Reasoning within src/s-core-devcontainer/.devcontainer/s-core-local/install.sh for not using bazelisk:
|
# Bazel, via APT |
|
# - ghcr.io/devcontainers-community/features/bazel uses bazelisk, which has a few problems: |
|
# - It does not install bash autocompletion. |
|
# - The bazel version is not pinned, which is required to be reproducible and to have coordinated, tested tool updates. |
|
# - In general, pre-built containers *shall not* download "more tools" from the internet. |
|
# This is an operational risk (security, availability); it makes the build non-reproducible, |
|
# and it prevents the container from working in air-gapped environments. |
This seems to be at least partly in conflict with having the install_matching_bazel_version.sh which installs the bazel version as given by the repo if it doesn't match the one in the container.
Reasoning within
src/s-core-devcontainer/.devcontainer/s-core-local/install.shfor not using bazelisk:devcontainer/src/s-core-devcontainer/.devcontainer/s-core-local/install.sh
Lines 31 to 37 in fae4b2e
This seems to be at least partly in conflict with having the install_matching_bazel_version.sh which installs the bazel version as given by the repo if it doesn't match the one in the container.