Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
1–10 of 177 posts
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#2[flagged]
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#3why not just a docker container
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#4love what youve done here. i will be using this in the future.
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#5> clawk forward add my-project 3000
> clawk network allow my-project api.example.com
Can you describe the implementation details? How did you implement the firewall without root?
I vibecoded virtdev, a virtual machine orchestration project just like this one:
https://github.com/matheusmoreira/virtdev
It was designed to not require root, and the nftables firewall ended up becoming the only exception. I'm very curious about how you implemented this. Did you find a better way?
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#6Errbody gangsta until the agent figures out it's in a container and finds an exploit that lets it break out of container jail...
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#7Sprites from Fly io does this beautifully, claude comes preinstalled, its great
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#8Errbody gangsta until the agent figures out it's in a container and finds an exploit that lets it break out of container jail...
I developed a VM project just like this one. Asked Fable to stress test it and try to break out of containment, and to my surprise it didn't manage to. Fable didn't get downgraded to Opus either, for some reason.
Would have thrown Mythos at it if I had access to it.
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#9I am developing a super light similar thing here
https://github.com/daitangio/take-ai-control
It is docker + vscode friendly. I tested it with major systems (copilot, codex, Claude Code and pi.dev) Comments Wellcome!
Re: Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
#10I use mkosi: https://github.com/systemd/mkosi
Which is just a front for systemd-nspawn. It's annoying you have to edit the config.nspawn to mount a directory if you start it with the "shell" command, instead of booting. But apart from that, it's brilliant.