From 24525bc6561080b577af77102f8eecbc3c920676 Mon Sep 17 00:00:00 2001 From: Venkat Date: Sat, 11 Jul 2026 09:32:45 +0000 Subject: [PATCH] feat: disable VS Code Workspace Trust in the image Ship `security.workspace.trust.enabled: false` in the Machine settings so workspaces (e.g. /workspaces/glueops) always open trusted. Removes the "Do you trust the authors of the files in this folder? Creating a terminal process requires executing code" prompt that blocks terminals/tasks on every codespace launch. Pre-trusting a single folder isn't durable -- VS Code stores the trusted -folder list in SQLite global state that a freshly launched CDE doesn't carry -- so disabling the feature is the reliable declarative option. These CDEs only ever open the user's own GlueOps repos. Co-Authored-By: Claude Opus 4.8 (1M context) --- .devcontainer/Dockerfile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile index de000fe978..ac0f647357 100644 --- a/.devcontainer/Dockerfile +++ b/.devcontainer/Dockerfile @@ -199,7 +199,10 @@ RUN curl -sS https://downloads.1password.com/linux/keys/1password.asc | \ sudo gpg --dearmor --output /usr/share/debsig/keyrings/AC2D62742012EA22/debsig.gpg && \ sudo apt update && sudo apt install 1password-cli -RUN mkdir -p /home/vscode/.vscode-server/data/Machine/ && echo '{"workbench.colorTheme": "VS Code Dark"}' > /home/vscode/.vscode-server/data/Machine/settings.json +# Disable VS Code Workspace Trust so folders (e.g. /workspaces/glueops) always open +# trusted -- no "Do you trust the authors..." prompt blocking terminals/tasks on launch. +# These are ephemeral CDEs that only ever open the user's own GlueOps repos. +RUN mkdir -p /home/vscode/.vscode-server/data/Machine/ && echo '{"workbench.colorTheme": "VS Code Dark", "security.workspace.trust.enabled": false}' > /home/vscode/.vscode-server/data/Machine/settings.json # The apt `code` package installs the desktop (Electron) binary at /usr/bin/code. # In these headless serve-web/tunnel sessions there is no X display, so running