Where is

nfcore/devcontainer:lates

defined? And why is the default configuration for the devcontainer root + privileged?

privileged

in particular seems like a bit of a security risk

I assume, it is the one in the #CE5LG7WMB repo: Devcontainer

Thanks. Any idea why the devcontainer doesn’t contain any of the standard vscode extensions used when developing nf-core/nextflow pipelines? Are people only using this in CI/CD or something?

Sorry to join this party so late. Most users I know (and including me) currently use the devcontainers for testing PRs or similar things on codespaces but not actually local development. We could definitely should definitely add more vs-code extensions if there is need 👍

Hmm that's annoying. I'm very keen to find a solution to running containers in a container that doesn't involve that. I think it might be possible with

podman

and you selectively disable a couple of security options in docker