Show HN: Yolobox – Run AI coding agents with full sudo without nuking home dir

1. yolobox

   1 8 630 9.3 Go

   Let your AI go full send. Your home directory stays home.

   

   Good feedback, thank you. We expanded the README: https://github.com/finbarr/yolobox/commit/ad776012f82f9d67e1...

2. SaaSHub

   www.saashub.com sponsored

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

3. Litterbox

   2 13 140 9.3 Rust

   Somewhat Isolated Development Environments

   

   Very cool! I've recently built something similar at https://github.com/Gerharddc/litterbox (https://litterbox.work/). Litterbox only works on Linux as it heavily relies on Podman, but it does have a few other benefits for my use-case:

   - Most importantly, it exposes a Wayland socket so that I can run my entire dev environment (i.e. editor etc.) inside the container. This gives additional protection against exploits inside editor extensions for instance.

   - It also exposes provides a special SSH agent which always prompts the user to confirm a signing operation. This means that an agent or an exploit never gets unsupervised access to your Github for instance.

   - It has some additional functions to help with enabling permissions inside the container which are only needed for certain use cases (such as allowing for TUN/TAP device creation).

   - It has not been added yet, but I'm working on SELinux integration for even more secure isolation from the host.

4. shai

   3 2 42 6.8 Go

   sandboxing shell for ai coding agents

   

5. ctenv

   4 2 6 9.5 Python

   Container runner that executes as your user with correct file permissions.

   

   Interesting to learn about other related tools. I built a similar variant called ctenv (https://github.com/osks/ctenv). Focused more general containers and not specific to agents, but I'm using it for that via its configurability. One thing I wanted was to use any image in the container, which shai also seem to support in the same way (mounting a custom entrypoint script).

6. sandbox-codex

   5 2 1 3.2 Shell

   Sandbox codex, start it in tmux and record all tmux activity

   

   I've been working on something similar.

   https://github.com/coventry/sandbox-codex

   Still work in progress. The tmux-activity logs are unreadable, at the moment.

7. sandbox-runtime

   6 16 4,956 9.7 TypeScript

   A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

   

   Check out https://github.com/anthropic-experimental/sandbox-runtime, which tackles this problem using the built-in userspace sandboxing on macOS and Linux.

   I run Claude from a mounted volume (but no reason you couldn't make a user for it instead) since the Deny(~) makes it impossible to run from the normal locations.

   export CLAUDE_CONFIG_DIR=/Volumes/Claude/.claude

   Minimal .claude/settings.local.json:

8. simple-npm-sandbox

   7 3 3 2.3 Shell

   A safe, sandboxed way to install and run Node.js scripts using Docker

   

   I too built something similar (just for nodejs and bare-bones impl): https://github.com/freakynit/simple-npm-sandbox

   Was a fun little learning exercise.

9. toadbox

   8 4 15 5.3 Python

   Discontinued Contain your coding agents (literally) [Moved to: https://github.com/rcarmo/agentbox]

   

   Nice. I’ve gone down the same path, but with more creature comforts: https://github.com/rcarmo/toadbox

10. container

    9 52 48,934 9.7 Swift

    A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

    

    Apple container is more akin to a replacement for docker or colima (although patterned more like Kata containers where each container is a separate vm as opposed to a bunch of containers in a single vm). It's a promising project (and nice to see Apple employees work to improve containers on macOS).

    Hopefully, they can work towards being (1) more docker api compatible and (2) making it more composable. I wrote up https://github.com/apple/container/discussions/323 for more details on the limitations therein.

    Originally, I planned to built shai to work really well on top of apple container but ultimately gave up because of the packaging issues.

11. distrobox

    10 422 12,864 9.5 Go

    Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Mirror available at: https://gitlab.com/89luca89/distrobox

    

12. toolbox

    11 123 3,458 8.6 Go

    Tool for interactive command line environments on Linux

    

Suggest a related project