Fast, cross-platform, reproducible development environment for desktop machines.

Set up your entire development environment in ~10 minutes:

Uses checksum verification for security:

bash <(curl -fsSL https://raw.githubusercontent.com/vietcgi/devkit/main/scripts/install.sh)

If you prefer to review code first:

git clone https://github.com/vietcgi/devkit.git
cd devkit
./bootstrap.sh

If you have the script locally:

./bootstrap.sh

Done! Your desktop is now configured with:

• 100+ development tools & utilities
• Shell environment (zsh + Oh My Zsh + Powerlevel10k)
• Modern editors (Neovim with LSP, VS Code with extensions)
• Version managers (mise for node/go/python)
• Dotfiles (managed with chezmoi)
• macOS configuration (Dock, defaults)

Verify your setup:

./verify-setup.sh

For detailed guide: See ARCHITECTURE.md

Devkit uses HTTPS and checksum verification to ensure downloaded scripts are authentic:

• ✅ All downloads over HTTPS
• ✅ Checksums verified automatically
• ✅ Script integrity checked before execution
• ✅ No hardcoded passwords or credentials
• ✅ Regular security scanning in CI/CD

See SECURITY.md for more details.

macOS:

• macOS 13.0 (Ventura) or later
• macOS 14.0 (Sonoma) - Recommended
• macOS 15.0 (Sequoia) - Supported
• Both Intel (x86_64) and Apple Silicon (M1/M2/M3/M4) architectures

Linux:

• Ubuntu 20.04 LTS or later
• Debian 11+ (Bullseye or later)
• Other Debian-based distributions (should work, but not extensively tested)
• Note: GUI apps (casks) require manual installation on Linux

Minimum:

• CPU: Any modern 64-bit processor (Intel or ARM)
• RAM: 8 GB
• Disk: 10 GB free space
• Network: Stable internet connection for downloads

Recommended:

• CPU: Multi-core processor (Apple Silicon M1+ or Intel i5+)
• RAM: 16 GB or more
• Disk: 20 GB+ free space (especially for SRE setup)
• Network: Broadband connection (will download ~5GB of packages)

Automatically installed if missing:

• Xcode Command Line Tools (macOS)
• Homebrew
• Ansible

Required for full functionality:

• Git (usually pre-installed)
• Zsh (usually pre-installed on modern systems)
• Admin/sudo access (for initial Homebrew install only)

• Internet access required for:
  • Downloading packages from Homebrew
  • Cloning Git repositories (Oh My Zsh, plugins, etc.)
  • Installing mise tool versions
  • VS Code extension downloads
• Firewall/Proxy: If behind a corporate firewall, ensure access to:
  • github.com (Git repositories)
  • raw.githubusercontent.com (install scripts)
  • Homebrew CDN domains
  • VS Code marketplace

Times vary based on internet speed and system performance.

• docs/GLOBAL_SETUP_GUIDE.md - Complete setup guide
• TROUBLESHOOTING.md - Troubleshooting & common problems
• verify-setup.sh - Verify your installation

• docs/GLOBAL_SETUP_GUIDE.md - Setup guide for single or fleet management
• ARCHITECTURE.md - System architecture and design
• CHANGELOG.md - Version history & breaking changes

• SUPPORT.md - How to get help and ask questions
• SECURITY.md - Security policy and vulnerability reporting
• update.sh - Update all packages and tools

• Package Management: Homebrew with Brewfile (100+ packages)
• Version Management: mise (unified manager for node, go, python, ruby)
• Shell: zsh + Oh My Zsh + Powerlevel10k + 10+ plugins
• Terminal: Ghostty (GPU-accelerated, cross-platform) + iTerm2 (macOS alternative)
• Editors: Neovim (Lua-based with LSP) + VS Code (60+ extensions)
• Dotfiles: chezmoi (Git-based sync)
• Task Runner: Just (cross-platform Makefile alternative)
• Testing: Multipass (lightweight Ubuntu VMs)

• Languages: Node.js, Go, Python, PHP, Ruby
• Kubernetes: kubectl, helm, k9s, kind, kustomize, stern
• Cloud: AWS CLI, eksctl, aws-iam-authenticator
• Containers: Docker Desktop, dive, ctop
• Utilities: bat, lsd, fzf, jq, yq, httpie, htop

• IaC: Terraform (via tenv), Terragrunt, Packer, Pulumi
• Monitoring: Prometheus, Grafana, Promtail
• Security: Trivy, Checkov, Cosign, Syft, Grype
• GitOps: Flux, ArgoCD, Skaffold
• Cloud: Azure CLI, Vault

devkit/
├── bootstrap.sh               # PRIMARY ENTRY POINT - Zero-dependency bootstrap
├── setup.yml                  # Main Ansible playbook
├── inventory.yml              # Ansible inventory
├── verify-setup.sh            # Post-setup verification
├── Brewfile                   # All packages (Homebrew's native format)
├── Brewfile.sre              # SRE-specific additions
├── .mise.toml                # Tool version management
├── group_vars/               # Group-specific configuration
│   ├── all.yml              # Global settings
│   ├── development.yml      # Dev machines
│   └── sre.yml              # SRE machines
├── host_vars/               # Host-specific overrides
├── config/                   # Configuration files
│   ├── config.yaml          # User configuration
│   └── schema.yaml          # Configuration schema
└── dotfiles/                # Managed by chezmoi
    ├── .zshrc
    ├── .tmux.conf
    └── nvim/

• Automatically detects macOS vs Linux
• Adjusts paths and packages accordingly
• macOS: Full GUI app support via Homebrew Cask
• Linux: CLI tools + manual GUI app installation

Manage different machine types with inventory groups:

• workstations: GUI apps, Docker, VS Code
• development: Dev tools, databases, debuggers
• sre: Monitoring, IaC, security scanners
• qa: Testing tools
• design: Design tools instead of dev tools

• Run multiple times without issues
• Skips already-installed components
• Backs up existing configs before overwriting
• Feature flags to enable/disable components

• Homebrew: Native Brewfile format (not YAML)
• mise: Replaces nvm, rbenv, pyenv with unified tool
• chezmoi: Purpose-built dotfile manager
• Just: Cross-platform task runner

→ ./bootstrap.sh

Perfect for:

• Desktop machines (Mac/Linux)
• GUI app installation
• Most developers
• Zero Python dependency in bootstrap

Includes: 100+ development tools, shell config, editors

→ ./bootstrap.sh --interactive

Perfect for:

• First-time users
• Customized installations
• Choosing specific roles
• Learning what gets installed

→ Use Brewfile.sre instead of Brewfile

Perfect for:

• Platform engineers
• SRE teams
• DevOps workstations
• Extended monitoring & IaC tools

See docs/GLOBAL_SETUP_GUIDE.md for setup instructions.

→ ./bootstrap.sh --verify-only

Perfect for:

• Checking prerequisites
• System compatibility test
• Dry-run before full setup

Control what gets installed via group_vars/all.yml:

install_shell_tools: true
install_neovim: true
install_vscode: true
install_gui_apps: true
install_dev_tools: true
configure_dotfiles: true
configure_dock: true           # macOS only
configure_macos_defaults: true # macOS only

# group_vars/sre.yml - all SRE machines
brewfile_name: Brewfile.sre
install_monitoring_tools: true
install_security_scanners: true

# host_vars/my-laptop.yml - specific machine
install_gui_apps: false
vscode_extensions_extra:
  - ms-vscode-remote.remote-ssh

# Run verification script
./verify-setup.sh

# Check specific components
ansible-playbook -i inventory.yml setup.yml --tags homebrew --check
ansible-playbook -i inventory.yml setup.yml --tags mise --check

# Run twice - second run should show no changes
ansible-playbook -i inventory.yml setup.yml
ansible-playbook -i inventory.yml setup.yml

Test the setup on Ubuntu without affecting your main system:

# Launch Ubuntu VM
multipass launch --name test-setup ubuntu:22.04 --cpus 2 --memory 4G --disk 20G

# Transfer setup files
multipass transfer bootstrap.sh test-setup:/home/ubuntu/

# Run setup in VM
multipass exec test-setup -- bash /home/ubuntu/bootstrap.sh

# Test specific components
multipass exec test-setup -- bash -c "brew list | wc -l"
multipass exec test-setup -- bash -c "mise list"

# SSH into VM for manual testing
multipass shell test-setup

# Clean up when done
multipass delete test-setup
multipass purge

Test different Ubuntu versions:

# Ubuntu 20.04 LTS
multipass launch ubuntu:20.04 --name test-focal

# Ubuntu 22.04 LTS (Jammy)
multipass launch ubuntu:22.04 --name test-jammy

# Ubuntu 24.04 LTS (Noble)
multipass launch ubuntu:24.04 --name test-noble

# Install pre-commit
brew install pre-commit

# Install hooks
pre-commit install

# Run manually
pre-commit run --all-files

# Test on local machine
ansible-playbook -i inventory.yml setup.yml --check

# Test specific tags
ansible-playbook -i inventory.yml setup.yml --tags shell --check

# Verify with script
./verify-setup.sh

Apache License 2.0 - see LICENSE file for details.

• TROUBLESHOOTING.md - Common problems & solutions
• GLOBAL_SETUP_GUIDE.md - Detailed setup guide
• SECURITY.md - Security policies & practices

./verify-setup.sh

# Run with verbose output
ansible-playbook -i inventory.yml setup.yml -vvv