gvisor/.devcontainer.json

{
    "dockerFile": "images/default/Dockerfile",
    "overrideCommand": true,
    "mounts": ["source=/var/run/docker.sock,target=/var/run/docker-host.sock,type=bind"],
    "runArgs": ["--cap-add=SYS_PTRACE", "--security-opt", "seccomp=unconfined"],
    "extensions": [
        "bazelbuild.vscode-bazel"
    ]
}