diff --git a/docker/run/fs/ins/install_additional.sh b/docker/run/fs/ins/install_additional.sh
index 2f9a98221..dc90d4c6b 100644
--- a/docker/run/fs/ins/install_additional.sh
+++ b/docker/run/fs/ins/install_additional.sh
@@ -5,4 +5,9 @@ set -e
 # bash /ins/install_playwright.sh "$@"
 
 # searxng - moved to base image
-# bash /ins/install_searxng.sh "$@"
\ No newline at end of file
+# bash /ins/install_searxng.sh "$@"
+
+# Collabora CODE for future images. Existing containers still self-heal through the
+# Office plugin runtime bootstrap, so this is an optimization rather than a release
+# prerequisite.
+bash /ins/install_collabora_code.sh "$@"
diff --git a/docker/run/fs/ins/install_collabora_code.sh b/docker/run/fs/ins/install_collabora_code.sh
new file mode 100755
index 000000000..25e7eba84
--- /dev/null
+++ b/docker/run/fs/ins/install_collabora_code.sh
@@ -0,0 +1,24 @@
+#!/bin/bash
+set -e
+
+if ! command -v apt-get >/dev/null 2>&1; then
+  echo "apt-get unavailable; skipping Collabora CODE install"
+  exit 0
+fi
+
+install -d -m 0755 /etc/apt/keyrings
+if [ ! -f /etc/apt/keyrings/collaboraonline-release-keyring.gpg ]; then
+  wget -O /etc/apt/keyrings/collaboraonline-release-keyring.gpg \
+    https://collaboraoffice.com/downloads/gpg/collaboraonline-release-keyring.gpg
+fi
+
+cat >/etc/apt/sources.list.d/collaboraonline.sources <<'EOF'
+Types: deb
+URIs: https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-deb
+Suites: ./
+Signed-By: /etc/apt/keyrings/collaboraonline-release-keyring.gpg
+EOF
+
+apt-get update
+DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends coolwsd coolwsd-deprecated code-brand
+rm -rf /var/lib/apt/lists/*