Jun 19, 2025 · Jun 19, 2025
diff --git a/dogfood/coder/main.tf b/dogfood/coder/main.tf
      threshold = data.coder_parameter.res_mon_volume_threshold.value
      path      = data.coder_parameter.res_mon_volume_path.value
    }
    volume {
      enabled   = true
      threshold = data.coder_parameter.res_mon_volume_threshold.value
      path      = "/var/lib/docker"
    }
  }

  startup_script = <<-EOT
    #!/usr/bin/env bash
    set -eux -o pipefail

    # Stop all running containers and prune the system to clean up
    # /var/lib/docker to prevent errors during workspace destroy.
    # Clean up the unused resources to keep storage usage low.
    #
    # WARNING! This will remove:
    # - all containers
    # - all networks
    # - all images
    # - all build cache
    docker ps -q | xargs docker stop
    #   - all stopped containers
    #   - all networks not used by at least one container
    #   - all images without at least one container associated to them
    #   - all build cache
    docker system prune -a -f

    # Stop the Docker service to prevent errors during workspace destroy.
  }
 }

 resource "coder_metadata" "docker_volume" {
  resource_id = docker_volume.docker_volume.id
  hide        = true # Hide it as it is not useful to see in the UI.
 }

 resource "docker_volume" "docker_volume" {
  name = "coder-${data.coder_workspace.me.id}-docker"
  # Protect the volume from being deleted due to changes in attributes.
  lifecycle {
    ignore_changes = all
  }
  # Add labels in Docker to keep track of orphan resources.
  labels {
    label = "coder.owner"
    value = data.coder_workspace_owner.me.name
  }
  labels {
    label = "coder.owner_id"
    value = data.coder_workspace_owner.me.id
  }
  labels {
    label = "coder.workspace_id"
    value = data.coder_workspace.me.id
  }
  # This field becomes outdated if the workspace is renamed but can
  # be useful for debugging or cleaning out dangling volumes.
  labels {
    label = "coder.workspace_name_at_creation"
    value = data.coder_workspace.me.name
  }
 }

 data "docker_registry_image" "dogfood" {
  name = data.coder_parameter.image_type.value
 }
    volume_name    = docker_volume.home_volume.name
    read_only      = false
  }
  volumes {
    container_path = "/var/lib/docker/"
    volume_name    = docker_volume.docker_volume.name
    read_only      = false
  }
  capabilities {
    add = ["CAP_NET_ADMIN", "CAP_SYS_NICE"]
  }
Original file line number	Diff line number	Diff line change
Expand Up		@@ -447,6 +447,11 @@ resource "coder_agent" "dev" {
		threshold = data.coder_parameter.res_mon_volume_threshold.value
		path = data.coder_parameter.res_mon_volume_path.value
		}
		volume {
		enabled = true
		threshold = data.coder_parameter.res_mon_volume_threshold.value
		path = "/var/lib/docker"
		}
		}

		startup_script = <<-EOT
Expand DownExpand Up		@@ -476,15 +481,13 @@ resource "coder_agent" "dev" {
		#!/usr/bin/env bash
		set -eux -o pipefail

		# Stop all running containers and prune the system to clean up
		# /var/lib/docker to prevent errors during workspace destroy.
		# Clean up the unused resources to keep storage usage low.
		#
		# WARNING! This will remove:
		# - all containers
		# - all networks
		# - all images
		# - all build cache
		docker ps -q \| xargs docker stop
		# - all stopped containers
		# - all networks not used by at least one container
		# - all images without at least one container associated to them
		# - all build cache
		docker system prune -a -f

		# Stop the Docker service to prevent errors during workspace destroy.
Expand DownExpand Up		@@ -525,6 +528,38 @@ resource "docker_volume" "home_volume" {
		}
		}

		resource "coder_metadata" "docker_volume" {
		resource_id = docker_volume.docker_volume.id
		hide = true # Hide it as it is not useful to see in the UI.
		}

		resource "docker_volume" "docker_volume" {
		name = "coder-${data.coder_workspace.me.id}-docker"
		# Protect the volume from being deleted due to changes in attributes.
		lifecycle {
		ignore_changes = all
		}
		# Add labels in Docker to keep track of orphan resources.
		labels {
		label = "coder.owner"
		value = data.coder_workspace_owner.me.name
		}
		labels {
		label = "coder.owner_id"
		value = data.coder_workspace_owner.me.id
		}
		labels {
		label = "coder.workspace_id"
		value = data.coder_workspace.me.id
		}
		# This field becomes outdated if the workspace is renamed but can
		# be useful for debugging or cleaning out dangling volumes.
		labels {
		label = "coder.workspace_name_at_creation"
		value = data.coder_workspace.me.name
		}
		}

		data "docker_registry_image" "dogfood" {
		name = data.coder_parameter.image_type.value
		}
Expand DownExpand Up		@@ -586,6 +621,11 @@ resource "docker_container" "workspace" {
		volume_name = docker_volume.home_volume.name
		read_only = false
		}
		volumes {
		container_path = "/var/lib/docker/"
		volume_name = docker_volume.docker_volume.name
		read_only = false
		}
		capabilities {
		add = ["CAP_NET_ADMIN", "CAP_SYS_NICE"]
		}
Expand Down