RStudio Server module

[bpmct]

A discussion dedicated to the RStudio Server module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
5 / 17	10 / 25	16 / 20	2 / 20	3 / 10	39 / 100

Drilldown

Presentation & Onboarding — 5 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	0	README shows only one minimal usage example (agent_id only). No examples demonstrating auth modes, project_path mounting, or renv restoration despite these being major configurable options.
Visual preview	5	5	README embeds ../../.images/rstudio-server.png, verified to exist.

Credential Hygiene — 16 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	rstudio_user and rstudio_password are both marked sensitive = true; README example contains no inline credentials.
Non-hardcoded auth path	4	0	No documented SSO/IAM/OAuth alternative; module relies on hardcoded default user/pass ("rstudio"/"rstudio") with disable_auth toggle, not a credential-less auth path.

Restricted-Environment Readiness — 2 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	5	0	run.sh hardcodes rocker/rstudio:${SERVER_VERSION}; only the version tag is a variable (rstudio_server_version), not the registry/download URL. No variable overrides the Docker Hub source.
Bring-your-own binary	10	0	No documented way to skip the docker pull step or use a pre-baked image; script always pulls on start.
Egress transparency	3	0	No dedicated network/egress section; Docker Hub pull endpoint is only inferable from run.sh.
Runs without sudo	2	2	run.sh never invokes sudo; all commands (docker, docker exec) run as the invoking user assuming Docker access is already configured.

Engineering Quality — 3 / 10

Criterion	Max	Score	Notes
Input quality	6	3	Variables have descriptions and defaults; only share has a validation block. Numeric/path inputs (port, project_path, docker_socket) lack validation.
Test coverage	4	0	No .tftest.hcl or TypeScript test files present in the module.

IDE Integration — 10 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app.rstudio-server resource defined with subdomain, icon, share, order, group — standard dashboard launch support.
Managed configuration	6	0	No documented support for managed RStudio settings, Rprofile injection, or policy config.
Configurable folder or workdir	6	3	project_path variable mounts a project directory into the container, but this is not demonstrated or explained in the README example — only present as a bare variable description.
Pre-installed extensions (web IDEs only)	6	0	No documented mechanism for pre-installing RStudio add-ins/packages beyond optional renv::restore() for project dependencies (not an IDE-extension mechanism).

Overall — 39 / 100

Raw 36 / 92 → round(36 / 92 × 100) = 39

---

Scored against SCORECARD.md on 2026-11-09 with solstice-1.