diff --git a/apps/harness/Dockerfile b/apps/harness/Dockerfile
index 13cbf25..dfc56ac 100644
--- a/apps/harness/Dockerfile
+++ b/apps/harness/Dockerfile
@@ -17,11 +17,12 @@ WORKDIR /app
 ENV NODE_ENV=production
 
 # System tools needed by agent executors
-RUN apk add --no-cache git github-cli curl
+RUN apk add --no-cache git github-cli curl ca-certificates
 
 # Agent CLIs (installed globally before dropping to non-root)
-RUN npm install -g @anthropic-ai/claude-code @openai/codex \
-  && curl -fsSL https://opencode.ai/install | sh
+RUN npm install -g @anthropic-ai/claude-code @openai/codex
+RUN curl -fsSL https://opencode.ai/install | sh || \
+    echo "WARN: opencode install failed, skipping"
 
 RUN addgroup --system --gid 1001 nodejs
 RUN adduser --system --uid 1001 nextjs