anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 10:15:31 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

Suppport for airgapped installation #1471

New Issue
Open
opened 2026-02-16 17:31:08 -05:00 by yindo · 20 comments
yindo commented 2026-02-16 17:31:08 -05:00
Owner
Copy Link
Copy Source

Originally created by @mahabal-org-ind on GitHub (Aug 24, 2025).

Originally assigned to: @thdxr on GitHub.

I want to run opencode in kubernetes in an airgapped environment, which only has access to my model endpoint. I installed opencode in my docker image using

RUN curl -fsSL https://opencode.ai/install | bash

But when I try to run opencode in my pod after deployment, I get the following error:

> OPENCODE_CONFIG=claude.jsonc opencode run "what is 2+2"

INFO  2025-08-24T16:33:14 +0ms service=plugin path=opencode-copilot-auth@0.0.2 loading plugin
INFO  2025-08-24T16:33:14 +1ms service=bun pkg=opencode-copilot-auth version=0.0.2 installing package using Bun's default registry resolution
INFO  2025-08-24T16:33:14 +0ms service=bun cmd=["/root/.opencode/bin/opencode","add","--force","--exact","--cwd","/root/.cache/opencode","opencode-copilot-auth@0.0.2"] cwd=/root/.cache/opencode running
INFO  2025-08-24T16:33:14 +26ms service=bun code=1 stdout=bun add v1.2.19 (aad3abea)
 stderr=Resolving dependencies
Resolved, downloaded and extracted [6]
error: ConnectionRefused downloading package manifest opencode-copilot-auth
 done
ERROR 2025-08-24T16:33:14 +6ms service=default pkg=opencode-copilot-auth version=0.0.2 name=BunInstallFailedError message=BunInstallFailedError cause=Error: Command failed with exit code 1 fatal

I would love it if there was a config or environment variable which would prevent network access of any kind, except the model API call. Thanks.

Originally created by @mahabal-org-ind on GitHub (Aug 24, 2025). Originally assigned to: @thdxr on GitHub. I want to run opencode in kubernetes in an airgapped environment, which only has access to my model endpoint. I installed opencode in my docker image using ``` RUN curl -fsSL https://opencode.ai/install | bash ``` But when I try to run opencode in my pod after deployment, I get the following error: ``` > OPENCODE_CONFIG=claude.jsonc opencode run "what is 2+2" INFO 2025-08-24T16:33:14 +0ms service=plugin path=opencode-copilot-auth@0.0.2 loading plugin INFO 2025-08-24T16:33:14 +1ms service=bun pkg=opencode-copilot-auth version=0.0.2 installing package using Bun's default registry resolution INFO 2025-08-24T16:33:14 +0ms service=bun cmd=["/root/.opencode/bin/opencode","add","--force","--exact","--cwd","/root/.cache/opencode","opencode-copilot-auth@0.0.2"] cwd=/root/.cache/opencode running INFO 2025-08-24T16:33:14 +26ms service=bun code=1 stdout=bun add v1.2.19 (aad3abea) stderr=Resolving dependencies Resolved, downloaded and extracted [6] error: ConnectionRefused downloading package manifest opencode-copilot-auth done ERROR 2025-08-24T16:33:14 +6ms service=default pkg=opencode-copilot-auth version=0.0.2 name=BunInstallFailedError message=BunInstallFailedError cause=Error: Command failed with exit code 1 fatal ``` I would love it if there was a config or environment variable which would prevent network access of any kind, except the model API call. Thanks.
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@github-actions[bot] commented on GitHub (Aug 24, 2025):

This issue might be a duplicate of existing issues. Please check:

  • #1962: Config option for disabling autofetch of lsp servers - addresses similar concerns about preventing network access for downloading remote binaries in environments where network access should be restricted

Feel free to ignore if none of these address your specific case.

@github-actions[bot] commented on GitHub (Aug 24, 2025): This issue might be a duplicate of existing issues. Please check: - #1962: Config option for disabling autofetch of lsp servers - addresses similar concerns about preventing network access for downloading remote binaries in environments where network access should be restricted Feel free to ignore if none of these address your specific case.
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Aug 24, 2025):

yeah we should do some environment var for sure

@rekram1-node commented on GitHub (Aug 24, 2025): yeah we should do some environment var for sure
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@jamestrew commented on GitHub (Aug 25, 2025):

I got a very similar error message and started digging through the code and found these.

OPENCODE_DISABLE_DEFAULT_PLUGINS=true
OPENCODE_DISABLE_LSP_DOWNLOAD=true

But you still get stuck with opencode trying to install provider sdks.
Would love to see a workaround for this.

@jamestrew commented on GitHub (Aug 25, 2025): I got a very similar error message and started digging through the code and found these. ``` OPENCODE_DISABLE_DEFAULT_PLUGINS=true OPENCODE_DISABLE_LSP_DOWNLOAD=true ``` But you still get stuck with opencode trying to install provider sdks. Would love to see a workaround for this.
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Aug 25, 2025):

it is a little more complicated than just a var depending on the models you use since we don't ship all sdks out of the box

@rekram1-node commented on GitHub (Aug 25, 2025): it is a little more complicated than just a var depending on the models you use since we don't ship all sdks out of the box
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@Ninja3047 commented on GitHub (Aug 25, 2025):

I think for offline use, it would make sense to just include the open ai compatible sdk by default.

@Ninja3047 commented on GitHub (Aug 25, 2025): I think for offline use, it would make sense to just include the open ai compatible sdk by default.
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@ad-ops commented on GitHub (Sep 4, 2025):

I managed to get it working by downloading the dependencies during docker build, but I was not able to recreate it in current versions.

Perhaps an interim solution could be having a flag that prevents the download like the LSPs as it would allow us to build the image or otherwise download the packages separately from running.

But I agree it would be nice if you could get a standalone airgapped version with all dependencies included.

@ad-ops commented on GitHub (Sep 4, 2025): I managed to get it working by downloading the dependencies during docker build, but I was not able to recreate it in current versions. Perhaps an interim solution could be having a flag that prevents the download like the LSPs as it would allow us to build the image or otherwise download the packages separately from running. But I agree it would be nice if you could get a standalone airgapped version with all dependencies included.
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@jamestrew commented on GitHub (Sep 4, 2025):

But I agree it would be nice if you could get a standalone airgapped version with all dependencies included.

I can live without having all (LSP, copilot/anthropic auth) dependencies.
But the lack of provider SDKs being included is legitimately a blocker keeping me from using opencode in certain environments. A shame since I do enjoy using it where I can.

@rekram1-node do you know if there's interest in potential baking in SDKs from the maintainer?

@jamestrew commented on GitHub (Sep 4, 2025): > But I agree it would be nice if you could get a standalone airgapped version with all dependencies included. I can live without having all (LSP, copilot/anthropic auth) dependencies. But the lack of provider SDKs being included is legitimately a blocker keeping me from using opencode in certain environments. A shame since I do enjoy using it where I can. @rekram1-node do you know if there's interest in potential baking in SDKs from the maintainer?
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Sep 4, 2025):

I will ask

@rekram1-node commented on GitHub (Sep 4, 2025): I will ask
yindo commented 2026-02-16 17:31:08 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Sep 4, 2025):

@jamestrew which providers do you need? you could install the providers yourself and then install opencode, but perhaps all providers should be bundled out of box

@rekram1-node commented on GitHub (Sep 4, 2025): @jamestrew which providers do you need? you could install the providers yourself and then install opencode, but perhaps all providers should be bundled out of box
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@r4ravi2008 commented on GitHub (Sep 30, 2025):

I managed to get it working by downloading the dependencies during docker build, but I was not able to recreate it in current versions.

Perhaps an interim solution could be having a flag that prevents the download like the LSPs as it would allow us to build the image or otherwise download the packages separately from running.

But I agree it would be nice if you could get a standalone airgapped version with all dependencies included.

Trying to do this as well - any pointers?

@r4ravi2008 commented on GitHub (Sep 30, 2025): > I managed to get it working by downloading the dependencies during docker build, but I was not able to recreate it in current versions. > > Perhaps an interim solution could be having a flag that prevents the download like the LSPs as it would allow us to build the image or otherwise download the packages separately from running. > > But I agree it would be nice if you could get a standalone airgapped version with all dependencies included. Trying to do this as well - any pointers?
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@jpsullivan commented on GitHub (Oct 6, 2025):

@rekram1-node I think bundling "@ai-sdk/openai-compatible" into builds would make a lot of sense for an offline-only kind of mode, mostly since in that kind of capacity you're only going to be hitting models that are being served locally.

@jpsullivan commented on GitHub (Oct 6, 2025): @rekram1-node I think bundling "@ai-sdk/openai-compatible" into builds would make a lot of sense for an offline-only kind of mode, mostly since in that kind of capacity you're only going to be hitting models that are being served locally.
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Oct 6, 2025):

@jpsullivan yeah I mentioned this to dax, we may just bundle all the providers because only a few are really used:

  • google
  • anthropic
  • openai
  • openai compatible (most fall under this category)

that accounts for 99% of usage

@rekram1-node commented on GitHub (Oct 6, 2025): @jpsullivan yeah I mentioned this to dax, we may just bundle all the providers because only a few are really used: - google - anthropic - openai - openai compatible (most fall under this category) that accounts for 99% of usage
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@jpsullivan commented on GitHub (Oct 6, 2025):

That would be perfect!

@jpsullivan commented on GitHub (Oct 6, 2025): That would be perfect!
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@dnollshai commented on GitHub (Oct 23, 2025):

To be clear... other than trying to download these provider models is it possible to run fully locally? I'm trying to make sure no telemetry will not be sent upstream if I'm running a local model.

@dnollshai commented on GitHub (Oct 23, 2025): To be clear... other than trying to download these provider models is it possible to run fully locally? I'm trying to make sure no telemetry will not be sent upstream if I'm running a local model.
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Oct 24, 2025):

@dnollshai there is no telemetry sent upstream

@rekram1-node commented on GitHub (Oct 24, 2025): @dnollshai there is no telemetry sent upstream
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@lucasperin commented on GitHub (Nov 19, 2025):

+1 I am currently stuck in this issue where basically all agents I try lately (CLI or plugins) are trying to connect and fail due to lack of connectivity.

This is indeed the guy I think that needs to be there @ai-sdk/openai-compatible
Then copilot and all the models.dev things need to be disabled somehow.

I did not get there yet, but pretty sure the issue will come back once I start activating MCPs with npm, but I think these are easier to install globally in the image, as suggested above.

@lucasperin commented on GitHub (Nov 19, 2025): +1 I am currently stuck in this issue where basically all agents I try lately (CLI or plugins) are trying to connect and fail due to lack of connectivity. This is indeed the guy I think that needs to be there @ai-sdk/openai-compatible Then copilot and all the models.dev things need to be disabled somehow. I did not get there yet, but pretty sure the issue will come back once I start activating MCPs with npm, but I think these are easier to install globally in the image, as suggested above.
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@rekram1-node commented on GitHub (Nov 20, 2025):

gonna start bundling in the providers by default in next release or two

@rekram1-node commented on GitHub (Nov 20, 2025): gonna start bundling in the providers by default in next release or two
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@lucasperin commented on GitHub (Nov 20, 2025):

Another comment if I may, opencode also gets stuck for quite some time trying to fetch models.dev.
Perhaps also add a way to skip this?

I am trying to set the provider list in the json config to empty for opencode, anthropic and openai. Not sure how to disable the models.dev yet.

@lucasperin commented on GitHub (Nov 20, 2025): Another comment if I may, opencode also gets stuck for quite some time trying to fetch models.dev. Perhaps also add a way to skip this? I am trying to set the provider list in the json config to empty for opencode, anthropic and openai. Not sure how to disable the models.dev yet.
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@taqtiqa-mark commented on GitHub (Nov 20, 2025):

I believe this behavior needs to be removed:

https://github.com/sst/opencode/blob/598d6d00e41d39767d46359b4238286f360ddc6c/packages/opencode/test/bun.test.ts#L42

@taqtiqa-mark commented on GitHub (Nov 20, 2025): I believe this behavior needs to be removed: https://github.com/sst/opencode/blob/598d6d00e41d39767d46359b4238286f360ddc6c/packages/opencode/test/bun.test.ts#L42
yindo commented 2026-02-16 17:31:09 -05:00
Author
Owner
Copy Link
Copy Source

@bbartels commented on GitHub (Jan 9, 2026):

gonna start bundling in the providers by default in next release or two

We'd love to use opencode for our airgapped company setup to have an alternative to claude. Any update on bundling? @thdxr @rekram1-node

@bbartels commented on GitHub (Jan 9, 2026): > gonna start bundling in the providers by default in next release or two We'd love to use opencode for our airgapped company setup to have an alternative to claude. Any update on bundling? @thdxr @rekram1-node
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#1471
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?