Run coding agents in disposable Linux VMs with Clawk
Clawk gives Claude Code, Codex, and shell-based coding agents a disposable, network-restricted Linux VM so they can install tools and run code without direct access to your host machine.
What you get from it
What it is
Clawk is an open-source agent sandbox for local development. You start it from a repository, then run a coding agent or shell inside a disposable Linux VM with restricted outbound networking and only the mounted project files available.
Why it is useful
Use it when an agent needs to install packages, run servers, execute generated code, or inspect unfamiliar dependencies, but you do not want that work happening directly on your laptop. The project is pre-1.0, so treat it as a practical experiment rather than a hardened enterprise boundary.
Best fit
| Use case | Why Clawk helps | Caveat |
|---|---|---|
| Agent coding sessions | Gives the agent root inside a throwaway Linux guest | Anything mounted or allowed on the network can still be exposed |
| Risky dependency tests | Lets packages run away from the host filesystem | You still need normal code review and secret hygiene |
| Multi-agent experiments | Keeps destructive commands away from the main machine | Pre-1.0 project with possible breaking changes |
Before you try it
Check the supported platforms, read the security model, and start with a non-sensitive repository. Do not mount secrets or private data unless you are comfortable with the agent and allowed network destinations seeing them.
Discussion
Share practical experience, questions, or warnings with the community.
Sign in to join the discussion and vote on comments.
Sign in