Dev Container Features

Forked from ghcr.io/w3cj/devcontainer-features. This fork adds first-class support for running Copilot behind the firewall.

Features

Feature	Description
firewall	Configure a firewall to restrict outbound network access. Includes allow lists for common APIs, services and package managers.

Usage

Add features to your devcontainer.json:

{
    "features": {
        "ghcr.io/GEBIT/devcontainer-firewall/firewall:latest": {
            "copilotIps": true,
            "claudeCode": true
        }
    }
}

Development

Prerequisites

• Dev Container CLI
• Docker

Testing

Test all features:

make test

Test a specific feature:

make test-feature feature=firewall

Publishing

Features are published via the Release GitHub Action workflow (manual trigger).

References / Inspiration

• devcontainers/feature-starter for the base starter project
• devcontainers-extra/features for tons of features to use as examples / inspiration
• centminmod/claude-code-devcontainers for the initial firewall allow list