Skip to content

fix(devcontainer): bump docker-in-docker, introduce lockfile#498

Open
tristan-f-r wants to merge 1 commit into
Reed-CompBio:mainfrom
tristan-f-r:devcontainer-lock
Open

fix(devcontainer): bump docker-in-docker, introduce lockfile#498
tristan-f-r wants to merge 1 commit into
Reed-CompBio:mainfrom
tristan-f-r:devcontainer-lock

Conversation

@tristan-f-r

@tristan-f-r tristan-f-r commented Jul 10, 2026

Copy link
Copy Markdown
Collaborator

A PR was opened which fixed docker-in-docker for Ubuntu 26.04, which was merged on May 12th and was a minor version bump for docker-in-docker version 2 (the version of docker-in-docker we use), but this caused a regression on Ubuntu/Debian backends for hosts whose kernel does not load the ip_tables kernel module by default (e.g. RHEL-based distributions like Fedora). Our anaconda base image happens to be a Debian-based image, and I happen to be running on a host which does not load the ip_tables kernel module by default.

We fix this by both:

  1. Bumping docker-in-docker to address the immediate issue.
  2. Adding an associated lockfile which pins devcontainer features, while also pinning the base anaconda image version, to make sure issues of this sort never happen again.

Reviewers: Make sure to test this in a devcontainer locally/in a codespace as well to make sure this works, though this issue shouldn't & doesn't seem to affect codespaces.

[A PR was opened which fixed docker-in-docker for Ubuntu 26.04](devcontainers/features#1637), which was merged on May 12th and was a minor version bump for docker-in-docker version 2, but [this caused a regression on Ubuntu/**Debian** backends for hosts whose kernel does not load the `ip_tables` kernel module by default (e.g. RHEL-based distributions like Fedora)](devcontainers/features#1659). Our anaconda base image happens to be a Debian-based image, and I happen to be running on a host which does not load the `ip_tables` kernel module by default.

We fix this by both:
1. Bumping docker-in-docker
2. Adding an associated lockfile which pins devcontainer features, while also pinning the base anaconda image version.

_Reviewers: Make sure to test this in a devcontainer/codespace as well to make sure this works!_
@tristan-f-r tristan-f-r added the bug Something isn't working label Jul 10, 2026
@agitter

agitter commented Jul 10, 2026

Copy link
Copy Markdown
Collaborator

How do you generate the .devcontainer/devcontainer-lock.json file if we ever need to update it in the future?

This change makes sense. Merging it before or after the tutorial will depend on whether any of us can test it in time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants