Coder

I think it'd still be nicer if we could add a ``coder_app`` directly using the CLI

What is the best practice to do Docker in Docker?  I have Coder running on Docker and I'm not sure how to work with it when it comes to developing Docker (ie docker build, docker run commands).  Any accepted best way of doing it?

I just saw that workspace quotas have been merged how can I try this out? 😍

you would pass the docker socket to the containers, either by mounting ``/var/run/docker.sock`` or by using a sock proxy and mouting that output file

or you can use ssh by setting the ``DOCKER_HOST=ssh://whatever`` variable

keep in mind the user will be able to access every running container on the host

or you could make a "privileged" container, which will make it possible to run a separate docker instance inside of the docker container

but then the CT will have access to devices

what happens if a workspace is running and we do a `systemctl restart coder`

yes it stays alive but after an update we need `systemctl daemon-reload` which disconnects the GPU and then a stop and start is required

What's the error if you don't do a `systemctl daemon-reload`?

```console
Warning: The unit file, source configuration file or drop-ins of coder.service changed on disk. Run 'systemctl daemon-reload' to reload units.
```

i get this warning so I do this everytime

Should be fine to ignore that warning. You'd only need to do that if `coder.service` changed between releases.

Ideally that file (`coder.service`) wouldn't be replaced unless the contents changed though 🤔. I wonder if this can be fixed via `nfpm` configuration or if it needs some custom scripting.

But the fact that `systemctl daemon-reload` triggers GPU disconnect is not good either. But that doesn't seem like an issue with `coder`.

<@134122930828214273> think we can have `nfpm` avoid replacing `coder.service` unless the content changed? (I think that'd be the best we can do to help alleviate these symptoms.)

tested it and ithe coder is updated successfully without needing a `daemon-reload`

not sure but if it's possible we can definitely implement that

my guess is that it'll just work normally

So if I get it correctly, I can't protect a Docker Swarm from the user if I do any of this - either the containers or devices will be accessible.  I guess I'll have to dedicate a VM then.

<@257291506484772874> We have some docs for Docker in Docker here: https://coder.com/docs/coder-oss/latest/templates/docker-in-docker. Has a couple of the use cases discussed

For `sysbox`, when the docs say `host` is that the Coder container itself or all hosts running Docker Swarm in my cluster?  I haven't used that tool yet

Ah every host running Docker swarm should have the sysbox runtime otherwise the container wouldn't be able to run since there's a missing runtime

<@206225075026788353> do you have some news when https://github.com/coder/coder/issues/2913 might be fixed? 🙂

<@134122930828214273> is working on app-related stuff right now, so maybe he  can tackle it!

The new “offline” page is related to the new health check system so I’ll start there

<@363277583674114050> could you please provide some details on what browser you're using and how you added the PWA in the ticket?

Sure. I am using Google chrome stable version 106.0.5249.21. I added the pwa by clicking the code-Server button in my dashboard and then used the install as PWA button in the top right corner to add it

unknown

GitHub isn't approving my sponsorship account from months. 😄

can you create a post in <#1006346052317753414> and post your terraform template in there?

i want to connect to a work space from vscode
but my coder is on a vps
how do i connecte to that work space

you can use the vscode ssh remote extension (unsure if it's preinstalled)