sprisa/opencode

A general-purpose Ubuntu Docker image for running opencode. Published to Docker Hub as sprisa/opencode:<version> where <version> matches the release pinned in version.txt.

What's inside

Layer	Details
Base OS	ubuntu:26.04
User	opencode (uid/gid 1000), passwordless sudo
opencode	Pinned in version.txt as OPENCODE_VERSION build arg
Node.js	Current LTS via n, installed to /opt/n (outside home)
Python 3	pip, venv
Build tools	build-essential, pkg-config (for native npm addons, pip source builds)
CLI utilities	git, curl, wget, jq, ripgrep, fd-find, vim, nano, less, unzip, ssh client
Init	tini as PID 1 (zombie reaping, clean shutdown)

Usage

Quick start

docker run -it -p 4096:4096 -v $(pwd):/home/opencode sprisa/opencode:latest

The server starts on port 4096. Mount your project at /home/opencode to persist the entire home directory (dotfiles, config, and ~/workspace).

Environment variables

Variable	Default	Description
OPENCODE_PORT	4096	Port the server listens on
OPENCODE_SERVER_PASSWORD	(none)	Optional auth password for the server
OPENCODE_CORS_ORIGIN	(none)	Optional CORS origin; omit to disable CORS

Examples

With authentication:

docker run -it -p 4096:4096 \
  -e OPENCODE_SERVER_PASSWORD=secret \
  -v myproject:/home/opencode \
  sprisa/opencode:latest

With CORS enabled for a specific origin:

docker run -it -p 4096:4096 \
  -e OPENCODE_CORS_ORIGIN=https://myapp.example.com \
  sprisa/opencode:latest

Custom port:

docker run -it -p 8080:8080 \
  -e OPENCODE_PORT=8080 \
  sprisa/opencode:latest

Building & pushing

All docker commands go through task which reads the pinned version from version.txt:

task docker:build                          # Build locally as sprisa/opencode:<version>
task docker:login                          # Docker Hub login (needs $DOCKER_USER / $DOCKER_PASS)
task docker:push                           # Push +latest and +<version> for amd64/arm64
task publish                               # Push, create GitHub Release with auto-generated notes

Updating the opencode version

task update

Fetches the latest release from anomalyco/opencode on GitHub and writes it to version.txt.

Runtime notes

• The opencode user has passwordless sudo, so you can su - opencode -c 'apt install <pkg>' inside the container.
• The root filesystem is ephemeral; mount /home/opencode as the persistent volume for all user data (dotfiles, config, projects). The ~/workspace subdirectory is the default workdir.
• ~/.local/bin is on PATH and user-writable, useful for dropping custom tools at runtime.
• Node version can be switched at runtime with n <version> (e.g. n lts).