| ---
|
| title: 使用Huggingface的免费Docker空间运行Code Server
|
| published: 2026-02-24
|
| description: 使用Huggingface的免费Docker空间部署一个含有Python，Java，C++，Rust，Go，Kotlin等常用编程语言的Code Server，并同时安装并部署Codex使用
|
| image: ./covers/cover7.webp
|
| tags: [软件开发, Codex, Code Server, Docker, Huggingface]
|
| category: 软件开发
|
| draft: false
|
| ---
|
|
|
| ## 方案涵盖的功能
|
| - 支持Python，Java，C++，Rust，Go，Kotlin等常用编程语言
|
| - 同时安装Android SDK
|
| - 安装Codex，支持第三方中转API
|
| - 预装Playwright及其MCP Server，便于Codex使用
|
| - HF Space Free提供的2H16G服务器足够日常使用
|
|
|
| ## 方案仍有的不足
|
| - 镜像臃肿，部署时间长
|
| - 数据不可持久化保存
|
| - 部分地区网络较差，HF延迟高（域名被墙）
|
|
|
| ## 部署教程
|
|
|
| ### 1.进入Huggingface，创建Docker Space
|
| **前置条件：1.自备魔法上网 2.拥有Huggingface账号**
|
| 按照下图的方式新建一个Docker Space，选择Docker，Docker template为Blank
|
| 
|
|
|
| 
|
|
|
| 
|
|
|
| 其他的不用修改，直接创建Space
|
|
|
| ### 2.进入Space，新建两个文件
|
| 
|
|
|
| #### 新建一个名为`Dockerfile`的文件，内容如下：
|
| ```Dockerfile
|
| FROM python:3.11-slim-bookworm
|
|
|
| ENV DEBIAN_FRONTEND=noninteractive
|
| ENV TZ=Etc/UTC
|
| ENV PORT=7860
|
| ENV HOME=/home/coder
|
| ENV PIP_DISABLE_PIP_VERSION_CHECK=1
|
| ENV PYTHONDONTWRITEBYTECODE=1
|
| ENV PYTHONUNBUFFERED=1
|
|
|
| ARG CODE_SERVER_VERSION=4.109.2
|
| ARG KOTLIN_VERSION=1.9.25
|
| ARG ANDROID_CMDLINE_TOOLS_VERSION=11076708
|
| ARG ANDROID_PLATFORM=34
|
| ARG ANDROID_BUILD_TOOLS=34.0.0
|
| ARG GO_VERSION=1.26.1
|
|
|
| ENV KOTLIN_HOME=/opt/kotlin
|
| ENV ANDROID_SDK_ROOT=/opt/android-sdk
|
| ENV ANDROID_HOME=/opt/android-sdk
|
| ENV GOROOT=/usr/local/go
|
| ENV GOPATH=/home/coder/go
|
| ENV PLAYWRIGHT_BROWSERS_PATH=/opt/ms-playwright
|
| ENV PATH="${PATH}:${KOTLIN_HOME}/bin:${ANDROID_SDK_ROOT}/cmdline-tools/latest/bin:${ANDROID_SDK_ROOT}/platform-tools:${GOROOT}/bin:${GOPATH}/bin"
|
|
|
| RUN apt-get update && apt-get install -y --no-install-recommends \
|
| ca-certificates curl git bash sudo tini jq procps unzip \
|
| # C/C++ toolchain + headers
|
| build-essential gcc g++ make cmake ninja-build gdb clang clangd \
|
| libc6-dev linux-libc-dev pkg-config \
|
| # Java + Node
|
| openjdk-17-jdk-headless maven \
|
| nodejs npm \
|
| # Databases
|
| default-mysql-server default-mysql-client \
|
| postgresql postgresql-client \
|
| redis-server redis-tools \
|
| # Rust + Go
|
| rustc cargo rustfmt \
|
| && rm -rf /var/lib/apt/lists/*
|
|
|
| # Install code-server (pinned version)
|
| RUN curl -fsSL "https://github.com/coder/code-server/releases/download/v${CODE_SERVER_VERSION}/code-server_${CODE_SERVER_VERSION}_amd64.deb" -o /tmp/code-server.deb \
|
| && dpkg -i /tmp/code-server.deb \
|
| && rm -f /tmp/code-server.deb
|
|
|
| # Kotlin compiler
|
| RUN curl -fsSL "https://github.com/JetBrains/kotlin/releases/download/v${KOTLIN_VERSION}/kotlin-compiler-${KOTLIN_VERSION}.zip" -o /tmp/kotlin.zip \
|
| && unzip -q /tmp/kotlin.zip -d /opt \
|
| && mv /opt/kotlinc "${KOTLIN_HOME}" \
|
| && ln -s "${KOTLIN_HOME}/bin/kotlin" /usr/local/bin/kotlin \
|
| && ln -s "${KOTLIN_HOME}/bin/kotlinc" /usr/local/bin/kotlinc \
|
| && rm -f /tmp/kotlin.zip
|
|
|
| # Go (official tarball for newer version than Debian repos)
|
| RUN curl -fsSL "https://go.dev/dl/go${GO_VERSION}.linux-amd64.tar.gz" -o /tmp/go.tgz \
|
| && rm -rf /usr/local/go \
|
| && tar -C /usr/local -xzf /tmp/go.tgz \
|
| && rm -f /tmp/go.tgz
|
|
|
| # Android SDK command-line tools + common packages
|
| RUN mkdir -p "${ANDROID_SDK_ROOT}/cmdline-tools" \
|
| && curl -fsSL "https://dl.google.com/android/repository/commandlinetools-linux-${ANDROID_CMDLINE_TOOLS_VERSION}_latest.zip" -o /tmp/android-tools.zip \
|
| && unzip -q /tmp/android-tools.zip -d "${ANDROID_SDK_ROOT}/cmdline-tools" \
|
| && mv "${ANDROID_SDK_ROOT}/cmdline-tools/cmdline-tools" "${ANDROID_SDK_ROOT}/cmdline-tools/latest" \
|
| && rm -f /tmp/android-tools.zip \
|
| && yes | "${ANDROID_SDK_ROOT}/cmdline-tools/latest/bin/sdkmanager" --sdk_root="${ANDROID_SDK_ROOT}" --licenses \
|
| && "${ANDROID_SDK_ROOT}/cmdline-tools/latest/bin/sdkmanager" --sdk_root="${ANDROID_SDK_ROOT}" \
|
| "platform-tools" "platforms;android-${ANDROID_PLATFORM}" "build-tools;${ANDROID_BUILD_TOOLS}"
|
|
|
| # Python core deps
|
| RUN pip install --no-cache-dir --upgrade pip setuptools wheel && \
|
| PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 pip install --no-cache-dir \
|
| numpy pandas scipy scikit-learn matplotlib \
|
| jupyterlab ipykernel notebook \
|
| requests httpx aiohttp pyyaml python-dotenv tqdm rich \
|
| fastapi uvicorn[standard] pydantic flask \
|
| sqlalchemy alembic psycopg2-binary redis \
|
| pytest black isort ruff mypy \
|
| playwright
|
|
|
| # Codex CLI + Playwright + Playwright MCP
|
| # Remove pip-installed playwright CLI to avoid npm binary conflict
|
| RUN rm -f /usr/local/bin/playwright \
|
| && npm install -g @openai/codex playwright @playwright/mcp \
|
| && npm cache clean --force
|
|
|
| # Playwright browsers + system deps (Chromium/Firefox/WebKit)
|
| RUN mkdir -p "${PLAYWRIGHT_BROWSERS_PATH}" \
|
| && playwright install --with-deps
|
|
|
| # Create user
|
| RUN useradd -m -u 1000 -s /bin/bash coder \
|
| && echo "coder ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers \
|
| && mkdir -p /home/coder/.config/code-server /home/coder/.codex /home/coder/go \
|
| && chown -R coder:coder /home/coder /opt/kotlin /opt/android-sdk /opt/ms-playwright
|
|
|
| # Quick C build check (build-time)
|
| RUN printf '#include <stdio.h>\nint main(){puts("ok");return 0;}\n' > /tmp/t.c \
|
| && gcc /tmp/t.c -o /tmp/t \
|
| && /tmp/t | grep -q ok \
|
| && rm -f /tmp/t.c /tmp/t
|
|
|
| COPY --chown=coder:coder start.sh /usr/local/bin/start.sh
|
| RUN chmod +x /usr/local/bin/start.sh
|
|
|
| USER coder
|
| WORKDIR /home/coder
|
|
|
| EXPOSE 7860
|
| ENTRYPOINT ["/usr/bin/tini", "--"]
|
| CMD ["/usr/local/bin/start.sh"]
|
|
|
| ```
|
|
|
|
|
| #### 新建一个名为`start.sh`的文件，内容如下
|
| 本方法的Codex使用三方api，因此需要配置api_key
|
| 有关Codex的相关配置在脚本`config.toml`部分，可使用环境变量的方式修改API_KEY和BASE_URL
|
| `config.toml`的配置教程可参考上一篇文章，也可参考你自己模型提供商的教程
|
| ```start.sh
|
| #!/usr/bin/env bash
|
| set -euo pipefail
|
|
|
| PORT="${PORT:-7860}"
|
|
|
| if [[ -z "${PASSWORD:-}" && -z "${HASHED_PASSWORD:-}" ]]; then
|
| echo "[ERROR] Missing PASSWORD/HASHED_PASSWORD secret."
|
| exit 1
|
| fi
|
|
|
| if [[ -d "/data" ]]; then
|
| WORKDIR="/data/workspace"
|
| EXT_DIR="/data/code-server/extensions"
|
| USER_DATA_DIR="/data/code-server/user-data"
|
| CODEX_DIR="/data/.codex"
|
| else
|
| WORKDIR="${HOME}/workspace"
|
| EXT_DIR="${HOME}/.local/share/code-server/extensions"
|
| USER_DATA_DIR="${HOME}/.local/share/code-server/user-data"
|
| CODEX_DIR="${HOME}/.codex"
|
| fi
|
|
|
| mkdir -p "$WORKDIR" "$EXT_DIR" "$USER_DATA_DIR" "${USER_DATA_DIR}/User" "${HOME}/.config/code-server" "$CODEX_DIR"
|
|
|
| cat > "${HOME}/.config/code-server/config.yaml" <<EOF
|
| bind-addr: 0.0.0.0:${PORT}
|
| auth: password
|
| cert: false
|
| EOF
|
|
|
| if [[ -n "${HASHED_PASSWORD:-}" ]]; then
|
| echo "hashed-password: ${HASHED_PASSWORD}" >> "${HOME}/.config/code-server/config.yaml"
|
| else
|
| echo "password: ${PASSWORD}" >> "${HOME}/.config/code-server/config.yaml"
|
| fi
|
|
|
| # Codex config.toml
|
| : "${CODEX_MODEL_PROVIDER:=sub2api}"
|
| : "${CODEX_MODEL:=你想用的模型名称}"
|
| : "${CODEX_REASONING_EFFORT:=xhigh}"
|
| : "${CODEX_NETWORK_ACCESS:=enabled}"
|
| : "${CODEX_DISABLE_RESPONSE_STORAGE:=true}"
|
| : "${CODEX_WSL_ACK:=true}"
|
| : "${CODEX_VERBOSITY:=high}"
|
| : "${CODEX_PROVIDER_NAME:=sub2api}"
|
| : "${CODEX_BASE_URL:=你的中转站地址}"
|
| : "${CODEX_WIRE_API:=responses}"
|
| : "${CODEX_REQUIRES_OPENAI_AUTH:=true}"
|
| : "${PLAYWRIGHT_MCP_ENABLE:=true}"
|
| : "${PLAYWRIGHT_MCP_HOST:=127.0.0.1}"
|
| : "${PLAYWRIGHT_MCP_PORT:=8931}"
|
| : "${PLAYWRIGHT_MCP_URL:=http://${PLAYWRIGHT_MCP_HOST}:${PLAYWRIGHT_MCP_PORT}/mcp}"
|
|
|
| cat > "${CODEX_DIR}/config.toml" <<EOF
|
| model_provider = "${CODEX_MODEL_PROVIDER}"
|
| model = "${CODEX_MODEL}"
|
| model_reasoning_effort = "${CODEX_REASONING_EFFORT}"
|
| network_access = "${CODEX_NETWORK_ACCESS}"
|
| disable_response_storage = ${CODEX_DISABLE_RESPONSE_STORAGE}
|
| windows_wsl_setup_acknowledged = ${CODEX_WSL_ACK}
|
| model_verbosity = "${CODEX_VERBOSITY}"
|
|
|
| [model_providers.${CODEX_PROVIDER_NAME}]
|
| name = "${CODEX_PROVIDER_NAME}"
|
| base_url = "${CODEX_BASE_URL}"
|
| wire_api = "${CODEX_WIRE_API}"
|
| requires_openai_auth = ${CODEX_REQUIRES_OPENAI_AUTH}
|
| EOF
|
|
|
| if [[ "${PLAYWRIGHT_MCP_ENABLE}" == "true" ]]; then
|
| cat >> "${CODEX_DIR}/config.toml" <<EOF
|
|
|
| [mcp_servers.playwright]
|
| url = "${PLAYWRIGHT_MCP_URL}"
|
| EOF
|
| fi
|
|
|
| if [[ -n "${CODEX_AUTH_JSON:-}" ]]; then
|
| printf '%s\n' "${CODEX_AUTH_JSON}" > "${CODEX_DIR}/auth.json"
|
| elif [[ -n "${OPENAI_API_KEY:-}" ]]; then
|
| cat > "${CODEX_DIR}/auth.json" <<EOF
|
| {
|
| "OPENAI_API_KEY": "${OPENAI_API_KEY}"
|
| }
|
| EOF
|
| fi
|
|
|
| chmod 600 "${CODEX_DIR}/config.toml" 2>/dev/null || true
|
| chmod 600 "${CODEX_DIR}/auth.json" 2>/dev/null || true
|
|
|
| if [[ "${CODEX_DIR}" != "${HOME}/.codex" ]]; then
|
| rm -rf "${HOME}/.codex"
|
| ln -s "${CODEX_DIR}" "${HOME}/.codex"
|
| fi
|
|
|
| # 默认中文界面
|
| cat > "${USER_DATA_DIR}/User/locale.json" <<EOF
|
| {
|
| "locale": "zh-cn"
|
| }
|
| EOF
|
|
|
| # 首次启动安装扩展（幂等）
|
| EXT_MARKER="${USER_DATA_DIR}/.extensions_installed"
|
| if [[ ! -f "${EXT_MARKER}" ]]; then
|
| echo "[INFO] Installing extensions on first boot..."
|
|
|
| install_ext() {
|
| code-server --extensions-dir "${EXT_DIR}" --install-extension "$1" || true
|
| }
|
|
|
| # 你指定的 3 个（尽量装）
|
| install_ext ms-vscode.cpptools
|
| install_ext ms-vscode.cpptools-themes
|
| install_ext ms-vscode.cpp-devtools
|
| install_ext ms-vscode.cmake-tools
|
| install_ext danielpinto8zz6.c-cpp-compile-run
|
| install_ext golang.go
|
| install_ext rust-lang.rust-analyzer
|
| install_ext redhat.java
|
| install_ext vscjava.vscode-java-debug
|
| install_ext vscjava.vscode-java-test
|
| install_ext vscjava.vscode-maven
|
| install_ext vscjava.vscode-gradle
|
| install_ext vscjava.vscode-java-dependency
|
| install_ext ms-python.vscode-pylance
|
| install_ext ms-python.python
|
| install_ext ms-python.debugpy
|
| install_ext ms-python.vscode-python-envs
|
| install_ext ms-playwright.playwright
|
|
|
| # Codex
|
| install_ext openai.chatgpt
|
|
|
| # 若微软扩展不可用，装稳定替代
|
| install_ext MS-CEINTL.vscode-language-pack-zh-hans
|
| install_ext llvm-vs-code-extensions.vscode-clangd
|
| install_ext ms-vscode.makefile-tools
|
| install_ext vadimcn.vscode-lldb
|
|
|
| touch "${EXT_MARKER}"
|
| fi
|
|
|
| if [[ "${PLAYWRIGHT_MCP_ENABLE}" == "true" ]]; then
|
| if command -v playwright-mcp >/dev/null 2>&1; then
|
| echo "[INFO] Starting Playwright MCP server at ${PLAYWRIGHT_MCP_URL}"
|
| nohup playwright-mcp --headless --browser chromium --no-sandbox --port "${PLAYWRIGHT_MCP_PORT}" --host "${PLAYWRIGHT_MCP_HOST}" >/tmp/playwright-mcp.log 2>&1 &
|
| else
|
| echo "[WARN] Playwright MCP not installed; skipping server start."
|
| fi
|
| fi
|
|
|
| echo "[INFO] Java: $(java -version 2>&1 | head -n1 || true)"
|
| echo "[INFO] Python: $(python --version || true)"
|
| echo "[INFO] Pip: $(pip --version || true)"
|
| echo "[INFO] Node: $(node --version || true)"
|
| echo "[INFO] g++: $(g++ --version | head -n1 || true)"
|
| echo "[INFO] Rust: $(rustc --version || true)"
|
| echo "[INFO] Cargo: $(cargo --version || true)"
|
| echo "[INFO] Go: $(go version || true)"
|
| echo "[INFO] Playwright: $(playwright --version 2>/dev/null || true)"
|
|
|
| exec code-server "$WORKDIR" \
|
| --extensions-dir "$EXT_DIR" \
|
| --user-data-dir "$USER_DATA_DIR" \
|
| --disable-telemetry \
|
| --disable-update-check \
|
| --log warn
|
|
|
| ```
|
|
|
| 进入`README.md`,开放端口7860
|
| 
|
|
|
| 等待程序开始构建（首次部署时间比较久）
|
|
|
| ### 3.进入Space Settings，新建两个Secret
|
| **注意：一定是要Secret，确保API_KEY的安全性**
|
| 
|
| ```
|
| PASSWORD: 你自己设置的密码
|
| API_KEY: 你在你的Codex渠道获取的API_KEY，具体可见上一篇文章
|
| ```
|
| ### 4.等待部署完成，开始愉快的使用
|
|
|
|
|
| ## 免责声明
|
| **使用本教程产生的一切不良后果与本人无关，此方法可能会导致Huggingface账号被封禁，请自行承担风险使用本方法造成。另外，此部署方式文件缺少持久化存储，容器重启就会丢失，请配合保活使用** |
