Hacker News: CoderLuii

Show HN: HolyCode Cloud – persistent Linux workstations for AI

CoderLuii — Sat, 08 Aug 2026 19:29:51 +0000

Article URL: https://holycode.cloud

Comments URL: https://news.ycombinator.com/item?id=49225061

Points: 1

# Comments: 0

Show HN: DubVox – Translate audio to any lang while keeping the speaker's voice

CoderLuii — Wed, 15 Apr 2026 06:39:37 +0000

Article URL: https://dubvox.coderluii.dev/

Comments URL: https://news.ycombinator.com/item?id=47775496

Points: 2

# Comments: 1

Show HN: HolyCode – OpenCode in Docker. Use your Claude subscription. 30 tools

CoderLuii — Tue, 31 Mar 2026 08:29:46 +0000

HolyCode is a Docker image that wraps OpenCode (https://opencode.ai), an AI coding agent with a web UI. It ships with 30+ dev tools pre-installed, a headless Chromium/Xvfb/Playwright stack, s6-overlay for process supervision, and UID/GID remapping for correct file permissions on bind mounts.

The main problem it solves: rebuilding the same environment every time you switch machines or update a container. All OpenCode state (sessions, settings, MCP configs, plugins) lives in a bind mount outside the container. Rebuild or update the image, your state comes back.

*On the API key cost angle:*

If you pay for Claude Max or Pro, you can use those credentials directly instead of a separate Anthropic API key. One env var enables it. The plugin reads from the credentials file OpenCode stores on your host. This removes a layer of cost if you're already paying for a subscription.

Note: this may be outside what Anthropic's ToS covers. The README is explicit about that.

It supports 10+ AI providers (Anthropic, OpenAI, Gemini, Groq, Bedrock, Azure, Ollama, and more). The Claude subscription feature is optional. Set any provider key and it works.

oh-my-openagent is also included as an optional plugin (`ENABLE_OH_MY_OPENAGENT=true`). It turns OpenCode into a coordinated multi-agent system with parallel execution and specialized agents.

GitHub: https://github.com/coderluii/holycode Docker Hub: https://hub.docker.com/r/coderluii/holycode

Comments URL: https://news.ycombinator.com/item?id=47584308

Points: 2

# Comments: 1

New comment by CoderLuii in "Trivy ecosystem supply chain temporarily compromised"

CoderLuii — Sun, 22 Mar 2026 05:09:17 +0000

this is painfully accurate. ive worked in security for years and the tools we trust the most get the least scrutiny because everyone assumes "well its a security tool, it must be secure." the irony is these tools usually run with the highest privileges in the pipeline. trivy sits in CI with access to every secret in your environment and nobody questions it because its supposed to be the thing protecting you.

New comment by CoderLuii in "The three pillars of JavaScript bloat"

CoderLuii — Sun, 22 Mar 2026 05:06:53 +0000

the docker side of this is painful too. every extra dependency in any language means a bigger image, more layers to cache, more things that can break during a multi-arch build. ive been building images that are 4GB because of all the node and python tooling bundled in. micro packages make it worse because each one adds metadata overhead on top of the actual code.

New comment by CoderLuii in "The three pillars of JavaScript bloat"

CoderLuii — Sun, 22 Mar 2026 05:06:37 +0000

160K total is impressive. most landing pages i see are shipping 2-3MB of js before the first paint. the "write your own code" approach gets laughed at but when you actually do it the result is faster, easier to debug, and you dont wake up one morning to find out one of your 200 dependencies got compromised.

New comment by CoderLuii in "The three pillars of JavaScript bloat"

CoderLuii — Sun, 22 Mar 2026 05:06:26 +0000

been doing something similar. the projects ive been building recently use as few dependencies as possible and honestly the maintenance burden dropped significantly. when something breaks you actually know where to look instead of digging through 15 layers of node_modules. people said the same thing to me about it not scaling but the opposite turned out to be true.

New comment by CoderLuii in "The three pillars of JavaScript bloat"

CoderLuii — Sun, 22 Mar 2026 05:06:14 +0000

from a security perspective this is even worse than it looks. every one of those micro packages is an attack surface. we just saw the trivy supply chain get compromised today and thats a security tool. now imagine how easy it is to slip something into a 7 line package that nobody audits because "its just a utility." the download count incentive makes it actively dangerous because it encourages more packages not fewer.

New comment by CoderLuii in "The three pillars of JavaScript bloat"

CoderLuii — Sun, 22 Mar 2026 05:05:55 +0000

this is exactly where i landed too. i build docker images that bundle node tooling and every time i think i understand the build system something changes. require vs import, cjs vs esm, babel vs swc vs esbuild, then half your dependencies use one format and half use the other. the worst part is when you containerize it because now you need it all to work in a clean linux environment with no cached state and suddenly half the assumptions break.