From 07c183e384ed70be4dcbc17b43cf523d40e2b760 Mon Sep 17 00:00:00 2001 From: okxlin <61420215+okxlin@users.noreply.github.com> Date: Mon, 15 Jun 2026 09:34:22 +0800 Subject: [PATCH] add: codex-claude-workstation 1Panel app Browser-accessible AI workstation with Codex CLI, Claude Code, and code-server (VS Code) in a single container. Features: - code-server (VS Code) via - Codex CLI + Claude Code preinstalled - Docker CLI + Go 1.25 + Rust + Bun + 25+ dev tools - mihomo/sing-box/Xray proxy cores (supervisord-managed) - Optional docker socket mount for DinD - Non-root dev user with sudo NOPASSWD Image: ghcr.io/okxlin/codex-claude-workstation:latest --- apps/codex-claude-workstation/README.md | 113 ++++++++++++++++++ apps/codex-claude-workstation/data.yml | 29 +++++ .../latest/.env.sample | 8 ++ apps/codex-claude-workstation/latest/data.yml | 101 ++++++++++++++++ .../latest/docker-compose.yml | 34 ++++++ .../latest/scripts/init.sh | 22 ++++ .../latest/scripts/uninstall.sh | 3 + .../latest/scripts/upgrade.sh | 4 + apps/codex-claude-workstation/logo.png | Bin 0 -> 4768 bytes 9 files changed, 314 insertions(+) create mode 100644 apps/codex-claude-workstation/README.md create mode 100644 apps/codex-claude-workstation/data.yml create mode 100644 apps/codex-claude-workstation/latest/.env.sample create mode 100644 apps/codex-claude-workstation/latest/data.yml create mode 100644 apps/codex-claude-workstation/latest/docker-compose.yml create mode 100755 apps/codex-claude-workstation/latest/scripts/init.sh create mode 100755 apps/codex-claude-workstation/latest/scripts/uninstall.sh create mode 100755 apps/codex-claude-workstation/latest/scripts/upgrade.sh create mode 100644 apps/codex-claude-workstation/logo.png diff --git a/apps/codex-claude-workstation/README.md b/apps/codex-claude-workstation/README.md new file mode 100644 index 000000000..9bb1ddeab --- /dev/null +++ b/apps/codex-claude-workstation/README.md @@ -0,0 +1,113 @@ +# Codex Claude Workstation + +## 产品介绍 + +浏览器可访问的 Codex AI 编程工作站，集成 code-server (VS Code) 和丰富的开发工具链。 + +## 主要功能 + +- **code-server (VS Code)** — 浏览器内完整 VS Code 体验 +- **Codex CLI** — OpenAI Codex AI 编程助手 +- **Claude Code** — Anthropic Claude Code CLI +- **开发工具链** — Go, Rust, Bun, Docker CLI, yq, gh, shellcheck 等 30+ 工具 +- **代理支持** — 通过 supervisord 按需启用 Clash.Meta/sing-box/Xray + +## Introduction + +Browser-accessible Codex AI development workstation with code-server (VS Code) and rich dev toolchain. + +## Features + +- **code-server (VS Code)** — Full VS Code experience in browser +- **Codex CLI** — OpenAI Codex AI coding assistant +- **Claude Code** — Anthropic Claude Code CLI +- **Dev Toolchain** — Go, Rust, Bun, Docker CLI, yq, gh, shellcheck, 30+ tools +- **Proxy Support** — On-demand Clash.Meta/sing-box/Xray via supervisord + +## 安装说明 + +镜像由 `codex-claude-workstation-builder` 预先编译，发布在： + +``` +ghcr.io/okxlin/codex-claude-workstation:latest +``` + +1Panel 安装时自动拉取，无需手动构建。 + +## 参数填写指南 + +### 必填参数 + +**`PANEL_APP_PORT_HTTP`** — Web 访问端口 +- code-server 对外暴露的访问端口 +- 默认 `8080`，可改为任意未占用端口 +- 安装后通过 `http://你的IP:此端口` 访问 + +**`CODE_SERVER_PASSWORD`** — code-server 密码 +- 登录 code-server 时使用的密码 +- 默认 `change-me`，请务必修改 + +**`ROOT_PASSWORD`** — Root 用户密码 +- 容器 root 用户的密码（可通过 `su - root` 切换登录） +- 默认 `codex2024`，建议修改为更强的密码 + +**`APP_DATA_DIR`** — 数据目录 +- 工作区文件存放的宿主机目录 +- 默认 `./data`，建议填写绝对路径如 `/data/codex-workstation + +### 可选参数 + +**`DOCKER_SOCK_SRC`** — Docker 套接字路径 +- 挂载宿主机 Docker Socket 到容器内 `/var/run/docker.sock` +- 默认 `/var/run/docker.sock`，留空则禁用 Docker CLI +- 必须先通过 ROOT_PASSWORD 切换至 root 才可使用 Docker CLI + +**`TZ`** — 时区 +- 默认 `Asia/Shanghai` +- 可选，留空使用系统默认 + +### 不在安装表单中的参数 + +**`PROXY_ENABLED`** — 代理 (手动启用) +- 默认不启动；内置 clash-meta / sing-box / xray 二进制 +- 通过 `supervisorctl start clash-meta|sing-box|xray` 按需启用 +- 代理配置文件放入 `/home/dev/proxy/`（持久化），如 `clash-meta.yaml` / `sing-box.json` / `xray.json` + +## 访问说明 + +安装完成后通过分配的端口访问： + +- `http://IP:端口` — code-server (VS Code)，集成终端在 VS Code 内使用 + +## 首次登录 + +安装完成后进入容器执行 Codex 登录： + +```bash +docker exec -it ${CONTAINER_NAME} bash +codex login --device-auth +``` + +## 认证说明 + +code-server 密码认证（单层）： + +1. **code-server 密码** — VS Code 登录时使用的密码 + +## 数据持久化 + +| 数据 | 路径 | 持久化方式 | +|------|------|-----------| +| 工作区 | `/workspace` | 绑定挂载到数据目录 | +| Codex 配置 | `/home/dev/.codex` | Named volume `codex-home` | +| 代理配置 | `/home/dev/proxy/` | Named volume `codex-home` | +| code-server 配置 | `/home/dev/.config/code-server/` | Named volume `codex-home` | +| 本地二进制 | `/home/dev/.local/bin/` | Named volume `codex-home` | + +## 注意事项 + +- 不支持 Chat Completions-only API（必须支持 OpenAI Responses API） +- 首次安装后需在 code-server 终端执行 `codex login` 认证 +- 不默认启动 Codex App Server +- 容器以 `dev` 用户运行（非 root），可通过 ROOT_PASSWORD 切换至 root +- 代理默认不启动，按需通过 `supervisorctl start clash-meta|sing-box|xray` 启用 diff --git a/apps/codex-claude-workstation/data.yml b/apps/codex-claude-workstation/data.yml new file mode 100644 index 000000000..cca94eaff --- /dev/null +++ b/apps/codex-claude-workstation/data.yml @@ -0,0 +1,29 @@ +name: Codex Claude Workstation +tags: + - Tool +title: Codex Claude Workstation +description: 浏览器可访问的 Codex + Claude AI 编程工作站 +additionalProperties: + key: codex-claude-workstation + name: Codex Claude Workstation + tags: + - Tool + type: tool + website: https://github.com/openai/codex + document: https://github.com/openai/codex + architectures: + - amd64 + github: https://github.com/okxlin/release-factory + shortDescZh: 浏览器可访问的 Codex + Claude AI 编程工作站 + shortDescEn: Browser-accessible Codex + Claude AI workstation + description: + en: Browser-accessible Codex + Claude AI workstation with code-server (VS Code) + zh: 浏览器可访问的 Codex + Claude AI 编程工作站，集成 code-server (VS Code) + zh-Hant: 瀏覽器可訪問的 Codex + Claude AI 編程工作站，集成 code-server (VS Code) + ja: ブラウザからアクセス可能な Codex + Claude AI 開発ワークステーション + ko: 브라우저에서 접근 가능한 Codex + Claude AI 개발 워크스테이션 + ru: Доступная через браузер рабочая станция Codex + Claude AI + ms: Stesen kerja pembangunan Codex + Claude AI yang boleh diakses melalui pelayar + pt-br: Estação de trabalho Codex + Claude AI acessível pelo navegador + crossVersionUpdate: false + limit: 1 \ No newline at end of file diff --git a/apps/codex-claude-workstation/latest/.env.sample b/apps/codex-claude-workstation/latest/.env.sample new file mode 100644 index 000000000..6510325e1 --- /dev/null +++ b/apps/codex-claude-workstation/latest/.env.sample @@ -0,0 +1,8 @@ +# codex-claude-workstation 1Panel environment variables +PANEL_APP_PORT_HTTP=8080 +CODE_SERVER_PASSWORD=change-me +ROOT_PASSWORD=codex2024 +DOCKER_SOCK_SRC=/var/run/docker.sock +APP_DATA_DIR=./data +CONTAINER_NAME=codex-claude-workstation +TZ=Asia/Shanghai diff --git a/apps/codex-claude-workstation/latest/data.yml b/apps/codex-claude-workstation/latest/data.yml new file mode 100644 index 000000000..a0dc1f482 --- /dev/null +++ b/apps/codex-claude-workstation/latest/data.yml @@ -0,0 +1,101 @@ +additionalProperties: + formFields: + - envKey: PANEL_APP_PORT_HTTP + type: number + required: true + default: 8080 + rule: paramPort + labelZh: Web 访问端口 + labelEn: Web Port + label: + en: Web Port + zh: Web 访问端口 + zh-Hant: Web 訪問端口 + ja: Web ポート + ko: 웹 포트 + ru: Веб-порт + ms: Port Web + pt-br: Porta Web + edit: true + - envKey: CODE_SERVER_PASSWORD + type: password + required: true + random: true + default: change-me + labelZh: code-server 密码 + labelEn: Code-server Password + label: + en: Code-server Password + zh: code-server 密码 + zh-Hant: code-server 密碼 + ja: code-server パスワード + ko: code-server 비밀번호 + ru: Пароль code-server + ms: Kata Laluan code-server + pt-br: Senha do code-server + edit: true + - envKey: ROOT_PASSWORD + type: password + required: false + random: true + default: codex2024 + labelZh: Root 密码 + labelEn: Root Password + label: + en: Root Password + zh: Root 密码 + zh-Hant: Root 密碼 + ja: Root パスワード + ko: Root 비밀번호 + ru: Пароль Root + ms: Kata Laluan Root + pt-br: Senha do Root + edit: true + - default: /var/run/docker.sock + edit: true + envKey: DOCKER_SOCK_SRC + type: text + required: false + labelEn: Docker Socket Path (leave empty to disable) + labelZh: Docker 套接字路径（留空禁用） + label: + en: Docker Socket Path (leave empty to disable) + zh: Docker 套接字路径（留空禁用） + zh-Hant: Docker 套接字路徑（留空禁用） + ja: Docker ソケットパス（空欄で無効） + ko: Docker 소켓 경로 (비우면 비활성화) + ru: Путь к Docker-сокету (оставьте пустым для отключения) + ms: Laluan soket Docker (kosongkan untuk lumpuhkan) + pt-br: Caminho do socket Docker (deixe em branco para desabilitar) + - envKey: APP_DATA_DIR + type: text + required: true + default: ./data + labelZh: 数据目录 + labelEn: Data Directory + label: + en: Data Directory + zh: 数据目录 + zh-Hant: 數據目錄 + ja: データディレクトリ + ko: 데이터 디렉토리 + ru: Каталог данных + ms: Direktori Data + pt-br: Diretório de Dados + edit: true + - envKey: TZ + type: text + required: false + default: Asia/Shanghai + labelZh: 时区 + labelEn: Timezone + label: + en: Timezone + zh: 时区 + zh-Hant: 時區 + ja: タイムゾーン + ko: 시간대 + ru: Часовой пояс + ms: Zon Waktu + pt-br: Fuso Horário + edit: true \ No newline at end of file diff --git a/apps/codex-claude-workstation/latest/docker-compose.yml b/apps/codex-claude-workstation/latest/docker-compose.yml new file mode 100644 index 000000000..3115efa39 --- /dev/null +++ b/apps/codex-claude-workstation/latest/docker-compose.yml @@ -0,0 +1,34 @@ +services: + workstation: + image: "ghcr.io/okxlin/codex-claude-workstation:latest" + container_name: ${CONTAINER_NAME} + hostname: workstation + restart: always + labels: + createdBy: "Apps" + environment: + - TZ=${TZ:-Asia/Shanghai} + - PASSWORD=${CODE_SERVER_PASSWORD:-change-me} + - ROOT_PASSWORD=${ROOT_PASSWORD:-codex2024} + volumes: + - ${APP_DATA_DIR:-./data}/workspace:/workspace + - codex-home:/home/dev + - ${DOCKER_SOCK_SRC:-/var/run/docker.sock}:/var/run/docker.sock + ports: + - ${PANEL_APP_PORT_HTTP}:8080 + healthcheck: + test: ["CMD", "/usr/local/bin/healthcheck.sh"] + interval: 30s + timeout: 5s + retries: 3 + start_period: 15s + networks: + - 1panel-network + +volumes: + codex-home: + name: codex-home + +networks: + 1panel-network: + external: true diff --git a/apps/codex-claude-workstation/latest/scripts/init.sh b/apps/codex-claude-workstation/latest/scripts/init.sh new file mode 100755 index 000000000..aa05ecff9 --- /dev/null +++ b/apps/codex-claude-workstation/latest/scripts/init.sh @@ -0,0 +1,22 @@ +#!/bin/bash +# init.sh — codex-claude-workstation 1Panel 初始化脚本 +set -eo pipefail + +echo "Codex Claude Workstation installed successfully." +echo "" +echo "Access:" +echo " http://:${PANEL_APP_PORT_HTTP}" +echo " Login: code-server password" +echo " Switch to root: su - root (password: ${ROOT_PASSWORD:-codex2024})" +echo "" +echo "AI Tools (run in code-server terminal):" +echo " codex --help OpenAI Codex CLI" +echo " claude --help Anthropic Claude Code" +echo "" +echo "Docker CLI (if DOCKER_SOCK_SRC set):" +echo " su - root" +echo " docker ps" +echo "" +echo "Proxy (manual enable):" +echo " supervisorctl start clash-meta # or sing-box, xray" +echo " Configs: ~/proxy/" diff --git a/apps/codex-claude-workstation/latest/scripts/uninstall.sh b/apps/codex-claude-workstation/latest/scripts/uninstall.sh new file mode 100755 index 000000000..72bbb17be --- /dev/null +++ b/apps/codex-claude-workstation/latest/scripts/uninstall.sh @@ -0,0 +1,3 @@ +#!/bin/bash +# uninstall.sh — codex-claude-workstation cleanup +docker-compose down --volumes \ No newline at end of file diff --git a/apps/codex-claude-workstation/latest/scripts/upgrade.sh b/apps/codex-claude-workstation/latest/scripts/upgrade.sh new file mode 100755 index 000000000..c3042d497 --- /dev/null +++ b/apps/codex-claude-workstation/latest/scripts/upgrade.sh @@ -0,0 +1,4 @@ +#!/bin/bash +# upgrade.sh — codex-claude-workstation upgrade placeholder +set -eo pipefail +echo "Upgrade placeholder: docker compose pull && docker compose up -d" diff --git a/apps/codex-claude-workstation/logo.png b/apps/codex-claude-workstation/logo.png new file mode 100644 index 0000000000000000000000000000000000000000..9cec3e62d1817bf3fe702d0d21ccdd15beb049a2 GIT binary patch literal 4768 zcmV;R5?}3!P)jbaz0;>2SrtTwn z)H1E<6|nIfMA{#)@DVcPBd_i=ZPq7b*aVQ=DY5Pzci0(h))HveB68OhgW4TK;2AyS zBR=37iQ5q&-xx{y0kHG{i`f8%*aIc!0CLy^Eam`g*8zFh0f5*89p?dM*a14?0yE?Q zUfBUw+5te|0Z!ZiklO)A-Ud4LYx6xd0000XbW%=J06iXX(G4#H{Qi$>R_ar^=A=Y? z`hl*|>X+iP&Xvja=Uoc^!vFvgdPzhopiyCwmZ88QH4lWH^WzlzO}Do-^o zG86ad{=WP0SY^N~LR^j|cbF5!i)YpDKR~n|<@)eG9$JHHC+u z!M(djZt_vB>;D~WjK3;H*7n7F0(&%S-TxJ9>-Z}UIQp6XNJQ%RJ1-r7g6vVfkXn=--}4@RcYp{Upn^i)nATC8hV}rzHarg_a`X!ksrx_IxPlM+F#3gvG&5M>cwqMA;7NGo$09Nxf1&#u zU__37Dk4K8{z@KE^^rdlk@(%p!Q2=I?ERTIBJDYEaNFMRU@fW&ahekhyO0>SIkHl}1BiAzV2ZyQH9xeZ5_zYc% zeandC@mDK~KRA5!n!dKJu;H`6yl0*)dRHEkw~9y{3XAb)Haj83CQZ}n%k_>C-e~v% z&3tkwBJy^9BzIlyT>SaN4K~I-yetyDE`I;`m?HKtXR+J$ku?5ltsHU~cQ&%6>HF}4 zNbK?UD?^?FHDiB|3nTId^GF?kF#gPm(`LwPXcD{AICC_#5#z-s#O~y*eTzPl51B=K zsASC?y{^~$^_oy`rqjZRL>n>IbSfL?evJwv@(cYfpNh(q5oD1oFARCV-V1JNl4+WY zNHlY2I%Ux+vAIj$vk|H1k>&bGI%VZwRwn)!EpL)~t-L*~!QFC)khZIJnTG_ElBxJ~3%Z4!gZFpeF?0S;e`<&XK9Bt7n zVyFC)rW@4yBPC*=k4TF|VszR0lo7@UY$rucxJ4%EFpttN6l35&z((Ya^fgV{@41Nd zL`06R4z@3*49Eh5gKivqZ^+HC3p#VmHbQKG-b}gHDgp9#E+R)FkrZ27r;J)r%82^A z!*0i}5?P6@vCj;fLc`iRiI~nVib!+%dwG>BGiJeq3S>cjAP$k_nRv>)yRx?6)>2O| zL}Ykrfrb70a6V;JlHGPEo2E9beRklX?FH6GJC+{g~0N zwp#<7aI@=S&~Te(sLm!OLy>7-?QBF!H#Fs=@T;jjhD~Fzg0@|)B(pF#;f~$sp`x?N zV}H=3UC>7&X3N(?k7_}NStGBA+NMjAax;FML@;bUVpU>O>~~{C!0z2aFm}ZenWIM! zUTDVOYBgW21UK~vQp1nkOYoIdQ|N5cG&QkJXY+_8FM0w;@D;59(qM%q6F-@+=InBg z8^8zcFU^@nXG2Ufofbsoi@|jVyGZWXozQF6YokZ{w_q@z8_ap^K^%T@;SDwc#Q)`} z4O@dpjDaqAqKnYoI=?5Gqq%H~d&`ZD*l?5FV);sRHp(T1S%d{7^@q?m^d9OYlK}H< zPO(>1Zn)X@f*UOqiq0k#*g6(7)H*ja)GFSi&@8bGW~@nMCH7WYWYv#uwoN1W~qG&9FcG~y7#oZS920}lU`vlTWC z$yZM+U02X`1>Ku1xYRQ<91*>tytW9k#q-K|n zFQMxNN&~c@p7RT~Qf3ZIbvAS|BdmQDdcmQ!*sKkrpW7=Cb*7XWJpK7$1HF*ZIOpV1 zxzqMRDeN}w&v_(TDZL=RW^ECaT9l7gl`@uU(_rM}pSDVC>_sVP&+D&}ve2g1AJ^@% zTo8xwo1oOeS!Yx!5sYnP5P~{?+CodM7iE?1L#JO3IS=c%~v+H0rg(mP^X+2d=_OlUQvO-ewM(~iLXX#>5? za4!Sb1IJ_-?j|)?nre+J@0Rvp%mRDqth6uIO>i8ZxIz=H}r#0^?d zlYDKVv|*5?8?+D_TH^I)&Qf!w*905EuPZ$TKM>5%p%=)>eBuU8x9M!`>@gwO z3rA=obmaM7BB<@9=FoyV-NMIdIyc2JrL%}3!qJc}k5GJB5DN^9W|3#ARQ*-rN>AME;Sc!Ca?wzyN&0d%&;i=qRk_)GT0#@Ct)Yd`jQd%iDr?Kt zSGzZ1FHn0bHTN~>$(S;O-1bU?(AXj+bm+aIJ!Y0tbLhQkkj=&tT4PTpwjwoV0=iF{ zI$37*E(pEX`&ZYt&|{O@-W~%zt(?&YN?S@zl-6p0UWZmvyD5!AFZ1h{l6z()wNQG$ zHdBa&J;sC@nx#GZdSaf@zmS#*^NUflaXk6PsBl6e< z+VlE+mLnE0-3@QG>|_tGuU1QzNgz)m;z_Znr?LB1(43k|Z3Rua$Je1zXx^UVY#AJzcJ-7=u1O8h zC#Ce>4ch2qER^mG}@z};5-Wx;i1?SI)V@x(7Ci@mjpNu*K_~)SX*iPxtYv!z6 ze0u+`N9G5Ypiic+EtEc*=CDvYiG7RBAegz6o|V$Hgl2zL>9L{o*a{lIe5)}PnA^hB zT4|y7Rp_Gz78je&#bI}Z6|~fv*W%ejb5DtMB`6G>vFc!IeUaT=wl{(G=J>B#9@aSp0E_f;68Q2t4aej1^?Il zp^aCt6Y`K_J{3Vf(S3Pn4^wM)x!LC9E7`C?%J4MysSuhdeMF^?V-tHkNq%56Vf1=X zC00hohwZVP@&zp)Dot8qm6s zAvnrr_?kO}S$lcY^oRA1W>FX^z&r6DiGtJB7Ze)40`2OfnXTor!p+hjmW=3Xwp>N5 zD0kFPf1rg7by}SBAgFV;R@}Eqe=s9RRGm_`+>y5(GAluKaSphfmO+IN$0FjuM zJ^hJFSY2L43u5^dosy6Pg|aj*^zImR&DgYaf6OPo%(~OE_vQblE9lF*!Btjk(aW$) z!y_Jmf-_M^6t)<(S=tx89gC9)T?THHPk-o)e7U1pTFQ|7fr0g?swhPfWyLH=Z2Z&M zMM?wpb4ibcyhd|NYuRLFDWx7X%yPsg6kK;@-wl=fRr3j+&zvo>Gjkce;9j=C0ctdh zs|I&E`MffJ^nwOuXT zH%s`s5IC!s)k8}OC?#$@LwAdk>T|y zT%l*ANc0R-u=f@AIg(!QPXTf;&F=4{MIZkT;7u^I7mZkLG`l^Ua;I}UFh#;MUo@HZ z@S4@e1!oOc7NLp`O(SL>FQ6tEp*@+q%tyUH|^d<9*r?r2wNffYi&}1&)zq<}R-se=Kr>in zr06QWT$p6cJoPosQgPlcAv={967SdKRu?ZXlCBNMsb62LIny}z1@+H1JQA|G<49>9 za0*)E7+H)>5(NY`zmA)n#0@^>He^B&T)C<|QS= zfuj2m;&w&%3AC3Jl9P07>(^&gZQ>cE$MK6Vwl3?Gl2M1$*Fj87r;HpVWQ7Fd(XDk$ zKiakbiTQz7QQ%_3KdibDy9_27!|9_A5iOaZAS5!QV{+8VrupDThih$&wQJrb8F?^B zDTBSHB4B6883c7qr;u%L%; zN#vWF(Ln7Psl9v~`l}#qmEvUd9#6kxJot93d70XWJE6prr{2V|p30`EomF1v9}Aay z!qE(&kkn(u%M|gKm)fsO0mfuC>9~>52XC4XM^4$B<@EQeY=eI7TjsXRFZY-;lEcwW z21gM;(oJgi(x2MPD~8axE%Uy*+w2@R*s01L_cKBM%NCN1gWO%?FP_>RM|W5-U3p|3 zJt7?3Re#KVV$%?OaT^U2ly@?TbJuRF=sw+!lfSVR(Men9;7r1scDERsx~X3VM_ zS`i-qNHSSG(PUVY+RgEIX{

!}0k@$uIak@e=yjlY=N3BnWaKW~gk*dW)%cD3KH zwneSf(5a7)G8=QG9&G%o^pIm^L|i@bbY{D?PdIy50b`l(y!p* u)zeQLhv-{v{-Yu3Xm({aFaH6