swe-swe

My machine running swe-swe will have

Tell the page what your machine has and it writes the commands to run. Leave everything as it is and you get the ordinary four lines. Pick one. Every check below prints its own answer, so you never have to interpret a wall of output.

Docker

swe-swe packages up the coding agent and all its tools for you. Nothing else needs installing.

how do I check?

docker info >/dev/null 2>&1 && echo "Docker works: pick Docker" || echo "No Docker here: pick one of the others"

If you have Docker Desktop, start it and run this again.

git and the coding agents preinstalled

No Docker, but the agent is already installed on the machine. swe-swe runs everything directly. Linux on a 64-bit machine, Intel or ARM.

how do I check?

command -v git >/dev/null 2>&1 && command -v claude gemini codex goose aider opencode pi >/dev/null 2>&1 && echo "git and a coding agent are installed: pick this one" || echo "Missing one of them: pick none of the above"

none of the above

Install one of these first

swe-swe needs either Docker, or git plus a coding agent already on the machine. There is no third way.

Easiest: install Docker, then come back and pick the first option.

Or: install git and one of claude, gemini, codex, goose, aider, opencode, pi — then pick the second option.

It also has

Node installed

Node is what the usual one-line install uses. Without it there is a plain download instead.

how do I check?

command -v node >/dev/null 2>&1 && echo "Node is installed: leave it TICKED" || echo "No Node: UNTICK it"

chromium, xvfb, x11vnc, novnc and websockify installed

These are what the Agent View pane uses to show you a browser the agent can drive.

how do I check?

sh -c 'm=""; for b in Xvfb x11vnc websockify; do command -v "$b" >/dev/null 2>&1 || m="$m $b"; done; command -v chromium >/dev/null 2>&1 || command -v chromium-browser >/dev/null 2>&1 || m="$m chromium"; [ -z "$m" ] && echo "All present: leave it TICKED" || echo "Missing:$m -- UNTICK it"'

I can install them. The script adds the install line. I cannot install anything. The Agent View pane is switched off. Every other pane still works. I can install them on a different machine. Its setup is a separate block below the script.

Added before swe-swe starts. That package list is for Debian and Ubuntu; other systems have the same programs under different names.

sudo apt-get install -y chromium xvfb x11vnc novnc websockify

An agent that can use swe-swe's bundled MCP config

That config is how the agent finds swe-swe's own tools. Some agents ignore a config placed in the project folder.

how do I check?

One command per agent you picked. Each makes a throwaway folder, asks the agent to list its tools, then deletes the folder. Your real settings are never touched.

My browser can reach it by

Pick one. This applies whichever way you answered above.

any port on it

Your own laptop, or a machine on your network. Each session gets its own port for the app preview, and they all just work.

one fixed port, with wildcard subdomains

That is: anything.<the machine's hostname> reaches it, whatever you put in front of the dot. Running it locally, lvh.me already behaves this way.

how do I check?

In a browser on the machine you will actually be using, open anything.<the machine's hostname> — literally the word "anything", or any word you like. If it reaches this machine, pick this one.

just the one web address I was given

You open it at a single address, like https://my-box.example.com, and nothing else on that machine opens. Usual for a hosting service, a rented server with one way in, or a work network that blocks the rest. Nothing to set up.

how do I check?

If all you were handed is one address to open, pick this one. To be sure, add :8080 to the end of that address (after the name, before any /) and try to open it in the browser you will actually use. If it does not open, pick this one.

Tailscale

A private network between your own machines. Every port becomes reachable, so nothing is added to the script.

how does that work?

Install Tailscale on this machine and on the one you browse from, sign both into the same account, and reach swe-swe at the name Tailscale gives it. swe-swe neither installs nor configures it; it is just a network your machines are both on.

swe-swe-tunnel

The same machine as above, when you do want the parts that need their own address. It gives you wildcard subdomains of its own hostname and hands your ports back on those.

what do I need?

A tunnel server to connect to, which is a separate thing to run: a machine that stays up, a domain whose subdomains point at it, and your key authorised on it. See the docs. Once it is running, connecting this machine to it is the three steps below the script.

Run this

Password made at random in your browser, sent nowhere. Keep the copy you paste.

And on the different machine, the one with the browser

Run this there, not on the machine above. Pick any shared secret you like, as long as both machines use the same one.

Then, once per boot, in your browser

About 30 seconds. None of this is a command, so there is nothing to copy.

Open the address your host gives you, and log in with your password.
Gear icon, then Settings. In the "Tunnel secrets" box, paste your tunnel lines. Apply.
The dot on the gear turns amber while it connects, then green. The link appears under "Tunnel secrets" in Settings, with a Copy button. Open that link. Every pane works there, and it is the same link every boot.