Devcontainer 设置技能：一键创建预配置开发容器，集成 Claude Code 和语言工具

devcontainer-setup by trailofbits/skills

739 周安装量

3,900 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/trailofbits/skills --skill devcontainer-setup

开发自动化开发运维

🇨🇳中文介绍

Devcontainer 设置技能

创建一个预配置的 devcontainer，包含 Claude Code 和特定语言的工具。

使用时机

用户要求“设置 devcontainer”或“添加 devcontainer 支持”
用户需要一个沙盒化的 Claude Code 开发环境
用户需要具有持久配置的隔离开发环境

避免使用时机

用户已有 devcontainer 配置，仅需修改
用户询问一般 Docker 或容器问题
用户希望部署生产容器（此技能仅用于开发）

工作流程

flowchart TB
    start([用户请求 devcontainer])
    recon[1. 项目侦察]
    detect[2. 检测语言]
    generate[3. 生成配置]
    write[4. 将文件写入 .devcontainer/]
    done([完成])

    start --> recon
    recon --> detect
    detect --> generate
    generate --> write
    write --> done

阶段 1：项目侦察

推断项目名称

按顺序检查（使用第一个匹配项）：

package.json → name 字段
pyproject.toml →

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

阶段 2：生成配置

从 resources/ 目录的基础模板开始。替换：

{{PROJECT_NAME}} → 人类可读的名称（例如 "My Project"）
{{PROJECT_SLUG}} → 用于卷的 slug（例如 "my-project"）

然后应用以下语言特定的修改。

基础模板包括：

Claude Code 及市场插件 (anthropics/skills, trailofbits/skills, trailofbits/skills-curated)
通过 uv 安装的 Python 3.13（快速二进制下载）
通过 fnm（Fast Node Manager）安装的 Node 22
用于基于 AST 的代码搜索的 ast-grep
具有 NET_ADMIN 能力的网络隔离工具（iptables, ipset）
现代 CLI 工具：ripgrep, fd, fzf, tmux, git-delta

检测： pyproject.toml, requirements.txt, setup.py, 或 *.py 文件

Dockerfile 添加内容：

基础 Dockerfile 已通过 uv 包含 Python 3.13。如果需要不同版本（从 pyproject.toml 检测到），修改 Python 安装：

# 通过 uv 安装 Python（快速二进制下载，非源码编译）
RUN uv python install <version> --default

devcontainer.json 扩展：

添加到 customizations.vscode.extensions：

"ms-python.python",
"ms-python.vscode-pylance",
"charliermarsh.ruff"

添加到 customizations.vscode.settings：

"python.defaultInterpreterPath": ".venv/bin/python",
"[python]": {
  "editor.defaultFormatter": "charliermarsh.ruff",
  "editor.codeActionsOnSave": {
    "source.organizeImports": "explicit"
  }
}

postCreateCommand： 如果存在 pyproject.toml，链接命令：

rm -rf .venv && uv sync && uv run /opt/post_install.py

Node/TypeScript 项目

检测： package.json 或 tsconfig.json

无需 Dockerfile 添加内容： 基础模板已通过 fnm（Fast Node Manager）包含 Node 22。

devcontainer.json 扩展：

添加到 customizations.vscode.extensions：

"dbaeumer.vscode-eslint",
"esbenp.prettier-vscode"

添加到 customizations.vscode.settings：

"editor.defaultFormatter": "esbenp.prettier-vscode",
"editor.codeActionsOnSave": {
  "source.fixAll.eslint": "explicit"
}

postCreateCommand： 从锁文件检测包管理器并与基础命令链接：

pnpm-lock.yaml → uv run /opt/post_install.py && pnpm install --frozen-lockfile
yarn.lock → uv run /opt/post_install.py && yarn install --frozen-lockfile
package-lock.json → uv run /opt/post_install.py && npm ci
无锁文件 → uv run /opt/post_install.py && npm install

检测： Cargo.toml

要添加的功能：

"ghcr.io/devcontainers/features/rust:1": {}

devcontainer.json 扩展：

添加到 customizations.vscode.extensions：

"rust-lang.rust-analyzer",
"tamasfe.even-better-toml"

添加到 customizations.vscode.settings：

"[rust]": {
  "editor.defaultFormatter": "rust-lang.rust-analyzer"
}

postCreateCommand： 如果存在 Cargo.lock，使用锁定构建：

uv run /opt/post_install.py && cargo build --locked

如果无锁文件，使用标准构建：

uv run /opt/post_install.py && cargo build

检测： go.mod

要添加的功能：

"ghcr.io/devcontainers/features/go:1": {
  "version": "latest"
}

devcontainer.json 扩展：

添加到 customizations.vscode.extensions：

添加到 customizations.vscode.settings：

"[go]": {
  "editor.defaultFormatter": "golang.go"
},
"go.useLanguageServer": true

postCreateCommand：

uv run /opt/post_install.py && go mod download

更多指导，请参阅：

references/dockerfile-best-practices.md - 层优化、多阶段构建、架构支持
references/features-vs-dockerfile.md - 何时使用 devcontainer 功能 vs 自定义 Dockerfile

在 devcontainer.json 中新增挂载的模式：

"mounts": [
  "source={{PROJECT_SLUG}}-<purpose>-${devcontainerId},target=<container-path>,type=volume"
]

source={{PROJECT_SLUG}}-cargo-${devcontainerId},target=/home/vscode/.cargo,type=volume (Rust)
source={{PROJECT_SLUG}}-go-${devcontainerId},target=/home/vscode/go,type=volume (Go)

在项目的 .devcontainer/ 目录中生成以下文件：

Dockerfile - 容器构建指令
devcontainer.json - VS Code/devcontainer 配置
post_install.py - 创建后设置脚本
.zshrc - Shell 配置
install.sh - 用于管理 devcontainer 的 CLI 助手（devc 命令）

在向用户展示文件之前，验证：

所有 {{PROJECT_NAME}} 占位符已替换为人类可读的名称
所有 {{PROJECT_SLUG}} 占位符已替换为 slug 化的名称
devcontainer.json 中的 JSON 语法有效（无尾随逗号，正确嵌套）
为所有检测到的语言添加了语言特定扩展
postCreateCommand 包含所有必需的设置命令（用 && 链接）

生成后，告知用户：

如何启动："在 VS Code 中打开并选择 '在容器中重新打开'"
替代方案：devcontainer up --workspace-folder .
CLI 助手：运行 .devcontainer/install.sh self-install 将 devc 命令添加到 PATH

🇺🇸English

Devcontainer Setup Skill

Creates a pre-configured devcontainer with Claude Code and language-specific tooling.

When to Use

User asks to "set up a devcontainer" or "add devcontainer support"
User wants a sandboxed Claude Code development environment
User needs isolated development environments with persistent configuration

When NOT to Use

User already has a devcontainer configuration and just needs modifications
User is asking about general Docker or container questions
User wants to deploy production containers (this is for development only)

Workflow

flowchart TB
    start([User requests devcontainer])
    recon[1. Project Reconnaissance]
    detect[2. Detect Languages]
    generate[3. Generate Configuration]
    write[4. Write files to .devcontainer/]
    done([Done])

    start --> recon
    recon --> detect
    detect --> generate
    generate --> write
    write --> done

Phase 1: Project Reconnaissance

Infer Project Name

Check in order (use first match):

package.json → name field
pyproject.toml → project.name
Cargo.toml → package.name
go.mod → module path (last segment after /)
Directory name as fallback

Convert to slug: lowercase, replace spaces/underscores with hyphens.

Detect Language Stack

Language	Detection Files
Python	`pyproject.toml`, `*.py`
Node/TypeScript	`package.json`, `tsconfig.json`
Rust	`Cargo.toml`
Go	`go.mod`, `go.sum`

Multi-Language Projects

If multiple languages are detected, configure all of them in the following priority order:

Python - Primary language, uses Dockerfile for uv + Python installation
Node/TypeScript - Uses devcontainer feature
Rust - Uses devcontainer feature
Go - Uses devcontainer feature

For multi-language postCreateCommand, chain all setup commands:

uv run /opt/post_install.py && uv sync && npm ci

Extensions and settings from all detected languages should be merged into the configuration.

Phase 2: Generate Configuration

Start with base templates from resources/ directory. Substitute:

{{PROJECT_NAME}} → Human-readable name (e.g., "My Project")
{{PROJECT_SLUG}} → Slug for volumes (e.g., "my-project")

Then apply language-specific modifications below.

Base Template Features

The base template includes:

Claude Code with marketplace plugins (anthropics/skills, trailofbits/skills, trailofbits/skills-curated)
Python 3.13 via uv (fast binary download)
Node 22 via fnm (Fast Node Manager)
ast-grep for AST-based code search
Network isolation tools (iptables, ipset) with NET_ADMIN capability
Modern CLI tools : ripgrep, fd, fzf, tmux, git-delta

Language-Specific Sections

Python Projects

Detection: pyproject.toml, requirements.txt, setup.py, or *.py files

Dockerfile additions:

The base Dockerfile already includes Python 3.13 via uv. If a different version is required (detected from pyproject.toml), modify the Python installation:

# Install Python via uv (fast binary download, not source compilation)
RUN uv python install <version> --default

devcontainer.json extensions:

Add to customizations.vscode.extensions:

"ms-python.python",
"ms-python.vscode-pylance",
"charliermarsh.ruff"

Add to customizations.vscode.settings:

"python.defaultInterpreterPath": ".venv/bin/python",
"[python]": {
  "editor.defaultFormatter": "charliermarsh.ruff",
  "editor.codeActionsOnSave": {
    "source.organizeImports": "explicit"
  }
}

postCreateCommand: If pyproject.toml exists, chain commands:

rm -rf .venv && uv sync && uv run /opt/post_install.py

Node/TypeScript Projects

Detection: package.json or tsconfig.json

No Dockerfile additions needed: The base template includes Node 22 via fnm (Fast Node Manager).

devcontainer.json extensions:

Add to customizations.vscode.extensions:

"dbaeumer.vscode-eslint",
"esbenp.prettier-vscode"

Add to customizations.vscode.settings:

"editor.defaultFormatter": "esbenp.prettier-vscode",
"editor.codeActionsOnSave": {
  "source.fixAll.eslint": "explicit"
}

postCreateCommand: Detect package manager from lockfile and chain with base command:

pnpm-lock.yaml → uv run /opt/post_install.py && pnpm install --frozen-lockfile
yarn.lock → uv run /opt/post_install.py && yarn install --frozen-lockfile
package-lock.json → uv run /opt/post_install.py && npm ci
No lockfile → uv run /opt/post_install.py && npm install

Rust Projects

Detection: Cargo.toml

Features to add:

"ghcr.io/devcontainers/features/rust:1": {}

devcontainer.json extensions:

Add to customizations.vscode.extensions:

"rust-lang.rust-analyzer",
"tamasfe.even-better-toml"

Add to customizations.vscode.settings:

"[rust]": {
  "editor.defaultFormatter": "rust-lang.rust-analyzer"
}

postCreateCommand: If Cargo.lock exists, use locked builds:

uv run /opt/post_install.py && cargo build --locked

If no lockfile, use standard build:

uv run /opt/post_install.py && cargo build

Go Projects

Detection: go.mod

Features to add:

"ghcr.io/devcontainers/features/go:1": {
  "version": "latest"
}

devcontainer.json extensions:

Add to customizations.vscode.extensions:

"golang.go"

Add to customizations.vscode.settings:

"[go]": {
  "editor.defaultFormatter": "golang.go"
},
"go.useLanguageServer": true

postCreateCommand:

uv run /opt/post_install.py && go mod download

Reference Material

For additional guidance, see:

references/dockerfile-best-practices.md - Layer optimization, multi-stage builds, architecture support
references/features-vs-dockerfile.md - When to use devcontainer features vs custom Dockerfile

Adding Persistent Volumes

Pattern for new mounts in devcontainer.json:

"mounts": [
  "source={{PROJECT_SLUG}}-<purpose>-${devcontainerId},target=<container-path>,type=volume"
]

Common additions:

source={{PROJECT_SLUG}}-cargo-${devcontainerId},target=/home/vscode/.cargo,type=volume (Rust)
source={{PROJECT_SLUG}}-go-${devcontainerId},target=/home/vscode/go,type=volume (Go)

Output Files

Generate these files in the project's .devcontainer/ directory:

Dockerfile - Container build instructions
devcontainer.json - VS Code/devcontainer configuration
post_install.py - Post-creation setup script
.zshrc - Shell configuration
install.sh - CLI helper for managing the devcontainer (devc command)

Validation Checklist

Before presenting files to the user, verify:

All {{PROJECT_NAME}} placeholders are replaced with the human-readable name
All {{PROJECT_SLUG}} placeholders are replaced with the slugified name
JSON syntax is valid in devcontainer.json (no trailing commas, proper nesting)
Language-specific extensions are added for all detected languages
postCreateCommand includes all required setup commands (chained with &&)

User Instructions

After generating, inform the user:

How to start: "Open in VS Code and select 'Reopen in Container'"
Alternative: devcontainer up --workspace-folder .
CLI helper: Run .devcontainer/install.sh self-install to add the devc command to PATH

Weekly Installs

739

Repository

trailofbits/skills

GitHub Stars

3.9K

First Seen

Feb 10, 2026

Security Audits

Gen Agent Trust HubFail SocketPass SnykFail

Installed on

codex661

opencode660

claude-code651

gemini-cli649

cursor639

github-copilot639

agent-browser 浏览器自动化工具 - Vercel Labs 命令行网页操作与测试

136,300 周安装

Devcontainer 设置技能：一键创建预配置开发容器，集成 Claude Code 和语言工具

🇨🇳中文介绍

Devcontainer 设置技能

使用时机

避免使用时机

工作流程

阶段 1：项目侦察

推断项目名称

相关 Skills

检测语言栈

多语言项目

阶段 2：生成配置

基础模板功能

语言特定部分

Python 项目

Node/TypeScript 项目

Rust 项目

Go 项目

参考资料

添加持久卷

输出文件

验证清单

用户说明

🇺🇸English

Devcontainer Setup Skill

When to Use

When NOT to Use

Workflow

Phase 1: Project Reconnaissance

Infer Project Name

Detect Language Stack

Multi-Language Projects

Phase 2: Generate Configuration

Base Template Features

Language-Specific Sections

Python Projects

Node/TypeScript Projects

Rust Projects

Go Projects

Reference Material

Adding Persistent Volumes

Output Files

Validation Checklist

User Instructions

最新 Skills