Alibaba Cloud Linux 4 Agentic Edition configuration-Alibaba Cloud Linux(Alinux)-阿里云帮助中心

Alibaba Cloud Linux 4 Agentic Edition (ANOLISA) uses a hierarchical configuration system to manage authentication, models, and tools. Project-level and user-level configuration files can override defaults.

Authentication methods

Agentic OS requires authentication to connect to LLM services on first startup. Use /auth to switch methods later.

Supported authentication methods:

Alibaba Cloud authentication

Select "Aliyun Authentication" in the interactive interface to receive a free usage quota.

In an ECS environment, the terminal displays an authorization URL and QR code. Open the URL or scan the QR code to log in to your Alibaba Cloud account and authorize access.
In a non-ECS environment, use Alibaba Cloud AK/SK authentication.
- Obtain an AK/SK:
  1. Log in to the Alibaba Cloud console.
  2. Create a key on the AccessKey management page.

Alibaba Cloud authentication provides a free usage quota for development and testing.

⚠️Note: Alibaba Cloud authentication supports Qwen-series text models only, not multimodal models.

Custom Provider (OpenAI-compatible endpoints)

Select "Custom Provider" in the interactive interface and prepare an API key. Supported OpenAI-compatible endpoints include:

Preset base URL: model services from cloud providers (DashScope, DeepSeek, GLM, Kimi, Minmax, and so on).
Custom base URL: locally deployed models (such as vLLM and Ollama), third-party API proxy services, and so on.

Authentication management

Operation	Command
View current authentication status	`/auth`
Switch authentication method	`/auth` (select from the interactive menu)
Log out	`/auth logout`

Troubleshooting: If authentication fails, check that your API key has no leading or trailing spaces and your network can reach the API endpoint. Run /bash then co --debug for detailed error messages. Multiple authentication methods can coexist; the system selects one by priority. Switch manually with /auth.

Model configuration

Switch models

Run /model to switch the model for the current session:

> /model
# A list of available models appears. Select the target model.

Configuration files

Interactive configuration

Run /setting to open an interactive interface for modifying most settings.

Configuration hierarchy and precedence

The Agentic OS shell entrypoint cosh uses JSON configuration files. Settings apply in this order of precedence (highest to lowest):

command-line arguments > environment variables > project settings > user settings > default values

Configuration file locations

Type	Path	Description
user settings	`~/.copilot/settings.json`	Personal global configuration.
project settings	`.copilot/settings.json` (in the project root directory)	Project-specific configuration, shareable with the team.

Core configuration items

general — General settings

Parameter	Type	Default	Description
`preferredEditor`	string	—	Editor for opening files.
`vimMode`	boolean	false	Enables Vim key bindings.
`enableAutoUpdate`	boolean	true	Automatically checks for updates.
`checkpointing.enabled`	boolean	false	Enables session checkpoints.
`defaultFileEncoding`	string	"utf-8"	Default file encoding.

model — Model settings

Parameter	Type	Default	Description
`name`	string	—	Model name.
`maxSessionTurns`	number	-1	Maximum turns per session.
`chatCompression.contextPercentageThreshold`	number	0.7	Context compression threshold.

tools — Tool settings

Parameter	Type	Default	Description
`approvalMode`	string	"default"	When user approval is required for tool execution.
`sandbox`	boolean/string	—	Sandbox environment for tool execution.
`core`	array	—	Enabled tools whitelist.
`exclude`	array	—	Explicitly excluded tools.
`allowed`	array	—	Tools that do not require approval.

context — Context settings

Parameter	Type	Default	Description
`fileName`	string/array	"COPILOT.md"	Context file name.
`includeDirectories`	array	—	Additional context directories.
`fileFiltering.respectGitIgnore`	boolean	true	Whether to respect .gitignore rules.

security — Security settings

Parameter	Type	Description
`folderTrust.enabled`	boolean	Enables the folder trust mechanism.
`auth.selectedType`	string	Currently selected authentication method.
`auth.enforcedType`	string	Mandatory authentication method that overrides user selection.