Docker workstation - v1.5.6

HolyClaude

CloudCLI, browser automation, and multiple coding agents in one repeatable workspace. Published for AMD64 and ARM64.

Run HolyClaude Docker Hub GHCR

Release: v1.5.6
CloudCLI: 1.36.3
Platforms: 2
Image variants: 2

Quick start

Local by default

CloudCLI binds to 127.0.0.1:3001. Claude settings and your workspace live in explicit host folders you control.

Compatibility profile: the default Compose file adds SYS_ADMIN and SYS_PTRACE, disables the default seccomp profile, and allocates 2g shared memory. Those settings broaden container privileges and reduce isolation.

For rootless Podman, use keep-id and SELinux :Z mounts from the rootless instructions.

Create data/claude and workspace, then save this file as docker-compose.yaml.
Run docker compose up -d.
Open http://localhost:3001.

docker-compose.yaml

services:
  holyclaude:
    image: coderluii/holyclaude:latest
    container_name: holyclaude
    hostname: holyclaude
    restart: unless-stopped
    shm_size: 2g
    network_mode: bridge
    cap_add:
      - SYS_ADMIN
      - SYS_PTRACE
    security_opt:
      - seccomp=unconfined
    ports:
      - "127.0.0.1:3001:3001"
    volumes:
      - ./data/claude:/home/claude/.claude
      - ./workspace:/workspace
    environment:
      - TZ=UTC

Published images

Choose full or slim

Registry values below are compressed transfer sizes for the immutable 1.5.6 tags. Unpacked NAS disk use is different and can be larger.

Image	Tag	AMD64	ARM64	AI CLIs
Full	`1.5.6`	4.65 GB / 4.33 GiB	4.45 GB / 4.15 GiB	8
Slim	`1.5.6-slim`	2.79 GB / 2.6 GiB	2.72 GB / 2.54 GiB	5

Both images

Claude Codeclaude2.1.220
Gemini CLIgemini0.53.0
OpenAI Codexcodex0.146.0
Cursor Agentcursor2026.07.23-e383d2b
TaskMaster AItask-master0.43.1

Full only

Juniejunie2470.4
OpenCodeopencode1.18.10
Pi Coding Agentpi0.82.1

Need the full package inventory? Read the canonical HolyClaude README.

Current capabilities

Built for a working container, not a demo

Packaged browser

Playwright 1.61.0 uses Debian Chromium 151.0.7922.71 at /usr/bin/chromium. No runtime browser download.

Rootless Podman

Keep-id startup and SELinux :Z mounts are documented for host-owned workspaces.

Remote shell

Optional key-only SSH and Mosh are available. They are not published by the default Compose path.

Reverse-proxy path

HOLYCLAUDE_BASE_PATH supports hosting CloudCLI below a URL prefix.

Account controls

CloudCLI includes logout, password change, and token invalidation. Its account data stays container-local unless you add the optional named volume.

CloudCLI plugins

Project Stats and Web Terminal are included in the patched CloudCLI 1.36.3 runtime.

Notifications

Apprise hooks cover Claude, raw Codex and Gemini, and CloudCLI Codex. Inside the container, enable them with touch ~/.claude/notify-on.

Updates

CloudCLI self-update is patched out. Pull a reviewed image instead: docker compose pull && docker compose up -d.

Trust boundary

One local account, one shared context

CloudCLI is single-user. Remote access shares the same CloudCLI account, mounted workspace, and credential context; it does not create user or tenant isolation.

HolyClaude operates no credential relay. Bundled tools read local credentials and contact the providers you configure directly. Docker limits the environment, but mounted files, credentials, added capabilities, and outbound provider access remain reachable.

Release candidates are scanned with digest-bound SBOM and vulnerability evidence. Publication is blocked by the project policy when findings lack a valid disposition; that is not a claim that an image contains zero vulnerabilities.

Security policy MIT source license Third-party notices Machine-readable product facts

Already running it?

Update the image, not the container

docker compose pull && docker compose up -d