OpenCode Initializer v3.2.0¶
Universal Dev Machine Bootstrap — one command to set up a complete AI-enhanced development environment.
Quick Stats¶
| Metric | Value |
|---|---|
| Modules | 52 |
| New in v3.2 | Lynis CIS scanner + auditd kernel rules + AI Gateway proxy + pre-commit hook |
| Orchestrator | 685 lines of Bash |
| CLI modes | 11 (full, health, interactive, ci, and more) |
| Languages | 8 |
| MCP servers | 24 |
| LSP servers | 13 |
| OpenCode plugins | 15 |
| AI providers | 23 (20 cloud + 3 local) |
| Model Router | 8 task profiles (coding, reasoning, fast, agentic, budget, vision, isolated, ru_cn) |
| Infrastructure | 7 services (PostgreSQL, Qdrant, Redis, Prometheus, Grafana, Node Exporter, MemoryLayer) |
| Web GUI | 9 management sections (port 4200) |
| Test suite | 480+ assertions (40 unit + 5 integration + 4 e2e) |
| Package managers | apt, dnf, pacman, apk, zypper, brew |
| Architectures | amd64, arm64 |
What is it?¶
A single script that turns a fresh Linux/WSL2 machine into a production-ready development environment:
- 8 programming languages — Java 25, Node.js 24, Python 3.14, Go 1.26, Rust 1.97.1, .NET 10, Kotlin, Zig
- 24 MCP servers — GitHub, GitLab, Filesystem, Playwright, Chrome DevTools, SQLite, Postgres, Memory, Excalidraw, Brave Search, Context7, Google Maps, and more
- 15 OpenCode plugins — codegraph, dcp, auto-fallback, goal-mode, swarm, vibeguard, devcontainers, worktree, scheduler, background-agents, goal-plugin, conductor, zellij-namer, morph-plugin, supermemory
- 13 LSP servers — gopls, rust-analyzer, tsserver, pyright, omnisharp, yaml, marksman, taplo, lua, zls, bash, dockerfile, css/html/json
- Infrastructure as Code — PostgreSQL, Qdrant, Redis, Prometheus, Grafana, Node Exporter, MemoryLayer via Docker Compose
- Cockpit TUI — 7-tab terminal UI for server management
- Isolated Circuit Mode — air-gapped LLM operation with local backends
- 23 AI providers — DeepSeek, z.ai GLM-5.2, OpenRouter, OpenAI, Anthropic, Google, xAI, MiniMax M3, Alibaba Qwen3, and more
- GPU/LLM — Ollama, vLLM, SGLang, Open WebUI, WasmEdge (multi-vendor GPU auto-detection)
- ZSH — Oh My Zsh + Powerlevel10k with 14 plugins
- Chrome — Google Chrome + ChromeDriver (WSL2-optimized)
- Auto-update — systemd weekly timer + topgrade
What's New in v3.2.0¶
| Feature | Description |
|---|---|
| Lynis + Auditd | Lynis CIS security scanner + auditd kernel audit rules, weekly cron |
| AI Gateway Proxy | Corporate AI Gateway support (HTTP/HTTPS proxy for API calls) |
| Pre-commit Hook | check-setup-lines.sh — automatic line-count consistency check between setup.sh and README |
| Extended CI | ShellCheck severity error across all modules, CI gates for new files |
What's New in v3.0.0¶
| Feature | Description |
|---|---|
| SDD-native AI Harness | Full SDD lifecycle: constitution → specify → clarify → plan → tasks → implement → verify |
| Model Governance | model-policy.json — provider/model allowlist/blocklist, 3 modes, audit log |
| PII Sanitizer | 9 detectors (email, phone, INN, SNILS, passport, credit card, IP, API key) — pre-LLM gate |
| Audit Trail | 7 WAL event types, SHA-256 hash-chain, rotation >10MB → gzip+Qdrant |
| Air-Gap Completeness | --airgap mode, dev bundle create\|list\|verify, SHA-256 manifest |
| Supply-Chain Hardening | 6 curl\|sh replaced with download→verify SHA256 |
| 4 Deployment Profiles | personal, corporate, airgapped, hybrid — enforced rules per profile |
| 7 New Modules | 41-constitution, 42-hooks, 43-governance, 44-audit, 45-pii-guard, 46-offline-bundle, pii-guard.py |
What's New in v2.0.0¶
| Feature | Description |
|---|---|
| Infrastructure as Code | PostgreSQL + Qdrant + Redis + Prometheus + Grafana + Node Exporter + MemoryLayer via Docker Compose |
| Cockpit TUI | 7-tab terminal UI — System, Plugins, GPU/Models, Sessions, Tasks, Logs, Infra |
| Isolated Circuit Mode | Air-gapped LLM operation with Ollama, vLLM, SGLang |
| Model Routing Intelligence | 8 task profiles: coding, reasoning, fast, agentic, budget, vision, isolated, ru_cn |
| Web GUI | 9-section management interface: providers, models, MCP/LSP, infra, backup, logs |
| z.ai GLM-5.2 | Primary provider for RU/CN markets, OpenAI-compatible, free tier |
| OpenRouter | Aggregator access to 100+ models via single API key |
| Alibaba Qwen3.7 | Native SDK, latest Qwen model |
| DeepInfra | Fast inference, competitive pricing |
| MemoryLayer | AI memory system with Ollama embed proxy (mxbai-embed-large) |
| Observability | Prometheus + Grafana with auto-provisioned dashboards |
| Corporate Proxy | HTTP_PROXY, HTTPS_PROXY, CURL_CA_BUNDLE support |
| Config Backup | dev backup create\|list\|restore for disaster recovery |
| Model Download | dev models install <model> for local Ollama models |
| 23 providers | 20 cloud + 3 local (was 16 in v1.1.0) |
| Provider Check | `bash scripts/provider-check.sh` to verify provider connectivity |
| .env.example | Template with all 20 API key variables |
| 42 modules | Was 29 in v1.1.0 |
Quick Install¶
curl -fsSL https://raw.githubusercontent.com/AlexanderNarbaev/opencode_initializer/main/setup.sh | bash
Or clone and run:
git clone https://github.com/AlexanderNarbaev/opencode_initializer.git ~/opencode_initializer
cd ~/opencode_initializer && bash setup.sh
Review before running
Always review scripts before executing them. The entire codebase is open source and documented.
With API Keys¶
bash setup.sh --full \
--deepseek-key "sk-..." \
--zai-key "..." \
--openrouter-key "sk-or-..." \
--github-token "ghp_..." \
--gitlab-token "glpat-..." \
--google-maps-key "..."
Isolated Circuit Mode (Air-Gapped)¶
bash setup.sh --full --isolated # Use local LLM backends only
dev isolated on # Enable after install
dev isolated status # Check current state
What Gets Installed¶
| Category | Tools |
|---|---|
| Languages | Java 25, Node.js 24, Python 3.14 + uv, Go 1.26, Rust 1.97.1, .NET 10, Kotlin, Zig |
| Shell | Zsh 5.8+, Oh My Zsh, Powerlevel10k, 14 plugins |
| Browser | Google Chrome, ChromeDriver (WSL2-aware) |
| Containers | Docker Engine |
| Infrastructure | PostgreSQL, Qdrant, Redis, Prometheus, Grafana, Node Exporter, MemoryLayer |
| AI/ML | Ollama, vLLM, SGLang, Open WebUI, ChromaDB, WasmEdge, ONNX |
| Web Search | SearXNG self-hosted search + sanitizer proxy |
| MCP Servers | 24 servers for AI-assisted development |
| LSP Servers | 13 language servers |
| Plugins | 15 OpenCode productivity plugins |
| Security | Trivy, Qodana |
| Utilities | bat, btm, fd, ripgrep, sd, typos, topgrade, just, mise |
| Dotfiles | chezmoi for team config sharing |
| Dev Environments | Devbox — Nix-based isolated envs |
| Cockpit | 7-tab TUI for server management |
Supported Platforms¶
| OS | Status | Package Manager |
|---|---|---|
| Ubuntu 22.04/24.04 | Fully supported | apt |
| Debian 12 | Fully supported | apt |
| Fedora 40+ | Fully supported | dnf |
| Arch Linux | Fully supported | pacman |
| Alpine Linux | Fully supported | apk |
| openSUSE | Fully supported | zypper |
| macOS | Fully supported | brew |
| WSL2 | Optimized (DNS fix, memory limits, .wslconfig) | apt |
Modes at a Glance¶
| Mode | Flag | Use Case |
|---|---|---|
| Full | --full | Complete bootstrap (default) |
| Reinit | --reinit | Reinstall tools, keep data |
| New Project | --new <dir> | Project initialization only |
| CI/CD | --ci | Headless pipeline setup |
| Health | --health | Full diagnostics (65+ checks) |
| Update | --update | Update installed tools |
| Upgrade | --upgrade | Full system upgrade chain |
| Interactive | --interactive | Pick components individually |
| Fix Config | --fix-config | Regenerate opencode.json |
| Fix ZSH | --fix-zshrc | Repair shell configuration |
| Dry Run | --dry-run | Preview without changes |
Documentation¶
- Getting Started — beginner-friendly installation guide
- User Guide — day-to-day usage
- Advanced Guide — customization, WSL2, GPU setup
- Architecture — C4 diagrams, module reference
- Reference — CLI, opencode.json schema, MCP/LSP catalog
- Contributing — how to help
- FAQ — common questions
- Team Setup — onboarding guide for teams
Community¶
License¶
MIT — see LICENSE.