docker-in-docker:2": {}
  },
 
  "customizations": {
    "vscode": {
      "extensions": [
        "ms-python.python",
        "ms-python.vscode-pylance",
        "charliermarsh.ruff",
        "ms-python.mypy-type-checker",
        "mtxr.sqltools",
        "mtxr.sqltools-driver-pg",
        "humao.rest-client"
      ],
      "settings": {
        "python.defaultInterpreterPath": "/workspace/.venv/bin/python",
        "python.terminal.activateEnvironment": true,
        "[python]": {
          "editor.defaultFormatter": "charliermarsh.ruff",
          "editor.formatOnSave": true,
          "editor.codeActionsOnSave": {
            "source.fixAll.ruff": "explicit",
            "source.organizeImports.ruff": "explicit"
          }
        }
      }
    }
  },
 
  "forwardPorts": [8000, 5432],
  "portsAttributes": {
    "8000": { "label": "FastAPI", "onAutoForward": "openBrowser" },
    "5432": { "label": "PostgreSQL", "onAutoForward": "silent" }
  },
 
  "postCreateCommand": "pip install -e '.[dev]' && alembic upgrade head",
  "postStartCommand": "uvicorn app.main:app --reload --host 0.0.0.0 --port 8000 &",
  "remoteUser": "vscode"
}

# .devcontainer/Dockerfile (Python)
FROM mcr.microsoft.com/devcontainers/python:3.12-bookworm
 
# システムパッケージ
RUN apt-get update && apt-get install -y --no-install-recommends \
    postgresql-client-16 \
    && rm -rf /var/lib/apt/lists/*
 
# uv (高速 pip 代替)
RUN curl -LsSf https://astral.sh/uv/install.sh | sh
 
# Poetry (オプション)
# RUN curl -sSL https://install.python-poetry.org | python3 -
 
WORKDIR /workspace

// .devcontainer/devcontainer.json (Go gRPC)
{
  "name": "Go gRPC Dev",
  "image": "mcr.microsoft.com/devcontainers/go:1.22-bookworm",
 
  "features": {
    "ghcr.io/devcontainers/features/docker-in-docker:2": {},
    "ghcr.io/devcontainers/features/github-cli:1": {},
    "ghcr.io/devcontainers-contrib/features/protoc:1": {}
  },
 
  "customizations": {
    "vscode": {
      "extensions": [
        "golang.go",
        "zxh404.vscode-proto3",
        "ms-azuretools.vscode-docker"
      ],
      "settings": {
        "go.toolsManagement.autoUpdate": true,
        "go.lintTool": "golangci-lint",
        "go.lintFlags": ["--fast"],
        "[go]": {
          "editor.formatOnSave": true,
          "editor.codeActionsOnSave": {
            "source.organizeImports": "explicit"
          }
        },
        "gopls": {
          "ui.semanticTokens": true,
          "formatting.gofumpt": true
        }
      }
    }
  },
 
  "postCreateCommand": "go mod download && go install google.golang.org/protobuf/cmd/protoc-gen-go@latest && go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest",
  "forwardPorts": [8080, 50051],
  "portsAttributes": {
    "8080": { "label": "HTTP API", "onAutoForward": "openBrowser" },
    "50051": { "label": "gRPC", "onAutoForward": "silent" }
  },
  "remoteUser": "vscode"
}

// .devcontainer/devcontainer.json (Monorepo)
{
  "name": "Monorepo Dev",
  "dockerComposeFile": "docker-compose.yml",
  "service": "app",
  "workspaceFolder": "/workspace",
 
  "features": {
    "ghcr.io/devcontainers/features/docker-in-docker:2": {},
    "ghcr.io/devcontainers/features/github-cli:1": {}
  },
 
  "customizations": {
    "vscode": {
      "extensions": [
        "dbaeumer.vscode-eslint",
        "esbenp.prettier-vscode",
        "prisma.prisma",
        "bradlc.vscode-tailwindcss",
        "ms-vscode.vscode-typescript-next",
        "biomejs.biome"
      ],
      "settings": {
        "editor.formatOnSave": true,
        "eslint.workingDirectories": [
          { "pattern": "apps/*" },
          { "pattern": "packages/*" }
        ],
        "typescript.tsdk": "node_modules/typescript/lib",
        "search.exclude": {
          "**/node_modules": true,
          "**/.turbo": true,
          "**/dist": true
        }
      }
    }
  },
 
  "forwardPorts": [3000, 3001, 5432, 6379],
  "portsAttributes": {
    "3000": { "label": "Web App", "onAutoForward": "openBrowser" },
    "3001": { "label": "Admin", "onAutoForward": "notify" },
    "5432": { "label": "PostgreSQL", "onAutoForward": "silent" },
    "6379": { "label": "Redis", "onAutoForward": "silent" }
  },
 
  // monorepo 用: pnpm + turbo のインストール
  "postCreateCommand": "corepack enable && pnpm install && pnpm turbo run build --filter='./packages/*'",
  "postStartCommand": "pnpm turbo run dev --filter='./apps/*' &",
  "remoteUser": "node",
 
  // monorepo で重要: node_modules を Volume にする
  "mounts": [
    "source=monorepo-node_modules,target=/workspace/node_modules,type=volume",
    "source=monorepo-turbo-cache,target=/workspace/.turbo,type=volume"
  ]
}

#!/bin/bash
# .devcontainer/post-create.sh
 
set -euo pipefail
 
echo "=== Dev Container Setup ==="
 
# 依存関係インストール
echo ">>> Installing dependencies..."
npm ci
 
# データベースマイグレーション
echo ">>> Running database migrations..."
npx prisma migrate dev --name init 2>/dev/null || npx prisma migrate deploy
 
# シードデータ
echo ">>> Seeding database..."
npx prisma db seed 2>/dev/null || echo "No seed script found, skipping"
 
# Git フック
echo ">>> Setting up Git hooks..."
npx husky install 2>/dev/null || echo "Husky not configured, skipping"
 
# 完了メッセージ
echo ""
echo "========================================="
echo "  Dev Container is ready!"
echo "  Run 'npm run dev' to start developing"
echo "========================================="

#!/bin/bash
# .devcontainer/post-create.sh (Monorepo 対応版)
 
set -euo pipefail
 
# 色付き出力
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[0;33m'
BLUE='\033[0;34m'
NC='\033[0m'
 
log_info()  { echo -e "${BLUE}[INFO]${NC}  $1"; }
log_ok()    { echo -e "${GREEN}[OK]${NC}    $1"; }
log_warn()  { echo -e "${YELLOW}[WARN]${NC}  $1"; }
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }
 
echo "============================================"
echo "   Dev Container Post-Create Setup"
echo "============================================"
echo ""
 
# 1. パッケージマネージャの設定
log_info "Configuring package manager..."
if command -v corepack &> /dev/null; then
    corepack enable
    log_ok "Corepack enabled"
fi
 
# 2. 依存関係のインストール
log_info "Installing dependencies..."
if [ -f "pnpm-lock.yaml" ]; then
    pnpm install --frozen-lockfile
    log_ok "pnpm install completed"
elif [ -f "yarn.lock" ]; then
    yarn install --frozen-lockfile
    log_ok "yarn install completed"
elif [ -f "package-lock.json" ]; then
    npm ci
    log_ok "npm ci completed"
else
    log_warn "No lockfile found, running npm install"
    npm install
fi
 
# 3. データベース準備
log_info "Setting up database..."
MAX_RETRIES=30
RETRY_COUNT=0
until pg_isready -h db -U postgres -q 2>/dev/null; do
    RETRY_COUNT=$((RETRY_COUNT + 1))
    if [ $RETRY_COUNT -ge $MAX_RETRIES ]; then
        log_error "Database connection timeout after ${MAX_RETRIES} attempts"
        exit 1
    fi
    log_info "Waiting for database... (${RETRY_COUNT}/${MAX_RETRIES})"
    sleep 1
done
log_ok "Database is ready"
 
# マイグレーション
if [ -f "prisma/schema.prisma" ]; then
    npx prisma migrate deploy
    npx prisma generate
    log_ok "Prisma migrations applied"
elif [ -d "alembic" ]; then
    alembic upgrade head
    log_ok "Alembic migrations applied"
fi
 
# シードデータ
if npm run --silent seed 2>/dev/null; then
    log_ok "Database seeded"
else
    log_warn "No seed script found, skipping"
fi
 
# 4. Git 設定
log_info "Configuring Git..."
git config --global --add safe.directory /workspace
if [ -f ".husky/_/husky.sh" ]; then
    npx husky install
    log_ok "Git hooks configured"
fi
 
# 5. 環境変数チェック
log_info "Checking environment..."
REQUIRED_VARS=("DATABASE_URL" "NODE_ENV")
MISSING_VARS=()
for VAR in "${REQUIRED_VARS[@]}"; do
    if [ -z "${!VAR:-}" ]; then
        MISSING_VARS+=("$VAR")
    fi
done
if [ ${#MISSING_VARS[@]} -gt 0 ]; then
    log_warn "Missing environment variables: ${MISSING_VARS[*]}"
else
    log_ok "All required environment variables set"
fi
 
# 6. 完了
echo ""
echo "============================================"
echo -e "  ${GREEN}Dev Container is ready!${NC}"
echo ""
echo "  Available commands:"
echo "    npm run dev      - Start development server"
echo "    npm run test     - Run tests"
echo "    npm run lint     - Run linter"
echo "    npm run build    - Build for production"
echo "============================================"

# CLI のインストール
npm install -g @devcontainers/cli
 
# Dev Container の起動
devcontainer up --workspace-folder .
 
# コンテナ内でコマンドを実行
devcontainer exec --workspace-folder . npm run test
 
# Dev Container のビルドのみ
devcontainer build --workspace-folder .
 
# Features のテスト
devcontainer features test --features ./my-feature

# .github/workflows/ci.yml
name: CI (Dev Container)
 
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
 
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Setup Dev Container CLI
        run: npm install -g @devcontainers/cli
 
      - name: Build Dev Container
        run: devcontainer build --workspace-folder .
 
      - name: Run Tests in Dev Container
        run: devcontainer exec --workspace-folder . npm run test
 
      - name: Run Lint in Dev Container
        run: devcontainer exec --workspace-folder . npm run lint
 
      - name: Run Type Check
        run: devcontainer exec --workspace-folder . npm run type-check

# .github/workflows/ci-cached.yml
name: CI (Dev Container with Cache)
 
on:
  push:
    branches: [main]
  pull_request:
 
jobs:
  build-devcontainer:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
 
      - name: Login to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
 
      - name: Pre-build Dev Container
        uses: devcontainers/ci@v0.3
        with:
          imageName: ghcr.io/${{ github.repository }}/devcontainer
          cacheFrom: ghcr.io/${{ github.repository }}/devcontainer:latest
          push: always
 
  test:
    needs: build-devcontainer
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Run Tests
        uses: devcontainers/ci@v0.3
        with:
          imageName: ghcr.io/${{ github.repository }}/devcontainer
          cacheFrom: ghcr.io/${{ github.repository }}/devcontainer:latest
          push: never
          runCmd: |
            npm run test
            npm run lint
            npm run type-check

// .devcontainer/devcontainer.json (JetBrains 対応)
{
  "name": "My Project",
  "image": "mcr.microsoft.com/devcontainers/typescript-node:20",
 
  "customizations": {
    // VS Code 設定
    "vscode": {
      "extensions": ["dbaeumer.vscode-eslint"]
    },
    // JetBrains 設定
    "jetbrains": {
      "backend": "WebStorm",
      "plugins": [
        "com.intellij.plugins.tailwindcss"
      ]
    }
  }
}

# devcontainer CLI でコンテナを起動
devcontainer up --workspace-folder .
 
# コンテナ内で Neovim を起動
devcontainer exec --workspace-folder . nvim
 
# または docker exec で直接接続
docker exec -it $(docker ps -q --filter "label=devcontainer.local_folder=$(pwd)") bash

{
  "features": {
    "ghcr.io/devcontainers/features/common-utils:2": {
      "installZsh": true
    },
    "ghcr.io/rio/features/neovim:1": {
      "version": "stable"
    }
  },
  "postCreateCommand": "mkdir -p /home/node/.config && ln -sf /workspace/.devcontainer/nvim /home/node/.config/nvim"
}

# DevPod のインストール (macOS)
brew install loft-sh/tap/devpod
 
# ローカルの Docker で Dev Container を起動
devpod up . --provider docker
 
# SSH 経由のリモートマシンで実行
devpod up . --provider ssh --option HOST=dev.example.com
 
# Kubernetes クラスタで実行
devpod up . --provider kubernetes

// .devcontainer/devcontainer.json
{
  "build": {
    "dockerfile": "Dockerfile",
    "context": "..",
    // ビルドキャッシュの活用
    "cacheFrom": "ghcr.io/my-org/my-project-devcontainer:latest",
    "args": {
      "BUILDKIT_INLINE_CACHE": "1"
    }
  }
}

# .devcontainer/Dockerfile (キャッシュ最適化)
FROM mcr.microsoft.com/devcontainers/typescript-node:20-bookworm
 
# 変更頻度の低いレイヤーを先に
RUN apt-get update && apt-get install -y --no-install-recommends \
    postgresql-client-16 \
    redis-tools \
    jq \
    && rm -rf /var/lib/apt/lists/*
 
# グローバル npm パッケージも別レイヤーに
RUN su node -c "npm install -g tsx prisma @biomejs/biome turbo"
 
# プロジェクト依存関係は postCreateCommand で処理
# （Dockerfile に含めるとソース変更のたびに再ビルドになる）

{
  // 1. node_modules を Volume にする（最も効果的）
  "mounts": [
    "source=myproject-node_modules,target=/workspace/node_modules,type=volume",
    "source=myproject-turbo-cache,target=/workspace/.turbo,type=volume",
    "source=myproject-next-cache,target=/workspace/.next,type=volume"
  ],
 
  // 2. ワークスペースの consistency を cached に
  // (docker-compose.yml で設定)
  // volumes:
  //   - ..:/workspace:cached
 
  // 3. 不要なファイルの同期を除外
  // (VS Code 設定)
  "customizations": {
    "vscode": {
      "settings": {
        "files.watcherExclude": {
          "**/node_modules/**": true,
          "**/.git/objects/**": true,
          "**/.turbo/**": true,
          "**/dist/**": true
        }
      }
    }
  }
}

# OrbStack のインストール
brew install --cask orbstack
 
# OrbStack は Docker CLI 互換
# Dev Container は設定変更なしで動作する
docker version  # OrbStack の Docker エンジンが表示される

// .devcontainer/devcontainer.json
{
  // NG: ハードコードされた秘密情報
  // "remoteEnv": {
  //   "API_KEY": "sk-1234567890abcdef"
  // }
 
  // OK: ホストの環境変数を参照
  "remoteEnv": {
    "API_KEY": "${localEnv:API_KEY}",
    "DATABASE_URL": "${localEnv:DATABASE_URL}"
  },
 
  // OK: .env ファイルをバインドマウント (.gitignore に追加)
  "mounts": [
    "source=${localWorkspaceFolder}/.env.local,target=/workspace/.env.local,type=bind,consistency=cached"
  ]
}

{
  // 非 root ユーザーで実行
  "remoteUser": "node",
 
  // 必要最小限の capabilities
  "runArgs": [
    "--cap-drop=ALL",
    "--cap-add=SYS_PTRACE",   // デバッガに必要
    "--cap-add=NET_RAW"       // ネットワークツールに必要な場合
  ],
 
  // read-only ファイルシステム（高セキュリティ環境）
  // "runArgs": ["--read-only", "--tmpfs=/tmp"]
}

# .devcontainer/docker-compose.yml
services:
  app:
    build:
      context: ..
      dockerfile: .devcontainer/Dockerfile
    networks:
      - dev-internal  # 内部ネットワークのみ
 
  db:
    image: postgres:16-alpine
    networks:
      - dev-internal
    # ports は公開しない（コンテナ間通信のみ）
 
networks:
  dev-internal:
    internal: true  # 外部アクセスを遮断

# 1. Dev Container CLI でビルドエラーを確認
devcontainer build --workspace-folder . --log-level trace 2>&1 | tee build.log
 
# 2. コンテナの状態を確認
docker ps -a --filter "label=devcontainer.local_folder"
 
# 3. コンテナのログを確認
docker logs <container-id>
 
# 4. コンテナ内に直接接続
docker exec -it <container-id> bash
 
# 5. Volume の状態を確認
docker volume ls --filter "label=devcontainer"
 
# 6. ネットワークの状態を確認
docker network ls
docker network inspect <network-name>
 
# 7. リソース使用状況
docker stats --no-stream
 
# 8. Dev Container の設定を確認
devcontainer read-configuration --workspace-folder .

{
  "build": {
    "dockerfile": "Dockerfile",
    "args": {
      // プラットフォームを明示
      "TARGETPLATFORM": "linux/arm64"
    }
  },
 
  // Rosetta 2 エミュレーションで amd64 イメージを使用（遅い）
  // "runArgs": ["--platform", "linux/amd64"]
}

# .devcontainer/Dockerfile (マルチアーキテクチャ)
FROM --platform=$BUILDPLATFORM mcr.microsoft.com/devcontainers/typescript-node:20-bookworm
 
ARG TARGETPLATFORM
ARG BUILDPLATFORM
 
# アーキテクチャに応じたバイナリのインストール
RUN case "$TARGETPLATFORM" in \
    "linux/arm64") ARCH="aarch64" ;; \
    "linux/amd64") ARCH="x86_64" ;; \
    *) echo "Unsupported platform: $TARGETPLATFORM" && exit 1 ;; \
    esac \
    && curl -fsSL "https://example.com/tool-${ARCH}.tar.gz" | tar xzf - -C /usr/local/bin/

// NG: 不要なツールを大量にインストール
{
  "image": "ubuntu:22.04",
  "postCreateCommand": "apt-get update && apt-get install -y nodejs npm python3 python3-pip golang-go rustc ruby default-jdk php dotnet-sdk-7.0 && npm install -g yarn pnpm tsx typescript..."
}
 
// OK: 必要最小限の公式 Dev Container イメージ + Features
{
  "image": "mcr.microsoft.com/devcontainers/typescript-node:20-bookworm",
  "features": {
    "ghcr.io/devcontainers/features/github-cli:1": {}
  }
}

// NG: node_modules をホストと共有 (パフォーマンス最悪)
{
  "mounts": []
  // デフォルトでプロジェクト全体がバインドマウントされ、
  // node_modules もホスト-コンテナ間で同期される
}
 
// OK: node_modules を名前付きボリュームに分離
{
  "mounts": [
    "source=myproject-node_modules,target=/workspace/node_modules,type=volume"
  ]
}

// NG: 長い一行コマンド
{
  "postCreateCommand": "npm ci && npx prisma migrate deploy && npx prisma db seed && npx husky install && npm run build:libs && echo 'done'"
}
 
// OK: 外部スクリプトに分離
{
  "postCreateCommand": "bash .devcontainer/post-create.sh"
}
 
// さらに良い: ライフサイクルを分離
{
  "updateContentCommand": "npm ci",
  "postCreateCommand": {
    "migrate": "npx prisma migrate deploy",
    "seed": "npx prisma db seed",
    "hooks": "npx husky install"
  },
  "postStartCommand": "npm run dev:prepare"
}

// NG: 必要以上に大きなマシンタイプ
{
  "hostRequirements": {
    "cpus": 16,
    "memory": "64gb"
  }
}
 
// OK: タスクに応じた最小限のスペック
{
  "hostRequirements": {
    "cpus": 4,
    "memory": "16gb"
  }
}

// NG: Node.js Feature の前に common-utils をインストールしない
{
  "features": {
    "ghcr.io/devcontainers/features/node:1": { "version": "20" },
    "ghcr.io/devcontainers/features/common-utils:2": {
      "installZsh": true
    }
  }
}
 
// OK: common-utils を先にインストール
{
  "features": {
    "ghcr.io/devcontainers/features/common-utils:2": {
      "installZsh": true,
      "configureZshAsDefaultShell": true
    },
    "ghcr.io/devcontainers/features/node:1": { "version": "20" }
  }
}

{
  // SSH Agent の転送を明示
  "mounts": [
    "source=${localEnv:SSH_AUTH_SOCK},target=/ssh-agent,type=bind"
  ],
  "remoteEnv": {
    "SSH_AUTH_SOCK": "/ssh-agent"
  }
}

{
  "runArgs": [
    "--gpus", "all"
  ],
  "features": {
    "ghcr.io/devcontainers/features/nvidia-cuda:1": {
      "installCudnn": true,
      "cudaVersion": "12.3"
    }
  }
}