Post #3679362

I need to write a blog post about this I guess, but due to the prevalence of supply chain attacks nowadays, I've slowly moved all of my personal projects to devcontainers. Meaning the source is replicated from the host and I use git on the host, but any installing/compiling is done in a Docker container on a non-root user. It has worked mostly transparently through VSCode and adds a layer between me and a possible attacker. I think it's spiffy. Example: https://git.ahlcode.fi/nicd/zones #DevContainers