Dockerfile

ARG USER=vscode
ARG UID=1000
ARG GID=${UID}
ARG NIX_VERSION=nix-2.13.2
FROM debian:stable-slim as base

ARG USER
ARG UID
ARG GID
ARG NIX_VERSION
# ARG NIX_INSTALLER=https://nixos.org/nix/install
ARG NIX_INSTALLER=https://mirrors.tuna.tsinghua.edu.cn/nix/${NIX_VERSION}/install

# Set shell and check for pipe fails
SHELL ["/bin/bash", "-o", "pipefail", "-c"]

# Install deps required by Nix installer
RUN sed -i "s/deb.debian.org/mirrors.ustc.edu.cn/g" /etc/apt/sources.list && \
    apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
    ca-certificates \
    curl \
    sudo \
    xz-utils

# Create user
RUN groupadd -g ${GID} ${USER} && \
    useradd -u ${UID} -g ${GID} -G sudo -m ${USER} -s /bin/bash

# Configure sudo and Nix
RUN sed -i 's/%sudo.*ALL/%sudo   ALL=(ALL:ALL) NOPASSWD:ALL/' /etc/sudoers && \
    echo "sandbox = false" > /etc/nix.conf && \
    echo "experimental-features = nix-command flakes" >> /etc/nix.conf && \
    echo "substituters = https://mirrors.tuna.tsinghua.edu.cn/nix-channels/store https://cache.nixos.org/" >> /etc/nix.conf
# need use the mirror cache to download nix-command
    
# Install Nix and enable flakes
USER ${USER}
ENV USER=${USER}
ENV NIX_PATH=/home/${USER}/.nix-defexpr/channels:/nix/var/nix/profiles/per-user/root/channels
ENV NIX_CONF_DIR /etc
RUN curl -L ${NIX_INSTALLER} | NIX_INSTALLER_NO_MODIFY_PROFILE=1 sh

# Copy configs
RUN mkdir -p /home/${USER}/.config/devcontainer/extra
COPY --chown=${USER}:${USER} config/flake.nix /home/${USER}/.config/devcontainer/flake.nix
COPY --chown=${USER}:${USER} config/flake.lock /home/${USER}/.config/devcontainer/flake.lock
COPY --chown=${USER}:${USER} config/config.nix /home/${USER}/.config/devcontainer/config.nix

# Fix architecture and user
RUN sed -i "s/ARCH/$(uname -m)-$(uname -s | tr '[:upper:]' '[:lower:]')/" /home/${USER}/.config/devcontainer/flake.nix
RUN sed -i "s/USER/${USER}/" /home/${USER}/.config/devcontainer/flake.nix

# Build home-manager
WORKDIR /home/${USER}/.config/devcontainer
RUN . /home/${USER}/.nix-profile/etc/profile.d/nix.sh && \
    nix build --no-link .#homeConfigurations.${USER}.activationPackage

FROM debian:stable-slim

ARG USER
ARG UID
ARG GID

ENV NIX_CONF_DIR /etc
ENV DIRENV_CONFIG /etc

## Install vscode deps
RUN DEBIAN_FRONTEND=noninteractive apt-get update && apt-get upgrade -y && apt-get install -y --no-install-recommends \
    ca-certificates \
    git \
    gnupg \
    locales \
    ssh \
    sudo && \
    rm -rf /var/lib/apt/lists/*

# Create user
RUN groupadd -g ${GID} ${USER} && \
    useradd -u ${UID} -g ${GID} -G sudo -m ${USER} -s /bin/bash
COPY --from=base --chown=${USER}:${USER} /home/${USER} /home/${USER}

# Configure en_US.UTF-8 locale
RUN echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen && \
    locale-gen

# Configure sudo
RUN sed -i 's/%sudo.*ALL/%sudo   ALL=(ALL:ALL) NOPASSWD:ALL/' /etc/sudoers

# Setup Nix environment
RUN echo "source /home/${USER}/.nix-profile/etc/profile.d/nix.sh" >> /etc/bash.bashrc && \
    echo "source /home/${USER}/.nix-profile/etc/profile.d/nix.sh" >> /etc/zshrc

# Copy nix and configs
COPY --from=base /nix /nix
COPY --from=base /etc/nix.conf /etc/nix.conf
COPY config/direnv.toml /etc

USER ${USER}

# Setup vscode
RUN mkdir -p /home/${USER}/.vscode-server/extensions && \
    mkdir -p /home/${USER}/.vscode-server-insiders/extensions

# Switch to home-manager environment
WORKDIR /home/${USER}/.config/devcontainer
ENV USER=${USER}
ARG NIX_VERSION
RUN . /home/${USER}/.nix-profile/etc/profile.d/nix.sh && \
    nix-env --set-flag priority 10 ${NIX_VERSION} && \
    "$(nix path-info .#homeConfigurations.${USER}.activationPackage)"/activate
    #nix version should be the same of one from the shell

# Copy entrypoint
COPY docker-entrypoint.sh /docker-entrypoint.sh

ENTRYPOINT [ "/docker-entrypoint.sh" ]