Add OpenCode community-style LXC with web startup

2026-04-12 20:40:34 +02:00 · 2026-04-12 20:40:34 +02:00 · c5aea8a7ad
commit c5aea8a7ad
4 changed files with 599 additions and 0 deletions
--- a/pve_community/install/opencode-install.sh
+++ b/pve_community/install/opencode-install.sh
@ -0,0 +1,123 @@
+#!/usr/bin/env bash
+set -Eeuo pipefail
+
+OPENCODE_USER="${OPENCODE_USER:-opencode}"
+OPENCODE_VERSION="${OPENCODE_VERSION:-}"
+OPENCODE_HOME="/home/${OPENCODE_USER}"
+OPENCODE_BIN="${OPENCODE_HOME}/.opencode/bin/opencode"
+OPENCODE_WEB_HOSTNAME="${OPENCODE_WEB_HOSTNAME:-0.0.0.0}"
+OPENCODE_WEB_PORT="${OPENCODE_WEB_PORT:-4096}"
+OPENCODE_SERVER_USERNAME="${OPENCODE_SERVER_USERNAME:-opencode}"
+OPENCODE_SERVER_PASSWORD="${OPENCODE_SERVER_PASSWORD:-}"
+
+log() {
+  printf '[opencode-install] %s\n' "$*"
+}
+
+fail() {
+  printf '[opencode-install] Error: %s\n' "$*" >&2
+  exit 1
+}
+
+run_as_user() {
+  su - "$OPENCODE_USER" -c "$1"
+}
+
+install_web_service() {
+  local password_line="# OPENCODE_SERVER_PASSWORD="
+  if [[ -n "$OPENCODE_SERVER_PASSWORD" ]]; then
+    password_line="OPENCODE_SERVER_PASSWORD=${OPENCODE_SERVER_PASSWORD}"
+  fi
+
+  cat >/etc/default/opencode-web <<EOF
+OPENCODE_WEB_HOSTNAME=${OPENCODE_WEB_HOSTNAME}
+OPENCODE_WEB_PORT=${OPENCODE_WEB_PORT}
+OPENCODE_SERVER_USERNAME=${OPENCODE_SERVER_USERNAME}
+# Set OPENCODE_SERVER_PASSWORD to require HTTP basic auth for web access.
+${password_line}
+EOF
+
+  cat >/etc/systemd/system/opencode-web.service <<EOF
+[Unit]
+Description=OpenCode Web Interface
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=${OPENCODE_USER}
+Group=${OPENCODE_USER}
+WorkingDirectory=/workspace
+Environment=HOME=${OPENCODE_HOME}
+Environment=BROWSER=/bin/true
+EnvironmentFile=-/etc/default/opencode-web
+ExecStart=/bin/sh -lc 'exec /usr/local/bin/opencode web --hostname "${OPENCODE_WEB_HOSTNAME:-0.0.0.0}" --port "${OPENCODE_WEB_PORT:-4096}"'
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+  systemctl daemon-reload
+  systemctl enable --now opencode-web.service
+}
+
+main() {
+  [[ $EUID -eq 0 ]] || fail "Run as root inside the container"
+
+  export DEBIAN_FRONTEND=noninteractive
+
+  log "Updating apt package index"
+  apt-get update
+
+  log "Installing base packages"
+  apt-get install -y \
+    bash-completion \
+    build-essential \
+    ca-certificates \
+    curl \
+    fd-find \
+    git \
+    jq \
+    less \
+    ripgrep \
+    sudo \
+    tar \
+    unzip
+
+  if ! id -u "$OPENCODE_USER" >/dev/null 2>&1; then
+    log "Creating user ${OPENCODE_USER}"
+    useradd --create-home --shell /bin/bash "$OPENCODE_USER"
+  fi
+
+  usermod -aG sudo "$OPENCODE_USER"
+  install -d -m 0755 -o "$OPENCODE_USER" -g "$OPENCODE_USER" /workspace
+
+  if [[ -x /usr/bin/fdfind && ! -e /usr/local/bin/fd ]]; then
+    ln -s /usr/bin/fdfind /usr/local/bin/fd
+  fi
+
+  log "Installing OpenCode"
+  if [[ -n "$OPENCODE_VERSION" ]]; then
+    run_as_user "curl -fsSL https://opencode.ai/install | bash -s -- --no-modify-path --version ${OPENCODE_VERSION}"
+  else
+    run_as_user "curl -fsSL https://opencode.ai/install | bash -s -- --no-modify-path"
+  fi
+
+  [[ -x "$OPENCODE_BIN" ]] || fail "OpenCode binary was not installed"
+  ln -sf "$OPENCODE_BIN" /usr/local/bin/opencode
+
+  log "Configuring OpenCode web service"
+  install_web_service
+
+  cat >/etc/profile.d/opencode-workspace.sh <<EOF
+export PATH=/usr/local/bin:\$PATH
+cd /workspace 2>/dev/null || true
+EOF
+
+  log "Installed version: $(run_as_user "opencode --version" | tail -n 1)"
+  log "Web interface: http://$(hostname -I | awk '{print $1}'):${OPENCODE_WEB_PORT}"
+}
+
+main "$@"