Home

Welcome to the Code on Incus wiki. COI is a session manager that runs AI coding tools (Claude Code, opencode, and others) inside isolated Incus system containers — with credential protection, network controls, and real-time security monitoring built in.

New to COI? Start with Getting Started for a step-by-step walkthrough, then read Architecture and Security Model to understand what COI protects against and how.

Documentation

Getting Started

• Getting Started - Step-by-step setup and first session walkthrough
• Architecture and Security Model - What COI protects against and how its defense layers work

Setup and Installation

• Linux Setup Guide - Distro-specific setup (Arch, Fedora, openSUSE, Ubuntu)
• macOS Setup Guide - Running COI on macOS with Colima/Lima

Configuration and Usage

• Best Practices - Session modes, network selection, team workflows, and storage management
• Configuration - Config files, hierarchy, per-repo .coi/config.toml, full reference, and environment variables
• Profiles - Self-contained profile directories with build scripts, context files, and full config bundling
• Supported Tools - Claude Code, opencode, and adding new AI tools
• Container Lifecycle and Sessions - Understanding how containers and sessions work
• Container Operations - Container management and low-level operations
• Snapshot Management - Create checkpoints, rollback, and branch experiments
• File Transfer - Push/pull files between host and containers
• Port Publishing - Publish container TCP ports on the host so agent-started services are reachable at localhost:<port>
• Tmux Automation - Automate AI sessions with tmux commands
• Image Management - Create and manage custom images
• Resource and Time Limits - Control container resource consumption and runtime

Security

• Security Monitoring - Real-time threat detection and automated response (the detection engine)
• Audit Log - On-disk audit log format, field reference, and coi audit live streaming
• Session Logs - COI operational logs and coi logs command
• Security Best Practices - Git hooks protection, path security, and safe commit practices
• Network Isolation - Network security modes and nftables setup

Maintenance

• System Health Check - Diagnose setup issues, verify configuration, and update COI
• Self-Update - Keep COI current with coi update
• Migration Guide - Breaking changes and upgrade steps between versions (Upgrading from 0.9 to 0.10, Upgrading from 0.8 to 0.9)

Help and Reference

• FAQ - Frequently Asked Questions about COI
• FAQ: Platform Comparisons - How COI differs from Docker, DevContainers, Distrobox, and VMs
• FAQ: Security and Trust - Credential handling, threat model, and trustworthiness
• FAQ: Setup and Operation - Platform support, Docker-in-COI, local AI models
• Troubleshooting - Common issues and solutions