CLI · Shell

OpenCode Dockerized

In simple terms

Runs OpenCode inside a container that only sees your project folder — a destructive command cannot reach the rest of your system.

Technical details

Shell fork of glennvdv/opencode-dockerized rebuilt around OpenCode V2: permissions travel inline via OPENCODE_CONFIG_CONTENT and config, plugins and rules arrive as a single read-only mount, so no session can relax its own sandbox. Versioned security hooks (plugins/security-guard.js) evaluate the opencode-policy unsafe/injection patterns in strict, balanced or off, with symlink-escape resolution, project confinement and secret backstops (SSH/GPG keys, .env, .npmrc, auth.json). SSH and GPG agent forwarding without copying private keys.

Shell Docker Debian OpenCode Node.js

Highlights

Inline permissions from the environment, never a writable file
Versioned guard with strict/balanced/off modes and secret backstops
SSH and GPG agent forwarding without private keys in the container

Lines of code

9,577

Shell

79%

JavaScript

19%

Dockerfile

Last recorded activity 57 commits · 52 sem

Last recorded activity in the project.