floci/floci-oci repository overview

⁠floci-oci

Any Cloud. Locally.
Light, fluffy, and always free: the Oracle Cloud local emulator

A free, open-source local Oracle Cloud Infrastructure emulator for development, testing, and CI. No account. No API key ceremony. No feature gates.

Oracle Cloud has no official local emulator. Testing OCI integrations means a real tenancy, real credentials, and real network round-trips, even in CI. floci-oci fills that gap: one container, one port, real wire protocols.

⁠Quick Start

# compose.yaml
services:
  floci-oci:
    image: floci/floci-oci:latest
    ports:
      - "4599:4599"

docker compose up

oci os ns get --endpoint http://localhost:4599

oci os bucket create --endpoint http://localhost:4599 \
  --compartment-id ocid1.tenancy.oc1..flocilocaltenancy0000000000000000000000000000000000000000 \
  --namespace floci-local --name my-bucket

Any locally generated API key works. floci-oci parses the request signature for tenancy and user context but never verifies it. The latest-compat image bundles the OCI CLI, the Python SDK, and a throwaway key, so docker exec floci-oci ocilocal os ns get works with zero setup.

⁠Real OCI wire protocols

Real request and response shapes: opc-request-id on every response, opc-next-page pagination headers, etag and if-match conditional requests, OCIDs, work requests for async operations, and OCI's exact error bodies (NotAuthorizedOrNotFound, BucketNotFound).

⁠Services

Full operation-level detail: floci.io/floci-oci/services⁠

Real Docker where fidelity matters:

Set FLOCI_OCI_SERVICES_FUNCTIONS_MOCK=true or FLOCI_OCI_SERVICES_OKE_MOCK=true to skip Docker entirely. The management plane stays fully usable.

Not implemented yet: identity domains, API keys and auth tokens, dynamic groups, tag namespaces, object versioning, retention rules (stubbed empty for Terraform), lifecycle policies, replication, the S3 Compatibility API, queue consumer groups, stream pool Kafka settings, KMS import and backup, secret rotation, and pre-built functions.

⁠Terraform and OpenTofu

The official oracle/oci provider works unchanged through its per-client host overrides. No fork, no wrapper.

export TF_VAR_CLIENT_HOST_OVERRIDES="oci_identity.IdentityClient=http://localhost:4599;oci_object_storage.ObjectStorageClient=http://localhost:4599"

The full apply, plan (zero drift), destroy cycle is validated in CI for both tools.

⁠Compatibility Testing

107 automated compatibility tests across 4 SDKs, the OCI CLI, and 2 IaC tools.

⁠Configuration

Per-service storage overrides use the map form, for example FLOCI_OCI_STORAGE_SERVICES_OBJECTSTORAGE_MODE=wal.

Full reference: floci.io/floci-oci/configuration⁠

Multi-tenancy isolation: the tenancy OCID in your signing key's keyId is the storage partition. Requests signed with different tenancy OCIDs see fully isolated resources. Compartments are the organizational boundary, tenancy is the isolation one.

⁠Image Tags

Stable releases ship on the 1st and 3rd Tuesday of each month. nightly tracks main.

⁠Resources

• Docs: floci.io/floci-oci⁠
• Source: github.com/floci-io/floci-oci⁠
• Slack: Join the Flock⁠
• Discussions: github.com/orgs/floci-io/discussions⁠
• Sponsor: github.com/sponsors/floci-io⁠

⁠License

MIT. Use it however you want.