OpenJ / Airlock / DevelBuild the project
Airlock image / 01

Build a Java project inside the room.

Devel is the general development image. Mount a project, run the build, inspect the output, and let an agent work against the same files without giving it the whole host.

Open Devel on Docker Hub ↗Run the workflow

One useful task

Give the workspace a Java repository and ask the agent to make a small change, run the tests, and show the result. The value is a repeatable place where the work can happen.

docker pull ecapriolo/trusted-opencode:0.0.4-devel

docker run --rm -it \
  -v "$PWD/demo-service:/workspace" \
  -w /workspace \
  ecapriolo/trusted-opencode:0.0.4-devel bash

./mvnw test
>> result the project is built and tested inside the Devel workspace

What crosses the boundary

The project directory is explicit. Add a Maven cache or model directory only when the workflow needs one. The agent gets the tools it needs for the task, not an accidental view of every host file.

Good first task: ask the agent to add a test, run ./mvnw test, and explain the changed files.