diff --git a/.devcontainer/ci/features/install.sh b/.devcontainer/ci/features/install.sh
index 2f5d9c2f..91740293 100644
--- a/.devcontainer/ci/features/install.sh
+++ b/.devcontainer/ci/features/install.sh
@@ -35,11 +35,8 @@ for installer_path in \
     "go-task/task!" \
     "k0sproject/k0sctl!" \
     "stern/stern!" \
+    "siderolabs/talos!!?as=talosctl" \
     "yannh/kubeconform!"
 do
     curl -fsSL "https://i.jpillora.com/${installer_path}" | bash
 done
-
-curl -fsSL -o /usr/local/bin/talosctl \
-    "https://github.com/siderolabs/talos/releases/latest/download/talosctl-linux-${ARCH}"
-chmod +x /usr/local/bin/talosctl
diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index d73602a2..37fb0239 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -3,6 +3,6 @@
   "name": "Flux Cluster Template",
   "image": "ghcr.io/onedr0p/flux-cluster-template/devcontainer:base",
   "postCreateCommand": {
-    "deps": "${containerWorkspaceFolder}/.devcontainer/postCreateCommand.sh"
+    "deps": "bash ${containerWorkspaceFolder}/.devcontainer/postCreateCommand.sh"
   }
 }
diff --git a/.devcontainer/postCreateCommand.sh b/.devcontainer/postCreateCommand.sh
index 642213a5..62b819a6 100755
--- a/.devcontainer/postCreateCommand.sh
+++ b/.devcontainer/postCreateCommand.sh
@@ -1,12 +1,17 @@
 #!/usr/bin/env bash
+set -e
+set -o noglob
+
+# Create the fish configuration directory
+mkdir -p ~/.config/fish/conf.d
 
 # Hook direnv into fish
-cat << EOF > ~/.config/fish/conf.d/direnv.fish
+tee ~/.config/fish/conf.d/direnv.fish > /dev/null <<EOF
 direnv hook fish | source
 EOF
 
 # Hook starship into fish
-cat << EOF > ~/.config/fish/conf.d/starship.fish
+tee ~/.config/fish/conf.d/starship.fish > /dev/null <<EOF
 starship init fish | source
 EOF
 
diff --git a/bootstrap/templates/kubernetes/k0s/resources/apply-kube-vip.sh.j2 b/bootstrap/templates/kubernetes/k0s/resources/apply-kube-vip.sh.j2
index 9addd1b1..1d0ac7ab 100755
--- a/bootstrap/templates/kubernetes/k0s/resources/apply-kube-vip.sh.j2
+++ b/bootstrap/templates/kubernetes/k0s/resources/apply-kube-vip.sh.j2
@@ -9,12 +9,12 @@ set -o noglob
 mkdir -p /var/lib/k0s/manifests/kube-vip
 
 # Create kube-vip rbac
-cat <<EOF > /var/lib/k0s/manifests/kube-vip/kube-vip-rbac.yaml
+tee /var/lib/k0s/manifests/kube-vip/kube-vip-rbac.yaml > /dev/null <<EOF
 #% include 'partials/kube-vip-rbac.partial.yaml.j2' %#
 EOF
 
 # Create kube-vip daemonset
-cat <<EOF > /var/lib/k0s/manifests/kube-vip/kube-vip-ds.yaml
+tee /var/lib/k0s/manifests/kube-vip/kube-vip-ds.yaml > /dev/null <<EOF
 #% include 'partials/kube-vip-ds.partial.yaml.j2' %#
 EOF
 #% endif %#
diff --git a/bootstrap/templates/kubernetes/k0s/resources/apply-system.sh.j2 b/bootstrap/templates/kubernetes/k0s/resources/apply-system.sh.j2
index 3faec6b9..a95faf14 100755
--- a/bootstrap/templates/kubernetes/k0s/resources/apply-system.sh.j2
+++ b/bootstrap/templates/kubernetes/k0s/resources/apply-system.sh.j2
@@ -34,7 +34,7 @@ apt-get install -y --no-install-recommends \
 # Update DNS
 chattr -i /etc/resolv.conf
 rm -f /etc/resolv.conf
-cat <<EOF > /etc/resolv.conf
+tee /etc/resolv.conf > /dev/null <<EOF
 search .
 nameserver #{ bootstrap_dns_server }#
 EOF
@@ -50,7 +50,7 @@ done
 systemctl restart systemd-modules-load.service
 
 # Sysctls
-cat <<EOF > /etc/sysctl.d/99-kubernetes.conf
+tee /etc/sysctl.d/99-kubernetes.conf > /dev/null <<EOF
 fs.inotify.max_queued_events = 65536
 fs.inotify.max_user_watches = 524288
 fs.inotify.max_user_instances = 8192
@@ -66,14 +66,14 @@ if systemctl is-enabled apparmor.service; then
 fi
 
 # Neofetch
-cat <<EOF > /etc/profile.d/neofetch.sh
+tee /etc/profile.d/neofetch.sh > /dev/null <<EOF
 neofetch --config none
 EOF
 chmod 755 /etc/profile.d/neofetch.sh
 
 # Create containerd config
 mkdir -p /etc/k0s/containerd.d
-cat <<EOF > /etc/k0s/containerd.d/default.toml
+tee /etc/k0s/containerd.d/default.toml > /dev/null <<EOF
 [plugins."io.containerd.grpc.v1.cri"]
   enable_unprivileged_ports = true
   enable_unprivileged_icmp = true