OpenHands 1.0 Self‑Hosting Guide

Описание и применение

Руководство по безопасному развертыванию OpenHands 1.0 на локальной машине с использованием Docker‑sandbox, политики подтверждения и полной регистрации событий.

Задача

Running an autonomous coding agent on a local machine risks accidental code changes, credential leaks, and uncontrolled resource usage.

Результат

Self‑hosting OpenHands 1.0 with Docker sandboxing and confirmation policies reduces risk of destructive actions, limits network exposure, and provides deterministic replay via event logs, enabling safe autonomous coding on local hardware.

Рабочий процесс

• Install OpenHands CLI or binary installer
• Configure LLM settings and save to ~/.openhands/settings.json
• Run the agent in Docker sandbox using the provided docker run command
• Set SANDBOX_USER_ID to match host user
• Define SANDBOX_VOLUMES to mount only the target project folder
• Enable ConfirmRisky policy via SDK
• Disable network with SANDBOX_NETWORK_DISABLED=true for non‑internet tasks
• Apply Docker security options (--security-opt no-new-privileges, --read-only)
• Mount secrets read‑only or via env vars
• Set LOG_ALL_EVENTS=true for full audit trail
• Review event logs after each session
• Iterate: move from CLI to Docker, tighten policies, and monitor costs

Доказательства

OpenHands 1.0 is a ground‑up rebuild around a Software Agent SDK…

Источник

SecurityAnalyzer rates every tool call as low, medium, or high risk…

Источник

The official Docker launch command looks like this…

Источник