RStudio Server module

[bpmct]

A discussion dedicated to the RStudio Server module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 17	19 / 25	10 / 20	0 / 20	8 / 10	59 / 100

Drilldown

Presentation & Onboarding — 17 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides a clear example with sensible defaults for the web IDE deployment mode.
Visual preview	5	5	README includes an embedded image at ../../.images/rstudio-server.png showing RStudio Server in action.

IDE Integration — 19 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resource is present with proper configuration (subdomain, icon, URL).
Managed configuration	6	0	No documented support for managed IDE settings or RStudio Server configuration. The module only passes environment variables for auth and user setup, not IDE preferences or settings.
Configurable folder or workdir	6	6	project_path variable is documented and mounts the specified path into the container at /home/${RSTUDIO_USER}/project.
Pre-installed extensions	6	6	Documented support for renv environment restoration via enable_renv variable, which pre-installs R package dependencies when renv.lock exists.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	rstudio_user and rstudio_password variables are marked sensitive = true, but README example does not show usage, leaving it unclear whether inline secrets are avoided in practice. Half credit for marking but no example guidance.
Non-hardcoded auth path	4	2	disable_auth variable allows bypassing authentication entirely, which is a partial workaround but not a proper external auth mechanism. No OAuth, SSO, or service account integration documented.

Restricted-Environment Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	5	0	No variable to override the Docker image source. The image rocker/rstudio:${SERVER_VERSION} is hardcoded in run.sh with only version parameterization.
Bring-your-own binary	10	0	No documented way to skip the docker pull or use a pre-existing container/image. The script always pulls the image.
Egress transparency	3	0	No dedicated README section enumerating external endpoints (Docker Hub for image pull, potential R package repos). Endpoints are only inferable from code.
Runs without sudo	2	0	The script invokes docker commands which typically require either sudo or Docker socket permissions. No documentation of a no-sudo path, and the script does not check for or handle permission failures gracefully.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Variables have clear descriptions, sensible defaults, and validation on the share variable.
Test coverage	4	2	No .tftest.hcl or test files visible in the module. No documented testing story.

Overall — 59 / 100

Raw 54 / 92 → round(54 / 92 × 100) = 59

Note: Calculation correction: 17 + 19 + 10 + 0 + 8 = 54 raw points out of 92 possible = 59/100 (Adequate)

---

Scored against SCORECARD.md on 2026-09-14 with claude-sonnet-4-5.