feat(devcontainer): prebuild plan

.devcontainer/devcontainer.json

@@ -1,24 +1,8 @@
 {
-    "customizations": {
-        "vscode": {
-            "extensions": [
-                "rust-lang.rust-analyzer",
-                "tamasfe.even-better-toml"
-            ],
-            "settings": {
-                "[rust]": {
-                    "editor.defaultFormatter": "rust-lang.rust-analyzer",
-                    "editor.formatOnSave": true
-                },
-                "explorer.excludeGitIgnore": true,
-                "files.watcherExclude": {
-                    "**/.git/objects/**": true,
-                    "**/.git/subtree-cache/**": true,
-                    "**/target/**": true
-                }
-            }
-        }
+    "containerEnv": {
+        "CARGO_HOME": "/cargo-cache"
     },
+    "containerUser": "${localEnv:DEV_USERNAME}",
     "features": {
         "ghcr.io/devcontainers/features/common-utils:2": {
             "configureZshAsDefaultShell": false,
@@ -35,7 +19,7 @@
     "mounts": [
         {
             "source": "devcontainer-cargo-cache-${devcontainerId}",
-            "target": "/usr/local/cargo",
+            "target": "/cargo-cache",
             "type": "volume"
         },
         {
@@ -47,6 +31,10 @@
     "name": "${localWorkspaceFolderBasename}-rust",
     "overrideCommand": true,
     "privileged": false,
-    "workspaceFolder": "/workspace",
-    "containerUser": "swelio"
+    "runArgs": [
+        "--security-opt=no-new-privileges",
+        "--userns=keep-id"
+    ],
+    "updateRemoteUserUID": true,
+    "workspaceFolder": "/workspace"
 }

.github/.devcontainer.json

@@ -0,0 +1,38 @@
+{
+    "customizations": {
+        "vscode": {
+            "extensions": [
+                "rust-lang.rust-analyzer",
+                "tamasfe.even-better-toml"
+            ],
+            "settings": {
+                "[rust]": {
+                    "editor.defaultFormatter": "rust-lang.rust-analyzer",
+                    "editor.formatOnSave": true
+                },
+                "explorer.excludeGitIgnore": true,
+                "files.watcherExclude": {
+                    "**/.git/objects/**": true,
+                    "**/.git/subtree-cache/**": true,
+                    "**/target/**": true
+                },
+                "rust-analyzer.check.command": "clippy"
+            }
+        }
+    },
+    "features": {
+        "ghcr.io/swelio/dev-images/apt-install:latest": {
+            "packages": "build-essential libssl-dev openssl pkg-config"
+        },
+        "ghcr.io/swelio/dev-images/cargo-tools:latest": {
+            "tools": "cargo-generate cocogitto drill git-cliff hyperfine"
+        },
+        "ghcr.io/swelio/dev-images/rustup:latest": {
+            "components": "clippy rust-src rustfmt"
+        }
+    },
+    "image": "rust:slim-bookworm",
+    "overrideCommand": true,
+    "privileged": false,
+    "workspaceFolder": "/workspace"
+}

.github/workflows/devcontainer.yaml

@@ -0,0 +1,20 @@
+name: Devcontainer prebuilding
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+    paths:
+      - .github/.devcontainer.json
+  pull_request:
+    branches:
+      - 'main'
+    paths:
+      - .github/.devcontainer.json
+  schedule:
+    - cron: '59 23 * * FRI'
+
+jobs:
+  pre-build:
+    uses: Swelio/continuous-integration/.github/workflows/devcontainer-prebuild.yaml@main