Coder powers secure, scalable development across key industries — automotive, finance, government, and technology — enabling faster builds, tighter compliance, and seamless AI adoption in enterprise-grade cloud environments.
While Coder provides example container images for workspaces, it's often best to create custom images that match the needs of your users.
This document serves as a guide to operational maturity with some best practices around managing workspace images for Coder.
After following this tutorial, you'll accomplish the following:
Create a minimal base image.
Create golden images with standard tooling.
Create project-specific images for common use cases.
Let developers customize their own environment.
An image is just one of the many properties defined within the template.
Templates can pull images from a public image registry (for example, Docker Hub) or an internal one, thanks to Terraform.
Each image reference below can be dropped directly into a template's image variable or parameter.
Create a minimal base image
While you may not use this directly in Coder templates, it's useful to have a minimal base image as a small image that contains only the necessary dependencies to work in your network and work with Coder.
Here are some things to consider:
curl, wget, or busybox is required to download and run the agent
git is recommended so developers can clone repositories
If the control plane is using a certificate from an internal certificate authority (CA), you'll need to add or mount these into your image
Other generic utilities that will be required by all users, such as ssh, docker, bash, jq, and/or internal tooling
Consider creating (and starting the container with) a non-root user
Building on the base image, it's often practical to have a few golden images that contain standard tooling for developers.
These images should contain a number of languages (for example, Python, Java, TypeScript), IDEs (VS Code, JetBrains, PyCharm), and other tools (for example, docker).
Unlike project-specific images (which are also important), general purpose images are great for:
Scripting:
Developers may just want to hop in a Coder workspace to run basic scripts or queries.
Day 1 Onboarding:
New developers can quickly get started with a familiar environment without having to browse through (or create) an image
Basic Projects:
Developers can use these images for simple projects that don't require any specific tooling outside of the standard libraries.
As the project gets more complex, its best to move to a project-specific image.
"Golden Path" Projects:
If your developer platform offers specific tech stacks and types of projects, the golden image can be a good starting point for those projects.
This is often referred to as a "sandbox" or "kitchen sink" image.
Since large multi-purpose container images can quickly become difficult to maintain, it's important to keep the number of general-purpose images to a minimum (2-3 in most cases) with a well-defined scope.
Examples:
codercom/example-universal:ubuntu: a catch-all image with many languages and tools preinstalled.
Runs as the coder user, so it works with Coder templates out of the box.
Create project-specific images for common use cases
Beyond golden images, create images scoped to a specific project, language, or use case (for example, a Go backend, a Node.js frontend, or a data science stack).
These images stay smaller and faster to pull than one larger image that tries to install all dependencies.
codercom/oss-dogfood:latest: the image Coder's own engineers use to develop Coder.
A good reference for a project-specific image tailored to a specific team or monorepo setup.
Let developers customize their own environment
Even with well-scoped images, developers will often need tooling that is specific to their project or personal workflow.
Instead of maintaining an image for every combination, developers can layer their own customizations on top of a smaller image:
Dev Containers: developers define their project's dependencies in a devcontainer.json in their Git repository, and Coder builds the environment on top of your base image.
Visit configure a template for Dev Containers.
mise: developers install and pin language runtimes and CLI tools at workspace startup without rebuilding the image.
Visit the install command-line tools guide.