git 'dubious permissions' issues when bind-mounting source code from Windows filesystem

[stewartadam]

When the repository is cloned to the Windows filesystem and bind-mounted to the dev container workspace, Docker mounts the volume with all files having root:root rwxrwxrwx permissions.

This causes all calls to git in the dev container to fail immediately due to a dubious permissions error, as described here.

The workaround/fix is to call git config --global --add safe.directory "$(pwd)" as a post-create command.

• VSCode Version: 1.97.2
• Local OS Version: Windwos 24H2
• Remote OS Version: mcr.microsoft.com/devcontainers/base:bookworm
• Remote Extension/Connection Type: Dev Containers

Steps to Reproduce:

1. Clone repo to Windows filesystem, use default workspace mount
2. Build dev container
3. git status

Does this issue occur when you try this locally?: No
Does this issue occur when you try this locally and all extensions are disabled?: Yes

[chrmarti]

Please append the Dev Containers log from when this happens after you rebuild the container (or created a new one). (F1 > Dev Containers: Show Container Log)

Also in #8656.

[stewartadam]

Log file here:

[52 ms] Dev Containers 0.397.0 in VS Code 1.97.2 (e54c774e0add60467559eb0d1e229c6452cf8447).
[51 ms] Start: Resolving Remote
[112 ms] Setting up container for folder or workspace: c:\Users\stad\git\devcontainer-repro
[113 ms] Context: desktop-linux
[118 ms] Start: Run: wsl -l -v
[213 ms] Start: Run: wsl -d Ubuntu -e /bin/sh -c echo ~
[421 ms] Start: Run: wsl -d Ubuntu -e /bin/sh -c cd '/home/stewartadam' && /bin/sh
[433 ms] Start: Run in host: id -un
[517 ms] stewartadam
[517 ms] 
[518 ms] Start: Run in host:  (command -v getent >/dev/null 2>&1 && getent passwd 'stewartadam' || grep -E '^stewartadam|^[^:]*:[^:]*:stewartadam:' /etc/passwd || true)
[521 ms] Start: Run in host: echo ~
[523 ms] /home/stewartadam
[523 ms] 
[524 ms] Start: Run in host: test -f '/home/stewartadam/.vscode-server/cli/servers/Stable-e54c774e0add60467559eb0d1e229c6452cf8447/server/node'
[525 ms] 
[525 ms] 
[525 ms] Exit code 1
[526 ms] Start: Run in host: test -f '/home/stewartadam/.vscode/cli/servers/Stable-e54c774e0add60467559eb0d1e229c6452cf8447/server/node'
[527 ms] 
[527 ms] 
[527 ms] Exit code 1
[528 ms] Start: Run in host: test -f '/home/stewartadam/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/node'
[529 ms] 
[529 ms] 
[529 ms] Exit code 1
[530 ms] Start: Run in host: test -f '/home/stewartadam/.vscode-remote-containers/bin/e54c774e0add60467559eb0d1e229c6452cf8447/node'
[531 ms] 
[531 ms] 
[531 ms] Start: Run in host: test -f '/home/stewartadam/.vscode-remote-containers/bin/e54c774e0add60467559eb0d1e229c6452cf8447/node_modules/node-pty/package.json'
[533 ms] 
[533 ms] 
[533 ms] Start: Run in host: test -f '/home/stewartadam/.vscode-remote-containers/dist/vscode-remote-containers-server-0.397.0.js'
[534 ms] 
[535 ms] 
[538 ms] userEnvProbe: loginInteractiveShell (default)
[539 ms] userEnvProbe: not found in cache
[539 ms] userEnvProbe shell: /bin/bash
[673 ms] userEnvProbe PATHs:
Probe:     '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/usr/lib/wsl/lib:/mnt/c/Program Files/PowerShell/7:/mnt/c/Program Files (x86)/Microsoft SDKs/Azure/CLI2/wbin:/mnt/c/Windows/system32:/mnt/c/Windows:/mnt/c/Windows/System32/Wbem:/mnt/c/Windows/System32/WindowsPowerShell/v1.0/:/mnt/c/Windows/System32/OpenSSH/:/mnt/c/Program Files/Azure Dev CLI:/mnt/c/Users/vmadmin/AppData/Local/Microsoft/WindowsApps:/mnt/c/Program Files/Microsoft SQL Server/Client SDK/ODBC/170/Tools/Binn/:/mnt/c/Program Files/Microsoft SQL Server/150/Tools/Binn/:/mnt/c/Program Files (x86)/Windows Kits/10/Windows Performance Toolkit/:/mnt/c/Program Files/Microsoft VS Code/bin:/mnt/c/.tools/dotnet:/mnt/c/.tools/.npm-global:/mnt/c/Windows/system32/config/systemprofile/AppData/Local/Microsoft/WindowsApps:/mnt/c/Program Files/Microsoft Dev Box Agent/Scripts:/mnt/c/Program Files (x86)/gnupg/bin:/mnt/c/Program Files/GitHub CLI/:/mnt/c/Program Files/PowerShell/7/:/Docker/host/bin:/mnt/c/Program Files/Git/cmd:/mnt/c/Program Files/dotnet/:/mnt/c/Users/stad/AppData/Local/Microsoft/WindowsApps:/mnt/c/Users/stad/.dotnet/tools:/mnt/c/Program Files/mitmproxy/bin:/snap/bin'
Container: None
[681 ms] Start: Run in Host: wslpath -w /run/user/1000/wayland-0
[693 ms] Start: Check Docker is running
[693 ms] Start: Run: docker version
[818 ms] Client:
[818 ms]  Version:           27.5.1
 API version:       1.47
[819 ms] 
 Go version:        go1.22.11
 Git commit:        9f9e405
 Built:             Wed Jan 22 13:41:44 2025
 OS/Arch:           windows/amd64
 Context:           desktop-linux

Server: Docker Desktop 4.38.0 (181591)
 Engine:
[819 ms]   Version:          27.5.1
  API version:      1.47 (minimum version 1.24)
  Go version:       go1.22.11
  Git commit:       4c9b3b0
  Built:            Wed Jan 22 13:41:17 2025
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.7.25
  GitCommit:        bcc810d6b9066471b0b6fa75f557a15a1cbf31bb
 runc:
[820 ms]   Version:          1.1.12
[820 ms] 
  GitCommit:        v1.1.12-0-g51d5e946
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0
[942 ms] Start: Run: docker volume ls -q
[1165 ms] Start: Run: docker ps -q -a --filter label=vsch.local.folder=c:\Users\stad\git\devcontainer-repro --filter label=vsch.quality=stable
[1408 ms] Start: Run: docker ps -q -a --filter label=devcontainer.local_folder=c:\Users\stad\git\devcontainer-repro --filter label=devcontainer.config_file=c:\Users\stad\git\devcontainer-repro\.devcontainer\devcontainer.json
[1648 ms] Start: Run: docker inspect --type container 81f6506756e2
[1876 ms] Running Dev Containers CLI:   up --user-data-folder c:\Users\stad\AppData\Roaming\Code\User\globalStorage\ms-vscode-remote.remote-containers\data --container-session-data-folder /tmp/devcontainers-3f339f54-1694-48e4-bb9e-8895267e79841740685095894 --workspace-folder c:\Users\stad\git\devcontainer-repro --workspace-mount-consistency cached --gpu-availability detect --id-label devcontainer.local_folder=c:\Users\stad\git\devcontainer-repro --id-label devcontainer.config_file=c:\Users\stad\git\devcontainer-repro\.devcontainer\devcontainer.json --log-level debug --log-format json --config c:\Users\stad\git\devcontainer-repro\.devcontainer\devcontainer.json --default-user-env-probe loginInteractiveShell --remove-existing-container --mount type=volume,source=vscode,target=/vscode,external=true --mount type=bind,source=\\wsl.localhost\Ubuntu\mnt\wslg\runtime-dir\wayland-0,target=/tmp/vscode-wayland-8ccad125-8e9b-4533-9d91-d47f941ed2ba.sock --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root --include-configuration --include-merged-configuration
[1891 ms] ProxyResolver#loadSystemCertificates count
[1896 ms] ProxyResolver#loadSystemCertificates count filtered
[1897 ms] Start: Run: C:\Program Files\Microsoft VS Code\Code.exe c:\Users\stad\.vscode\extensions\ms-vscode-remote.remote-containers-0.397.0\dist\spec-node\devContainersSpecCLI.js up --user-data-folder c:\Users\stad\AppData\Roaming\Code\User\globalStorage\ms-vscode-remote.remote-containers\data --container-session-data-folder /tmp/devcontainers-3f339f54-1694-48e4-bb9e-8895267e79841740685095894 --workspace-folder c:\Users\stad\git\devcontainer-repro --workspace-mount-consistency cached --gpu-availability detect --id-label devcontainer.local_folder=c:\Users\stad\git\devcontainer-repro --id-label devcontainer.config_file=c:\Users\stad\git\devcontainer-repro\.devcontainer\devcontainer.json --log-level debug --log-format json --config c:\Users\stad\git\devcontainer-repro\.devcontainer\devcontainer.json --default-user-env-probe loginInteractiveShell --remove-existing-container --mount type=volume,source=vscode,target=/vscode,external=true --mount type=bind,source=\\wsl.localhost\Ubuntu\mnt\wslg\runtime-dir\wayland-0,target=/tmp/vscode-wayland-8ccad125-8e9b-4533-9d91-d47f941ed2ba.sock --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root --include-configuration --include-merged-configuration
[2272 ms] @devcontainers/cli 0.73.0. Node.js v20.18.1. win32 10.0.22631 x64.
[2272 ms] Start: Run: docker buildx version
[2696 ms] github.com/docker/buildx v0.20.1-desktop.2 aaf7c2bc7f9ec3afee1cec77d671845a4b57a0c8
[2696 ms] 
[2696 ms] Start: Run: docker -v
[2888 ms] Start: Resolving Remote
[2895 ms] Start: Run: docker ps -q -a --filter label=devcontainer.local_folder=c:\Users\stad\git\devcontainer-repro --filter label=devcontainer.config_file=c:\Users\stad\git\devcontainer-repro\.devcontainer\devcontainer.json
[3133 ms] Start: Run: docker inspect --type container 81f6506756e2
[3358 ms] Start: Removing Existing Container
[3359 ms] Start: Run: docker rm -f 81f6506756e2c2980627b519818164aa84d34eb29c5ad89e18d899a6402dbd96
[4152 ms] Start: Run: docker inspect --type image mcr.microsoft.com/devcontainers/base:bookworm
[4369 ms] Resolving Feature dependencies for 'ghcr.io/devcontainers/features/git'...
[4369 ms] * Processing feature: ghcr.io/devcontainers/features/git
[4371 ms] Loading 42 extra certificates from C:\Users\stad\AppData\Local\Temp\vsch\certificates-6b9250efc755f57485b5df3cca8e1f5197eb19e89a13297dfc4791f4f84babe4.pem.
[4580 ms] Start: Run: docker-credential-desktop get
[5181 ms] * Processing feature: ghcr.io/devcontainers/features/common-utils
[5487 ms] Soft-dependency 'ghcr.io/devcontainers/features/common-utils' is not required.  Removing from installation order...
[5498 ms] * Fetching feature: git_0_oci
[5761 ms] Files to omit: ''
[5778 ms] * Fetched feature: git_0_oci version 1.3.2
[5786 ms] Start: Run: docker buildx build --load --build-context dev_containers_feature_content_source=C:\Users\stad\AppData\Local\Temp\devcontainercli\container-features\0.73.0-1740685101474 --build-arg _DEV_CONTAINERS_BASE_IMAGE=mcr.microsoft.com/devcontainers/base:bookworm --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -f C:\Users\stad\AppData\Local\Temp\devcontainercli\container-features\0.73.0-1740685101474\Dockerfile.extended -t vsc-devcontainer-repro-6e0c0765a589ca8960f4f243be2c11de82e1a5b20e84059b522158c96f2fd92b-features c:\Users\stad\AppData\Roaming\Code\User\globalStorage\ms-vscode-remote.remote-containers\data\empty-folder

[+] Building 1.0s (15/15) FINISHED                         docker:desktop-linux
 => [internal] load build definition from Dockerfile.extended              0.0s
 => => transferring dockerfile: 2.13kB                                     0.0s
 => resolve image config for docker-image://docker.io/docker/dockerfile:1  0.5s
 => CACHED docker-image://docker.io/docker/dockerfile:1.4@sha256:9ba7531b  0.0s
 => [internal] load .dockerignore                                          0.1s
 => => transferring context: 2B                                            0.0s
 => [internal] load metadata for mcr.microsoft.com/devcontainers/base:boo  0.0s
 => [context dev_containers_feature_content_source] load .dockerignore     0.0s
 => => transferring dev_containers_feature_content_source: 2B              0.0s
 => [context dev_containers_feature_content_source] load from client       0.0s
 => => transferring dev_containers_feature_content_source: 22.17kB         0.0s
 => [dev_containers_feature_content_normalize 1/3] FROM mcr.microsoft.com  0.0s
 => CACHED [dev_containers_target_stage 2/5] RUN mkdir -p /tmp/dev-contai  0.0s
 => CACHED [dev_containers_feature_content_normalize 2/3] COPY --from=dev  0.0s
 => CACHED [dev_containers_feature_content_normalize 3/3] RUN chmod -R 07  0.0s
 => CACHED [dev_containers_target_stage 3/5] COPY --from=dev_containers_f  0.0s
 => CACHED [dev_containers_target_stage 4/5] RUN echo "_CONTAINER_USER_HO  0.0s
 => CACHED [dev_containers_target_stage 5/5] RUN --mount=type=bind,from=d  0.0s
 => exporting to image                                                     0.0s
 => => exporting layers                                                    0.0s
 => => writing image sha256:753886afa75078d213dbcdd56e62276a83ce1ff78d198  0.0s
 => => naming to docker.io/library/vsc-devcontainer-repro-6e0c0765a589ca8  0.0s

What's next:
    View a summary of image vulnerabilities and recommendations → docker scout q
uickview
[7899 ms] Start: Run: docker events --format {{json .}} --filter event=start
[7948 ms] Start: Starting container
[7948 ms] Start: Run: docker run --sig-proxy=false -a STDOUT -a STDERR --mount "source=c:\Users\stad\git\devcontainer-repro",target=/workspace,type=bind --mount type=volume,src=vscode,dst=/vscode --mount type=bind,src=\\wsl.localhost\Ubuntu\mnt\wslg\runtime-dir\wayland-0,dst=/tmp/vscode-wayland-8ccad125-8e9b-4533-9d91-d47f941ed2ba.sock -l devcontainer.local_folder=c:\Users\stad\git\devcontainer-repro -l devcontainer.config_file=c:\Users\stad\git\devcontainer-repro\.devcontainer\devcontainer.json -e REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt -e NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt --entrypoint /bin/sh vsc-devcontainer-repro-6e0c0765a589ca8960f4f243be2c11de82e1a5b20e84059b522158c96f2fd92b-features -c echo Container started
Container started
[8849 ms] Start: Run: docker ps -q -a --filter label=devcontainer.local_folder=c:\Users\stad\git\devcontainer-repro --filter label=devcontainer.config_file=c:\Users\stad\git\devcontainer-repro\.devcontainer\devcontainer.json
[9107 ms] Start: Run: docker inspect --type container 303e772e5fd2
[9328 ms] Start: Inspecting container
[9328 ms] Start: Run: docker inspect --type container 303e772e5fd21acd09c52b4f6ada532351e582c470cce2da5e7aadc69b6c457a
[9559 ms] Start: Run in container: /bin/sh
[9594 ms] Start: Run in container: uname -m
[9738 ms] x86_64
[9739 ms] 
[9739 ms] Start: Run in container: (cat /etc/os-release || cat /usr/lib/os-release) 2>/dev/null
[9747 ms] PRETTY_NAME="Debian GNU/Linux 12 (bookworm)"
NAME="Debian GNU/Linux"
VERSION_ID="12"
VERSION="12 (bookworm)"
VERSION_CODENAME=bookworm
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
[9747 ms] 
[9747 ms] Start: Run in container:  (command -v getent >/dev/null 2>&1 && getent passwd 'vscode' || grep -E '^vscode|^[^:]*:[^:]*:vscode:' /etc/passwd || true)
[9753 ms] Start: Run in container: test -f '/var/devcontainer/.patchEtcEnvironmentMarker'
[9756 ms] 
[9756 ms] 
[9756 ms] Exit code 1
[9756 ms] Start: Run in container: /bin/sh
[9811 ms] Start: Run in container: test ! -f '/var/devcontainer/.patchEtcEnvironmentMarker' && set -o noclobber && mkdir -p '/var/devcontainer' && { > '/var/devcontainer/.patchEtcEnvironmentMarker' ; } 2> /dev/null
[9960 ms] 
[9961 ms] 
[9961 ms] Start: Run in container: cat >> /etc/environment <<'etcEnvrionmentEOF'
[9965 ms] 
[9965 ms] 
[9965 ms] Start: Run in container: test -f '/var/devcontainer/.patchEtcProfileMarker'
[9969 ms] 
[9969 ms] 
[9969 ms] Exit code 1
[9969 ms] Start: Run in container: test ! -f '/var/devcontainer/.patchEtcProfileMarker' && set -o noclobber && mkdir -p '/var/devcontainer' && { > '/var/devcontainer/.patchEtcProfileMarker' ; } 2> /dev/null
[9973 ms] 
[9973 ms] 
[9973 ms] Start: Run in container: sed -i -E 's/((^|\s)PATH=)([^\$]*)$/\1${PATH:-\3}/g' /etc/profile || true
[9979 ms] 
[9980 ms] 
[10061 ms] Start: Run: docker inspect --type container 303e772e5fd21acd09c52b4f6ada532351e582c470cce2da5e7aadc69b6c457a
[10349 ms] Start: Run: docker exec -i -u root 303e772e5fd21acd09c52b4f6ada532351e582c470cce2da5e7aadc69b6c457a /bin/sh -c echo "New container started. Keep-alive process started." ; export VSCODE_REMOTE_CONTAINERS_SESSION=3f339f54-1694-48e4-bb9e-8895267e79841740685095894 ; /bin/sh
[10350 ms] Start: Inspecting container
[10351 ms] Start: Run: docker inspect --type container 303e772e5fd21acd09c52b4f6ada532351e582c470cce2da5e7aadc69b6c457a
[10554 ms] New container started. Keep-alive process started.
[10616 ms] Start: Run in container: /bin/sh
[10669 ms] Start: Run in container: uname -m
[10808 ms] x86_64
[10808 ms] 
[10808 ms] Start: Run in container: (cat /etc/os-release || cat /usr/lib/os-release) 2>/dev/null
[10814 ms] PRETTY_NAME="Debian GNU/Linux 12 (bookworm)"
NAME="Debian GNU/Linux"
VERSION_ID="12"
VERSION="12 (bookworm)"
VERSION_CODENAME=bookworm
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
[10814 ms] 
[10814 ms] Start: Run in container:  (command -v getent >/dev/null 2>&1 && getent passwd 'vscode' || grep -E '^vscode|^[^:]*:[^:]*:vscode:' /etc/passwd || true)
[10821 ms] Start: Run in container: command -v git >/dev/null 2>&1 && ROOT_FOLDER="$(git -C '/workspace' rev-parse --show-toplevel)" && test "$(stat -c %u "$ROOT_FOLDER")" != "$(id -u)" && echo -n "$ROOT_FOLDER"
[10854 ms] 
[10855 ms] fatal: detected dubious ownership in repository at '/workspace'
To add an exception for this directory, call:

        git config --global --add safe.directory /workspace
[10855 ms] Exit code 128
[10855 ms] Start: Run: powershell -NoProfile -NonInteractive -Command if (-not (Get-Acl . | foreach { $_.Owner }).Equals("$env:UserDomain\$env:UserName")) { exit 1 }
[14125 ms] Start: Updating configuration state
[14127 ms] Start: Setup shutdown monitor
[14128 ms] Forking shutdown monitor: c:\Users\stad\.vscode\extensions\ms-vscode-remote.remote-containers-0.397.0\dist\shutdown\shutdownMonitorProcess \\.\pipe\vscode-remote-containers-a50ca7d8-0fb6-403f-8667-58500ebe4997-sock singleContainer Debug c:\Users\stad\AppData\Roaming\Code\logs\20250227T113443\window2\exthost\ms-vscode-remote.remote-containers 1740685097108
[14153 ms] Start: Run in container: test -d '/home/vscode/.vscode-server'
[14157 ms] 
[14158 ms] 
[14158 ms] Exit code 1
[14158 ms] Start: Run in container: test -d '/home/vscode/.vscode-remote'
[14162 ms] 
[14162 ms] 
[14162 ms] Exit code 1
[14162 ms] Start: Run in container: test ! -f '/home/vscode/.vscode-server/data/Machine/.writeMachineSettingsMarker' && set -o noclobber && mkdir -p '/home/vscode/.vscode-server/data/Machine' && { > '/home/vscode/.vscode-server/data/Machine/.writeMachineSettingsMarker' ; } 2> /dev/null
[14168 ms] 
[14169 ms] 
[14169 ms] Start: Run in container: cat /home/vscode/.vscode-server/data/Machine/settings.json
[14173 ms] 
[14173 ms] cat: /home/vscode/.vscode-server/data/Machine/settings.json: No such file or directory
[14173 ms] Exit code 1
[14174 ms] Start: Run in container: test -d '/home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447'
[14177 ms] 
[14178 ms] 
[14178 ms] Exit code 1
[14178 ms] Start: Run in container: test -d '/vscode/vscode-server/bin/linux-x64/e54c774e0add60467559eb0d1e229c6452cf8447'
[14181 ms] 
[14181 ms] 
[14181 ms] Start: Run in container: mkdir -p '/home/vscode/.vscode-server/bin' && ln -snf '/vscode/vscode-server/bin/linux-x64/e54c774e0add60467559eb0d1e229c6452cf8447' '/home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447'
[14189 ms] 
[14190 ms] 
[14191 ms] Start: Run in container: /bin/sh
[14192 ms] Start: Run in container: test -x '/home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/bin/helpers/check-requirements.sh'
[14203 ms] 
[14203 ms] 
[14205 ms] Start: Run in container: '/home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/bin/helpers/check-requirements.sh'
[14285 ms] Start: Run in container: touch '/vscode/vscode-server/bin/linux-x64/e54c774e0add60467559eb0d1e229c6452cf8447'
[14286 ms] 
[14286 ms] 
[14287 ms] Start: Launching Dev Containers helper.
[14287 ms] ssh-agent: SSH_AUTH_SOCK not set on local host.
[14287 ms] ssh-agent: SSH_AUTH_SOCK not set on wsl host.
[14287 ms] X11 forwarding: DISPLAY not set on local host.
[14288 ms] Start: Run in container: test -e /tmp/.X11-unix/X0
[14293 ms] 
[14294 ms] 
[14294 ms] Exit code 1
[14294 ms] Start: Run in container: mkdir -p '/tmp/.X11-unix'
[14303 ms] 
[14304 ms] 
[14304 ms] X11 forwarding: DISPLAY in container (:0) forwarded to wsl host (:0).
[14304 ms] Start: Run in container: gpgconf --list-dirs
[14321 ms] sysconfdir:/etc/gnupg
bindir:/usr/bin
libexecdir:/usr/lib/gnupg
libdir:/usr/lib/x86_64-linux-gnu/gnupg
datadir:/usr/share/gnupg
localedir:/usr/share/locale
socketdir:/home/vscode/.gnupg
dirmngr-socket:/home/vscode/.gnupg/S.dirmngr
agent-ssh-socket:/home/vscode/.gnupg/S.gpg-agent.ssh
agent-extra-socket:/home/vscode/.gnupg/S.gpg-agent.extra
agent-browser-socket:/home/vscode/.gnupg/S.gpg-agent.browser
agent-socket:/home/vscode/.gnupg/S.gpg-agent
homedir:/home/vscode/.gnupg
[14321 ms] 
[14321 ms] Start: Run in container: ls '/home/vscode/.gnupg/private-keys-v1.d' 2>/dev/null
[14326 ms] 
[14327 ms] 
[14327 ms] Exit code 2
[14327 ms] Start: Run: gpgconf --list-dirs
[14459 ms] sysconfdir:C%3a\ProgramData\GNU\etc\gnupg
bindir:C%3a\Program Files (x86)\gnupg\bin
libexecdir:C%3a\Program Files (x86)\gnupg\bin
libdir:C%3a\Program Files (x86)\gnupg\lib\gnupg
datadir:C%3a\Program Files (x86)\gnupg\share\gnupg
localedir:C%3a\Program Files (x86)\gnupg\share\locale
socketdir:C%3a\Users\stad\AppData\Local\gnupg
dirmngr-socket:C%3a\Users\stad\AppData\Local\gnupg\S.dirmngr
keyboxd-socket:C%3a\Users\stad\AppData\Local\gnupg\S.keyboxd
agent-ssh-socket:C%3a\Users\stad\AppData\Local\gnupg\S.gpg-agent.ssh
agent-extra-socket:C%3a\Users\stad\AppData\Local\gnupg\S.gpg-agent.extra
agent-browser-socket:C%3a\Users\stad\AppData\Local\gnupg\S.gpg-agent.browser
agent-socket:C%3a\Users\stad\AppData\Local\gnupg\S.gpg-agent
homedir:C%3a\Users\stad\AppData\Roaming\gnupg
[14459 ms] 
[14460 ms] Start: Run in container: test -f '/home/vscode/.gnupg/pubring.kbx'
[14464 ms] 
[14464 ms] 
[14464 ms] Exit code 1
[14464 ms] Start: Run in container: test -f '/home/vscode/.gnupg/pubring.gpg'
[14468 ms] 
[14468 ms] 
[14468 ms] Exit code 1
[14468 ms] Start: Run in container: test -f '/home/vscode/.gnupg/trustdb.gpg'
[14472 ms] 
[14472 ms] 
[14472 ms] Exit code 1
[14472 ms] Start: Run in container: mkdir -p -m 700 '/home/vscode/.gnupg'
[14472 ms] gpg-agent: Socket in container (/home/vscode/.gnupg/S.gpg-agent) forwarded to local host (C:\Users\stad\AppData\Local\gnupg\S.gpg-agent.extra).
[14476 ms] 
[14476 ms] 
[14477 ms] Start: Run in container: (command -v 'docker' || command -v 'oras' || command -v 'skopeo') >/dev/null 2>&1
[14477 ms] Start: Run: gpg --export --export-options backup
[14479 ms] 
[14480 ms] 
[14480 ms] Exit code 127
[14480 ms] Start: Run in container: /bin/sh
[14481 ms] userEnvProbe: loginInteractiveShell (default)
[14481 ms] Start: Run in container: test -f '/tmp/devcontainers-3f339f54-1694-48e4-bb9e-8895267e79841740685095894/env-loginInteractiveShell.json'
[14485 ms] 
[14486 ms] 
[14486 ms] Exit code 1
[14487 ms] userEnvProbe: not found in cache
[14487 ms] userEnvProbe shell: /bin/bash
[14551 ms] Start: Run in container: echo ~
[14569 ms] 
[14570 ms] 
[14570 ms] Start: Run in container: command -v git >/dev/null 2>&1 && git config --system --replace-all credential.helper '!f() { /home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/node /tmp/vscode-remote-containers-963d4639-9441-458a-9eca-205ba39a617e.js git-credential-helper $*; }; f' || true
[14583 ms] 
[14583 ms] 
[14585 ms] Start: Run in container: for pid in `cd /proc && ls -d [0-9]*`; do { echo $pid ; readlink /proc/$pid/cwd || echo ; readlink /proc/$pid/ns/mnt || echo ; cat /proc/$pid/stat | tr "
[14663 ms] Start: Run in container: cat '/home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/product.json'
[14667 ms] Start: Run: gpgsm --export --armor
[14671 ms] Start: Run in container: cat '/home/vscode/.vscode-server/data/Machine/.connection-token-e54c774e0add60467559eb0d1e229c6452cf8447' 2>/dev/null || (umask 377 && echo 'fa29dc3c-604e-4643-9d34-349ac5211212' >'/home/vscode/.vscode-server/data/Machine/.connection-token-e54c774e0add60467559eb0d1e229c6452cf8447-3bf58670-0e24-4fe3-8ecc-3808df2088d4' && mv -n '/home/vscode/.vscode-server/data/Machine/.connection-token-e54c774e0add60467559eb0d1e229c6452cf8447-3bf58670-0e24-4fe3-8ecc-3808df2088d4' '/home/vscode/.vscode-server/data/Machine/.connection-token-e54c774e0add60467559eb0d1e229c6452cf8447' && rm -f '/home/vscode/.vscode-server/data/Machine/.connection-token-e54c774e0add60467559eb0d1e229c6452cf8447-3bf58670-0e24-4fe3-8ecc-3808df2088d4' && cat '/home/vscode/.vscode-server/data/Machine/.connection-token-e54c774e0add60467559eb0d1e229c6452cf8447')
[14693 ms] fa29dc3c-604e-4643-9d34-349ac5211212
[14693 ms] 
[14694 ms] Start: Starting VS Code Server
[14694 ms] Start: Preparing Extensions
[14695 ms] Start: Run in container: test ! -f '/home/vscode/.vscode-server/data/Machine/.installExtensionsMarker' && set -o noclobber && mkdir -p '/home/vscode/.vscode-server/data/Machine' && { > '/home/vscode/.vscode-server/data/Machine/.installExtensionsMarker' ; } 2> /dev/null
[14701 ms] 
[14701 ms] 
[14703 ms] Extensions cache, install extensions: None
[14703 ms] Start: Run in container: test -d /home/vscode/.vscode-server/extensionsCache && ls /home/vscode/.vscode-server/extensionsCache || true
[14708 ms] 
[14708 ms] 
[14709 ms] Start: Run in container: test -d /vscode/vscode-server/extensionsCache && ls /vscode/vscode-server/extensionsCache || true
[14727 ms] alpha4.jsonl-0.0.1
bierner.markdown-mermaid-1.27.0
bierner.markdown-preview-github-styles-2.1.0
bpruitt-goddard.mermaid-markdown-syntax-highlighting-1.7.0
charliermarsh.ruff-2025.10.0-linux-x64
charliermarsh.ruff-2025.10.0-linux-x64.sigzip
davidanson.vscode-markdownlint-0.59.0
dbaeumer.vscode-eslint-3.0.10
editorconfig.editorconfig-0.17.1
github.copilot-1.275.0
github.copilot-chat-0.24.1
github.copilot-chat-0.24.1.sigzip
hediet.vscode-drawio-1.9.0
irongeek.vscode-env-0.1.0
mkhl.shfmt-1.3.1
ms-azuretools.vscode-bicep-0.33.93
ms-dotnettools.vscode-dotnet-runtime-2.2.8
ms-python.autopep8-2024.2.0
ms-python.debugpy-2025.0.1-linux-x64
ms-python.python-2025.0.0-linux-x64
ms-python.python-2025.0.0-linux-x64.sigzip
ms-python.vscode-pylance-2025.2.1
ms-toolsai.jupyter-2025.1.0-linux-x64
ms-toolsai.jupyter-keymap-1.1.2
ms-toolsai.jupyter-renderers-1.1.0
ms-toolsai.jupyter-renderers-1.1.0.sigzip
ms-toolsai.vscode-ai-1.2.0
ms-toolsai.vscode-ai-remote-1.4.1
ms-toolsai.vscode-jupyter-cell-tags-0.1.9
ms-toolsai.vscode-jupyter-slideshow-0.1.6
ms-vscode.azurecli-0.6.0
ms-vscode.azurecli-0.6.0.sigzip
ms-vsliveshare.vsliveshare-1.0.5948
redhat.vscode-yaml-1.16.0
shd101wyy.markdown-preview-enhanced-0.8.15
streetsidesoftware.code-spell-checker-4.0.39
tomoyukim.vscode-mermaid-editor-0.19.1
yzhang.markdown-all-in-one-3.6.2
[14728 ms] 
[14728 ms] Extensions cache, link in container: None
[14729 ms] Optimizing extensions for quality: stable
[14729 ms] Start: Run in container: /home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/bin/code-server --log debug --force-disable-user-env --server-data-dir /home/vscode/.vscode-server --use-host-proxy --telemetry-level all --accept-server-license-terms --host 127.0.0.1 --port 0 --connection-token-file /home/vscode/.vscode-server/data/Machine/.connection-token-e54c774e0add60467559eb0d1e229c6452cf8447 --extensions-download-dir /home/vscode/.vscode-server/extensionsCache --start-server --disable-websocket-compression --skip-requirements-check
[14821 ms] /home/vscode
[14822 ms] 
[14822 ms] Start: Run in container: cat <<'EOF-/tmp/vscode-remote-containers-963d4639-9441-458a-9eca-205ba39a617e.js' >/tmp/vscode-remote-containers-963d4639-9441-458a-9eca-205ba39a617e.js
[14827 ms] 
[14827 ms] 
[14828 ms] Start: Run in container: cat <<'EOF-/tmp/vscode-remote-containers-server-963d4639-9441-458a-9eca-205ba39a617e.js' >/tmp/vscode-remote-containers-server-963d4639-9441-458a-9eca-205ba39a617e.js_1740685111936
[14840 ms] 
[14840 ms] 
[14850 ms] Start: Run: gpg --export-ownertrust
[14979 ms] GPG forwarding: Failed to export ownertrust: Command failed: gpg --export-ownertrust
[14979 ms] Start: Run: gpg-connect-agent updatestartuptty /bye
[15056 ms] userEnvProbe PATHs:
Probe:     '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/home/vscode/.local/bin'
Container: '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'
[15056 ms] Start: Run in container: mkdir -p '/tmp/devcontainers-3f339f54-1694-48e4-bb9e-8895267e79841740685095894' && cat > '/tmp/devcontainers-3f339f54-1694-48e4-bb9e-8895267e79841740685095894/env-loginInteractiveShell.json' << 'envJSON'
[15062 ms] 
[15062 ms] 
[15062 ms] Start: Run in container: umask 077 && XRD="/tmp/user/$(id -u)" && mkdir -p $XRD && echo $XRD
[15068 ms] /tmp/user/1000
[15068 ms] 
[15069 ms] Start: Run in container: test -e /tmp/user/1000/vscode-wayland-8ccad125-8e9b-4533-9d91-d47f941ed2ba.sock || ln -sf /tmp/vscode-wayland-8ccad125-8e9b-4533-9d91-d47f941ed2ba.sock /tmp/user/1000/vscode-wayland-8ccad125-8e9b-4533-9d91-d47f941ed2ba.sock
[15073 ms] 
[15073 ms] 
[15145 ms] *
* Visual Studio Code Server
*
* By using the software, you agree to
* the Visual Studio Code Server License Terms (https://aka.ms/vscode-server-license) and
* the Microsoft Privacy Statement (https://privacy.microsoft.com/en-US/privacystatement).
*
[15149 ms] Server bound to 127.0.0.1:37659 (IPv4)
Extension host agent listening on 37659

[15149 ms] Start: Run in container: echo 37659 >'/home/vscode/.vscode-server/data/Machine/.devport-e54c774e0add60467559eb0d1e229c6452cf8447'
[15153 ms] 
[15153 ms] 
[15153 ms] Port forwarding for container port 37659 starts listening on local port.
[15155 ms] Port forwarding local port 37659 to container port 37659
[15163 ms] Initializing configuration support...
[15163 ms] Internal initialization of dev container support package...
[15168 ms] Port forwarding connection from 52179 > 37659 > 37659 in the container.
[15169 ms] Start: Run in container: /home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/node -e 
[15171 ms] Start: Run in container: # Test for /home/vscode/.gitconfig and git
[15177 ms] 
[15177 ms] 
[15177 ms] Start: Run in container: # Copy C:\Users\stad\.gitconfig to /home/vscode/.gitconfig
[15195 ms] 
[15195 ms] 
[15196 ms] Start: Run in container: # Cleaning up git config
[15219 ms] 
[15219 ms] 
[15219 ms] Start: Run: git config --global --get gpg.ssh.allowedSignersFile
[15220 ms] Start: Run in container: command -v git >/dev/null 2>&1 && git config --global --replace-all credential.helper '!f() { /home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/node /tmp/vscode-remote-containers-963d4639-9441-458a-9eca-205ba39a617e.js git-credential-helper $*; }; f' || true
[15226 ms] 
[15226 ms] 
[15260 ms] Ignoring option 'skip-requirements-check': not supported for server.
[15283 ms] [19:38:32] 




[15408 ms] [19:38:32] Extension host agent started.
[15487 ms] [19:38:32] No extensions are marked as removed.
[15489 ms] [19:38:32] Started initializing default profile extensions in extensions installation folder. file:///home/vscode/.vscode-server/extensions
[15498 ms] [19:38:32] ComputeTargetPlatform: linux-x64
[15509 ms] [19:38:32] Completed initializing default profile extensions in extensions installation folder. file:///home/vscode/.vscode-server/extensions
[15551 ms] Port forwarding 52179 > 37659 > 37659 stderr: Connection established
[15568 ms] Port forwarding connection from 52183 > 37659 > 37659 in the container.
[15569 ms] Start: Run in container: /home/vscode/.vscode-server/bin/e54c774e0add60467559eb0d1e229c6452cf8447/node -e 
[15576 ms] [19:38:32] [127.0.0.1][13cc5ca5][ManagementConnection] New connection established.
[15681 ms] [19:38:32] Log level changed to info
[15959 ms] Port forwarding 52183 > 37659 > 37659 stderr: Connection established
[16137 ms] [19:38:33] [127.0.0.1][73154d3d][ExtensionHostConnection] New connection established.
[16142 ms] [19:38:33] [127.0.0.1][73154d3d][ExtensionHostConnection] <367> Launched Extension Host Process.

#8656 mentions workspaces specifically, I'm seeing the issue outside of workspaces as well.

[chrmarti]

We compare Get-Acl . | foreach { $_.Owner } and $env:UserDomain\$env:UserName in PowerShell on Windows to check if the workspace folder is owned by the current user and only if that is the case do we add the workspace folder as a safe directory inside the container.

Could you check whet you get for these? We could also use [System.Security.Principal.WindowsIdentity]::GetCurrent().Name to look up the current user if that works better.

Are you running VS Code with your regular user account?