Skip to content

Commit b9a3b72

Browse files
mafredrimafredri
committed
move script to coder_script
1 parent ec80cb0 commit b9a3b72

File tree

2 files changed

+92
-74
lines changed

2 files changed

+92
-74
lines changed

‎examples/templates/docker-devcontainer/main.tf

Lines changed: 9 additions & 74 deletions
Original file line numberDiff line numberDiff line change
@@ -53,80 +53,6 @@ resource "coder_agent" "main" {
5353
touch ~/.init_done
5454
fi
5555
56-
if [ "$${CODER_AGENT_URL#*host.docker.internal}" != "$CODER_AGENT_URL" ]; then
57-
# If the access URL is host.docker.internal, we set up forwarding
58-
# to the host Docker gateway IP address, which is typically
59-
# 172.17.0.1, this will allow the devcontainers to access the
60-
# Coder server even if the access URL has been shadowed by a
61-
# "docker0" interface. This usually happens if docker is started
62-
# inside a devcontainer.
63-
echo 1 | sudo tee /proc/sys/net/ipv4/ip_forward
64-
sudo iptables -t nat -A POSTROUTING -j MASQUERADE
65-
66-
# Get the IP address of the host Docker gateway, which is
67-
# typically 172.17.0.1 and set up port forwarding between this
68-
# workspace's Docker gateway and the host Docker gateway.
69-
host_ip=$(getent hosts host.docker.internal | awk '{print $1}')
70-
port="$${CODER_AGENT_URL##*:}"
71-
port="$${port%%/*}"
72-
case "$port" in
73-
[0-9]*)
74-
sudo iptables -t nat -A PREROUTING -p tcp --dport $port -j DNAT --to-destination $host_ip:$port
75-
echo "Forwarded port $port to $host_ip"
76-
;;
77-
*)
78-
sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination $host_ip:80
79-
sudo iptables -t nat -A PREROUTING -p tcp --dport 443 -j DNAT --to-destination $host_ip:443
80-
echo "Forwarded default ports 80/443 to $host_ip"
81-
;;
82-
esac
83-
84-
# Start the docker service if it is not running, this will create
85-
# the "docker0" interface if it does not exist.
86-
sudo service docker start
87-
88-
# Since we cannot define "--add-host" for devcontainers, we define
89-
# a dnsmasq configuration that allows devcontainers to resolve the
90-
# host.docker.internal URL to this workspace, which is typically
91-
# 172.18.0.1. Note that we take the second IP address from
92-
# "hostname -I" because the first one is usually in the range
93-
# 172.17.0.0/16, which is the host Docker bridge.
94-
dns_ip=
95-
while [ -z "$dns_ip" ]; do
96-
dns_ip=$(hostname -I | awk '{print $2}')
97-
if [ -z "$dns_ip" ]; then
98-
echo "Waiting for hostname -I to return a valid second IP address..."
99-
sleep 1
100-
fi
101-
done
102-
103-
# Create a simple dnsmasq configuration to allow devcontainers to
104-
# resolve host.docker.internal.
105-
sudo apt-get update -y
106-
sudo apt-get install -y dnsmasq
107-
108-
echo "no-hosts" | sudo tee /etc/dnsmasq.conf
109-
echo "address=/host.docker.internal/$dns_ip" | sudo tee -a /etc/dnsmasq.conf
110-
echo "resolv-file=/etc/resolv.conf" | sudo tee -a /etc/dnsmasq.conf
111-
echo "no-dhcp-interface=" | sudo tee -a /etc/dnsmasq.conf
112-
echo "bind-interfaces" | sudo tee -a /etc/dnsmasq.conf
113-
echo "listen-address=127.0.0.1,$dns_ip" | sudo tee -a /etc/dnsmasq.conf
114-
115-
# Restart dnsmasq to apply the new configuration.
116-
sudo service dnsmasq restart
117-
118-
# Configure Docker to use the dnsmasq server for DNS resolution.
119-
# This allows devcontainers to resolve host.docker.internal to the
120-
# IP address of this workspace.
121-
echo "{\"dns\": [\"$dns_ip\"]}"| sudo tee /etc/docker/daemon.json
122-
123-
# Restart the Docker service to apply the new configuration.
124-
sudo service docker restart
125-
else
126-
# Start the docker service if it is not running.
127-
sudo service docker start
128-
fi
129-
13056
# Add any commands that should be executed at workspace startup
13157
# (e.g. install requirements, start a program, etc) here.
13258
EOT
@@ -225,6 +151,15 @@ resource "coder_agent" "main" {
225151
}
226152
}
227153

154+
resource "coder_script" "init_docker_in_docker" {
155+
count = data.coder_workspace.me.start_count
156+
agent_id = coder_agent.main.id
157+
display_name = "Initialize Docker-in-Docker"
158+
run_on_start = true
159+
icon = "/icon/docker.svg"
160+
script = file("${path.module}/scripts/init-docker-in-docker.sh")
161+
}
162+
228163
# See https://registry.coder.com/modules/coder/devcontainers-cli
229164
module "devcontainers-cli" {
230165
count = data.coder_workspace.me.start_count

‎examples/templates/docker-devcontainer/scripts/init-docker-in-docker.sh

Lines changed: 83 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,83 @@
1+
#!/bin/sh
2+
set -e
3+
4+
if [ "${CODER_AGENT_URL#*host.docker.internal}" = "$CODER_AGENT_URL" ]; then
5+
# This is likely an external access URL, so we do not need to set up
6+
# port forwarding or DNS resolution for host.docker.internal.
7+
8+
# Start the docker service if it is not running.
9+
sudo service docker start
10+
11+
exit 0
12+
fi
13+
14+
# The access URL is host.docker.internal, so we must set up forwarding
15+
# to the host Docker gateway IP address, which is typically 172.17.0.1,
16+
# this will allow the devcontainers to access the Coder server even if
17+
# the access URL has been shadowed by a "docker0" interface. This
18+
# usually happens if docker is started inside a devcontainer.
19+
20+
# Enable IP forwarding to allow traffic to flow between the host and
21+
# the devcontainers.
22+
echo 1 | sudo tee /proc/sys/net/ipv4/ip_forward
23+
sudo iptables -t nat -A POSTROUTING -j MASQUERADE
24+
25+
# Get the IP address of the host Docker gateway, which is
26+
# typically 172.17.0.1 and set up port forwarding between this
27+
# workspace's Docker gateway and the host Docker gateway.
28+
host_ip=$(getent hosts host.docker.internal | awk '{print $1}')
29+
port="${CODER_AGENT_URL##*:}"
30+
port="${port%%/*}"
31+
case "$port" in
32+
[0-9]*)
33+
sudo iptables -t nat -A PREROUTING -p tcp --dport $port -j DNAT --to-destination $host_ip:$port
34+
echo "Forwarded port $port to $host_ip"
35+
;;
36+
*)
37+
sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to-destination $host_ip:80
38+
sudo iptables -t nat -A PREROUTING -p tcp --dport 443 -j DNAT --to-destination $host_ip:443
39+
echo "Forwarded default ports 80/443 to $host_ip"
40+
;;
41+
esac
42+
43+
# Start the docker service if it is not running, this will create
44+
# the "docker0" interface if it does not exist.
45+
sudo service docker start
46+
47+
# Since we cannot define "--add-host" for devcontainers, we define
48+
# a dnsmasq configuration that allows devcontainers to resolve the
49+
# host.docker.internal URL to this workspace, which is typically
50+
# 172.18.0.1. Note that we take the second IP address from
51+
# "hostname -I" because the first one is usually in the range
52+
# 172.17.0.0/16, which is the host Docker bridge.
53+
dns_ip=
54+
while [ -z "$dns_ip" ]; do
55+
dns_ip=$(hostname -I | awk '{print $2}')
56+
if [ -z "$dns_ip" ]; then
57+
echo "Waiting for hostname -I to return a valid second IP address..."
58+
sleep 1
59+
fi
60+
done
61+
62+
# Create a simple dnsmasq configuration to allow devcontainers to
63+
# resolve host.docker.internal.
64+
sudo apt-get update -y
65+
sudo apt-get install -y dnsmasq
66+
67+
echo "no-hosts" | sudo tee /etc/dnsmasq.conf
68+
echo "address=/host.docker.internal/$dns_ip" | sudo tee -a /etc/dnsmasq.conf
69+
echo "resolv-file=/etc/resolv.conf" | sudo tee -a /etc/dnsmasq.conf
70+
echo "no-dhcp-interface=" | sudo tee -a /etc/dnsmasq.conf
71+
echo "bind-interfaces" | sudo tee -a /etc/dnsmasq.conf
72+
echo "listen-address=127.0.0.1,$dns_ip" | sudo tee -a /etc/dnsmasq.conf
73+
74+
# Restart dnsmasq to apply the new configuration.
75+
sudo service dnsmasq restart
76+
77+
# Configure Docker to use the dnsmasq server for DNS resolution.
78+
# This allows devcontainers to resolve host.docker.internal to the
79+
# IP address of this workspace.
80+
echo "{\"dns\": [\"$dns_ip\"]}" | sudo tee /etc/docker/daemon.json
81+
82+
# Restart the Docker service to apply the new configuration.
83+
sudo service docker restart

0 commit comments

Comments
 (0)