SaaSHub helps you find the best software and product alternatives Learn more →
Nono Alternatives
Similar projects and alternatives to nono
-
claude-code
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
zed
Code at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.
-
-
-
container
A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.
-
-
-
-
pi
AI agent toolkit: coding agent CLI, unified LLM API, TUI & web UI libraries, Slack bot, vLLM pods
-
-
-
-
-
-
-
-
-
boxlite
The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud.
-
librefang
LibreFang is an open-source agent operating system written in Rust. Live demo: https://flyio.librefang.ai
-
agent-fetch
Sandboxed HTTP client with SSRF protection for AI agents. Prevents DNS rebinding, blocks private IPs, and validates every connection — available as a Rust crate and npm package.
nono discussion
nono reviews and mentions
-
Docker Sandboxes – Disposable, isolated sandboxes for AI agents
This has both features and is open-source: https://nono.sh/
It's an OS-level sandbox, though. It doesn't launch VMs or containers for sandboxing purposes; it uses whatever sandboxing features your host kernel offers.
- OpenChamber: An Agentic Development Environment
- Nono: Sandbox any AI agent in seconds – zero setup, zero latency
-
Pi's Minimalism Is Its Advantage
You might appreciate https://nono.sh/
Its very easy to use and has a pre-made profile for pi. Just do something like `alias pi="nono run -v --profile pi --allow-cwd -- /opt/homebrew/bin/pi"` in your shell.
-
Git worktrees are not an isolation boundary for coding agents
Git worktrees are a great isolation boundary for _changes_, but not behavior. If you are trying to actually run autonomous agents securely you need something that lives outside the harness that actually blocks actions in a way that can't be prompted around.
We use nono [1] for this internally, essentially blocking any actions we don't want agents to be able to do without human approval. Our developers can just run `task claude` or whatever their harness is) and it pre-wraps it with our profile that enforces:
- Filesystem: read/write only the worktree plus dev-tooling dirs (Go, Doppler, Graphite caches, git common dir); explicitly no Docker socket and it can't edit its own Claude settings files (so it can't loosen its own permissions).
- Network: outbound only to an allowlist — Anthropic, Doppler, Go module proxies, our dev environments while still allowing binding local dev-server ports.
- GitHub: read anything in the org, and create/edit PRs and push branches — but it cannot merge, close, review, or comment on PRs, delete branches, touch repo settings/secrets, manage auth, oruse raw gh api. Those are all "human-only". GitHub tokens are never exposed to the agent; they're injected by a proxy so it can't read or exfiltrate them.
This is great because it is harness agnostic - any developer can use whatever harness they want as long as they port the nono profile to it, as it will enforce all of the above in a way that is not tied to a specific harness implementation
[1] https://github.com/nolabs-ai/nono
-
AI Coding at Home Without Going Broke
If you don't want to do that, don't use a VM. I like nono:
https://github.com/always-further/nono
- Claude Fable is relentlessly proactive
-
Anthropic, please ship an official Claude Desktop for Linux
There are a number of utilities for this. I use jai: https://jai.scs.stanford.edu/ but also have seen nono: https://github.com/always-further/nono smolvm: https://github.com/smol-machines/smolvm zerobox https://github.com/afshinm/zerobox and matchlock https://github.com/jingkaihe/matchlock
They all have pros and cons. Pick the one that suits you best. Then you're also agent harness flexible (I use opencode).
-
Ask HN: What is your (AI) dev tech stack / workflow? (June 2026)
I'm currently using herde[1] to handle/supervise multiple agents (with some patches I need to try to upstream) along with Nono[2] for sandboxing. This sandboxing approach avoids use of a microVM, which lets me use tooling I already have installed inside the sandbox. The downside is getting all the policies correct as it seems every project needs some new type of access, though Nono does try to make policy writing easy.
I've been considering switching my approach to using a microVM through microsandbox[3]. The pro of this approach is you can essentially skip the policies and rely on the security of the VM boundary. The negative is that now you've lost all your installed tools, so you need to either provision at runtime or build something (like an image) beforehand to match your dev environment.
I still don't know which is less maintenance. And while I think herde is pretty well thought out, I do think about something that works outside the terminal may be nicer.
[1] https://github.com/ogulcancelik/herdr
[2] https://github.com/always-further/nono
[3] https://github.com/superradcompany/microsandbox
-
Why TUIs Are Back
Try an external sandboxing tool. When you need to adjust the sandbox, close the agent, launch it with the new params, and resume the session. It doesn't take long to arrive at a stable configuration; for me it's mostly about rw access to the CWD, read access to other local repos, and access to Nix. Other than that I can just use YOLO modes and not sweat it.
I briefly evaluated a bunch (had an LLM make a list of those that satisfied some basic criteria, then visited READMEs and websites) and chose nono. No regrets: https://nono.sh/
-
A note from our sponsor - SaaSHub
www.saashub.com | 10 Aug 2026
Stats
nolabs-ai/nono is an open source project licensed under Apache License 2.0 which is an OSI approved license.
The primary programming language of nono is Rust.