🛠️
Tools & AppsFree

Run coding agents in disposable Linux VMs with Clawk

Clawk gives Claude Code, Codex, and shell-based coding agents a disposable, network-restricted Linux VM so they can install tools and run code without direct access to your host machine.

Original
Clawk GitHub repositoryOpen original externally↗
Jul 13, 2026
#coding-agents#sandbox#developer-tools#security#open-source#codex#claude-code
Status & Access
Current access and latest update details.
Access
Free
Updated
Jul 13, 2026, 08:38 PM

What it is

Clawk is an open-source agent sandbox for local development. You start it from a repository, then run a coding agent or shell inside a disposable Linux VM with restricted outbound networking and only the mounted project files available.

Why it is useful

Use it when an agent needs to install packages, run servers, execute generated code, or inspect unfamiliar dependencies, but you do not want that work happening directly on your laptop. The project is pre-1.0, so treat it as a practical experiment rather than a hardened enterprise boundary.

Best fit

Use caseWhy Clawk helpsCaveat
Agent coding sessionsGives the agent root inside a throwaway Linux guestAnything mounted or allowed on the network can still be exposed
Risky dependency testsLets packages run away from the host filesystemYou still need normal code review and secret hygiene
Multi-agent experimentsKeeps destructive commands away from the main machinePre-1.0 project with possible breaking changes

Before you try it

Check the supported platforms, read the security model, and start with a non-sensitive repository. Do not mount secrets or private data unless you are comfortable with the agent and allowed network destinations seeing them.

Sources & links
References, demos, and supporting links.
Clawk GitHub repositorygithub.comPrimaryShow HN launch discussionnews.ycombinator.com
Discussion

Sign in to join the discussion and vote on comments.

No comments yet. Start the discussion.
Keep exploring

More from this topic

More in Tools & Apps