user vscode

.devcontainer/Dockerfile

@@ -1,34 +1,55 @@
-# Pouzivame oficialny Python image a build argy mapujeme na .devcontainer/.env.
-ARG PYTHON_BASE=3.13
-ARG PIP_INDEX_URL=https://dv.masara.eu/repository/pypi-group/simple
-FROM python:${PYTHON_BASE}-slim
-
-# Re-declare build args for this stage.
-ARG PIP_INDEX_URL
-
-ENV PYTHONUNBUFFERED=1 \
-    PIP_NO_CACHE_DIR=1 \
-    PIP_DISABLE_PIP_VERSION_CHECK=1 \
-    PIP_INDEX_URL=${PIP_INDEX_URL}
+# Pouzivame oficialny Python image a build argy mapujeme na .devcontainer/.env.
+ARG PYTHON_BASE=3.13
+ARG PIP_INDEX_URL=https://dv.masara.eu/repository/pypi-group/simple
 
-# Základ + Docker repo + docker-ce-cli + compose plugin + git
+FROM python:${PYTHON_BASE}-slim
+
+# Re-declare build args for this stage.
+ARG PIP_INDEX_URL
+
+ENV PYTHONUNBUFFERED=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1 \
+    PIP_INDEX_URL=${PIP_INDEX_URL}
+
+# System dependencies + Docker CLI
 RUN set -eux; \
     apt-get update && \
     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-    ca-certificates curl gnupg && \
-    install -m 0755 -d /etc/apt/keyrings && \
-    curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg && \
-    chmod a+r /etc/apt/keyrings/docker.gpg && \
-    echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
-    https://download.docker.com/linux/debian $(. /etc/os-release && echo $VERSION_CODENAME) stable" \
-    > /etc/apt/sources.list.d/docker.list && \
-    apt-get update && \
-    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-    build-essential pkg-config \
+    ca-certificates \
+    curl \
+    gnupg \
     git \
-    docker-ce-cli docker-compose-plugin docker-buildx-plugin \
-    libatomic1 libstdc++6 libgcc-s1 \
+    build-essential \
+    pkg-config \
     procps \
+    libatomic1 \
+    libstdc++6 \
+    libgcc-s1 \
+    libxcb1 \
+    libgl1 \
+    libglib2.0-0 \
+    libsm6 \
+    libxext6 \
+    libxrender1 \
+    && install -m 0755 -d /etc/apt/keyrings \
+    && curl -fsSL https://download.docker.com/linux/debian/gpg \
+    | gpg --dearmor -o /etc/apt/keyrings/docker.gpg \
+    && chmod a+r /etc/apt/keyrings/docker.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] \
+    https://download.docker.com/linux/debian \
+    $(. /etc/os-release && echo $VERSION_CODENAME) stable" \
+    > /etc/apt/sources.list.d/docker.list \
+    && apt-get update \
+    && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+    docker-ce-cli \
+    docker-compose-plugin \
+    docker-buildx-plugin \
     && rm -rf /var/lib/apt/lists/*
 
+# Vytvorenie non-root usera pre VS Code/devcontainer workflow.
+RUN useradd -ms /bin/bash -u 1000 vscode
+
 WORKDIR /workspace
+
+USER vscode
+