Ian
126 lines
2.6 KiB
Markdown
126 lines
2.6 KiB
Markdown
# OpenCode Podman Dev Environment
|
|
|
|
Podman-based Ubuntu 26.04 development container for OpenCode.
|
|
|
|
## Decisions
|
|
|
|
- Ubuntu 26.04, amd64/x86_64
|
|
- OpenCode pinned to 1.18.32
|
|
- Node.js 24.21.0 LTS, official Linux x64 binary
|
|
- OpenJDK 11 + 17, Java 17 default
|
|
- Python 3 from Ubuntu + pip + venv
|
|
- Maven, no Gradle
|
|
- Neovim installed with no custom configuration
|
|
- non-root `dev` user
|
|
- rootless Podman with `--userns=keep-id`
|
|
- no Podman/Docker socket
|
|
- no proxy configuration
|
|
- SSH only for Git; host `.ssh` is read-only and host SSH agent is forwarded when available
|
|
- host timezone and locale
|
|
- custom CA certificates are host-mounted read-only and installed at runtime; invalid certs warn and do not stop startup
|
|
- OpenCode config/data/cache and development caches persist on the host
|
|
- Bash history is ephemeral
|
|
|
|
## Host data
|
|
|
|
The scripts create automatically:
|
|
|
|
```text
|
|
~/dev/opencode-dev/
|
|
├── opencode-config/
|
|
├── opencode-data/
|
|
├── opencode-cache/
|
|
├── m2/
|
|
├── npm-cache/
|
|
├── pip-cache/
|
|
├── certs/
|
|
├── bash/
|
|
└── projects/
|
|
```
|
|
|
|
OpenCode stores provider credentials in `~/.local/share/opencode/auth.json`, which is therefore persisted by the `opencode-data` mount.
|
|
|
|
## Build
|
|
|
|
```bash
|
|
chmod +x build.sh dev.sh opencode.sh
|
|
./build.sh
|
|
```
|
|
|
|
Clean rebuild:
|
|
|
|
```bash
|
|
./build.sh --no-cache
|
|
```
|
|
|
|
Intentional update rebuild:
|
|
|
|
```bash
|
|
./build.sh --update
|
|
```
|
|
|
|
## Shell
|
|
|
|
```bash
|
|
./dev.sh
|
|
```
|
|
|
|
Start in a project:
|
|
|
|
```bash
|
|
./dev.sh ~/dev/opencode-dev/projects/my-project
|
|
```
|
|
|
|
The same `projects` tree is mounted as `/workspace`.
|
|
|
|
Optional additional mount:
|
|
|
|
```bash
|
|
./dev.sh ~/dev/opencode-dev/projects/my-project \
|
|
--mount "$HOME/another-project:/extra"
|
|
```
|
|
|
|
Put custom Bash settings in:
|
|
|
|
```text
|
|
~/dev/opencode-dev/bash/bashrc
|
|
```
|
|
|
|
They are loaded after the image's normal Bash environment. History remains ephemeral.
|
|
|
|
## OpenCode
|
|
|
|
```bash
|
|
./opencode.sh
|
|
```
|
|
|
|
Or start in a project:
|
|
|
|
```bash
|
|
./opencode.sh ~/dev/opencode-dev/projects/my-project
|
|
```
|
|
|
|
Arguments are forwarded to OpenCode:
|
|
|
|
```bash
|
|
./opencode.sh ~/dev/opencode-dev/projects/my-project --help
|
|
```
|
|
|
|
## Persistent mounts
|
|
|
|
| Host | Container | Mode |
|
|
|---|---|---|
|
|
| `opencode-config` | `~/.config/opencode` | RW |
|
|
| `opencode-data` | `~/.local/share/opencode` | RW |
|
|
| `opencode-cache` | `~/.cache/opencode` | RW |
|
|
| `m2` | `~/.m2` | RW |
|
|
| `npm-cache` | `~/.npm` | RW |
|
|
| `pip-cache` | `~/.cache/pip` | RW |
|
|
| `certs` | `/host-certs` | RO |
|
|
| `~/.gitconfig` | `~/.gitconfig` | RO |
|
|
| `~/.ssh` | `~/.ssh` | RO |
|
|
| `bash` | `/host-bash` | RO |
|
|
| `projects` | `/workspace` | RW |
|
|
|
|
No credentials or personal OpenCode state are baked into the image.
|