Your AI workspace. Packed and ready.

Name: HolyClaude
Author: CoderLuii

Run CloudCLI, coding tools and Chromium in a Docker workspace you host.

Install HolyClaude See the workspace

Pick your toolkit.

Choose Full or Slim to update your setup file.

Choose FullFull selectedChoose SlimSlim selected

Full

8 AI coding CLIs

Extra agents and specialist tools.

Compressed download

Linux AMD64: 5.58 GB5.2 GiB
Linux ARM64: 5.34 GB4.97 GiB

Slim

5 AI coding CLIs

Core tools in a smaller image.

Compressed download

Linux AMD64: 3.52 GB3.28 GiB
Linux ARM64: 3.45 GB3.21 GiB

Set up Fullcoderluii/holyclaude:latest

The Full setup is shown below. For Slim, follow the released setup guide.

What Full adds

Junie, OpenCode, Pi Coding Agent. Deployment CLIs, broader PDF, presentation and chart libraries, Pandoc and FFmpeg.

Both images include

CloudCLI, Node.js, Python & Git

Chromium & Node/Python Playwright

Basic Word & spreadsheet libraries

Image tags & registries

Docker image tags for Full and Slim
Image	Follow releases	Pinned release
Full	`latest`	`1.6.9`
Slim	`slim`	`1.6.9-slim`

Use the same tags in either registry.

Docker Hub: coderluii/holyclaude
GHCR: ghcr.io/coderluii/holyclaude

Complete AI CLI inventory

Both images
Tool	Version	Command
Claude Code	2.1.318	`claude`
Gemini CLI	0.67.0	`gemini`
OpenAI Codex	0.166.0	`codex`
Cursor Agent	2026.09.15-d2fe57e	`cursor`
TaskMaster AI	0.43.1	`task-master`

Full only
Tool	Version	Command
Junie	4011.1	`junie`
OpenCode	1.19.5	`opencode`
Pi Coding Agent	0.85.1	`pi`

Your project.
In the browser.

Local example workspace. Captures open in a new tab.

CloudCLI Files view showing the README and source folders of the release-board example project. — Example project in HolyClaude 1.6.8 / CloudCLI 1.37.3.View full-size capture (new tab) ↗

Project files: ./workspace mounts at /workspace.
Tool configuration: ./data/claude mounts at /home/claude/.claude.
Account storage: Container-local by default. Review account storage.

CloudCLI Web Terminal running the release-board example's real Node test suite, with three tests passing and zero failures. — Local test run.View full-size capture (new tab) ↗

In both images

Claude Codeclaude2.1.318
Gemini CLIgemini0.67.0
OpenAI Codexcodex0.166.0
Cursor Agentcursor2026.09.15-d2fe57e
TaskMaster AItask-master0.43.1

Added in Full

Juniejunie4011.1
OpenCodeopencode1.19.5
Pi Coding Agentpi0.85.1

Provider accounts, credentials and usage remain your responsibility.

A browser.
Already in the box.

Both images include Debian Chromium and Node/Python Playwright. There is no runtime browser download.

Browser: Debian Chromium 156.0.8078
Automation: Node Playwright 1.64.1
Python Playwright 1.64.1
Executable: /usr/bin/chromium
Runtime: Node.js, Python and Git are included in both images.
CloudCLI: Patched CloudCLI 1.37.3 includes Project Stats and Web Terminal. Update the image to upgrade CloudCLI.

Set up this workspace

HolyClaude: v1.6.9
CloudCLI: 1.37.3
Platforms: Linux AMD64 & ARM64

Start with
Docker Compose.

Save
Create ./data/claude and ./workspace. Save the complete file as docker-compose.yaml.
Start
In the folder containing docker-compose.yaml, run docker compose up -d.
Open
After startup, open http://localhost:3001 on the computer running Docker. Set up your local CloudCLI account and provider credentials.

Read the released setup guide ↗

Image for this configurationFullSlim

docker-compose.yaml

Selected imagecoderluii/holyclaude:latest

services:
  holyclaude:
    image: coderluii/holyclaude:latest
    container_name: holyclaude
    hostname: holyclaude
    restart: unless-stopped
    shm_size: 2g
    network_mode: bridge
    cap_add:
      - SYS_ADMIN
      - SYS_PTRACE
    security_opt:
      - seccomp=unconfined
    ports:
      - "127.0.0.1:3001:3001"
    volumes:
      - ./data/claude:/home/claude/.claude
      - ./workspace:/workspace
    environment:
      - TZ=UTC

The Full configuration is shown. Save it or copy the text manually. The released setup guide includes Slim instructions.

Before you run.

Files and account storage

Your two mounted host folders survive container recreation. Back them up before updating. Do not mount all of /home or /home/claude; that can hide bundled files.

./data/claude also holds managed Codex and Gemini configuration and authentication.

The CloudCLI account database is container-local by default and resets when you recreate the default container. To keep the account, configure the documented optional local-disk-backed named volume. A named volume is not automatically local storage. Keep its SQLite database off SMB, NFS and NAS network shares.

Configure local account storage ↗

Network and provider access

The default Compose file publishes only 127.0.0.1:3001:3001. Remote access shares one account, workspace and credential context. HolyClaude does not provide tenant isolation.

Bundled tools read configured credentials and contact providers directly. HolyClaude operates no credential relay. Provider accounts and usage remain your responsibility.

Tools can access mounted files, credentials and providers.

CloudCLI web UI: 3001/TCPPublished on loopback by default
Codex authentication callback: 1455/TCPNot published by default
Optional SSH: 22/TCPNot published by default
Optional Mosh UDP range: 60000-60010/UDPNot published by default

Read the access configuration ↗

Updates and notifications

CloudCLI self-update is disabled. Pull the reviewed image and recreate the container:

docker compose pull && docker compose up -d

Pinned tags stay on the chosen release until you change the Compose image tag.

Apprise hooks cover Claude Code, raw Codex and Gemini, and CloudCLI Codex. Configure NOTIFY_* destinations and recreate the container. Then enable the hooks inside the container:

touch ~/.claude/notify-on

Configure notification hooks ↗

Podman and remote access

Rootless Podman uses the released keep-id and SELinux :Z profile. Do not substitute the ownership-changing :U shortcut.

Optional SSH and Mosh require key-only configuration. Their ports are not published by the default Compose file. Reverse-proxy paths use HOLYCLAUDE_BASE_PATH; a base path does not isolate users.

Read the rootless Podman configuration ↗

Licenses and security

HolyClaude source is MIT. Bundled components retain their own licenses.

Accepted upstream vulnerabilities remain unresolved.

Bring your next project.

Install HolyClaude Read the setup guide