pixels

I’ve been working on a sandboxing tool that uses Incus. Originally it was only to run LLMs inside a sandbox, but recently I added MCP so that an agent could spin one up and do work that way. It currently only exposes a rudimentary set of tools which I’d like to expand. The sandboxes created by MCP are generally ephemeral. The daemon will clean them up after an hour of no usage. But it’s so cool that they get their own IP and you can ssh straight in. I can see that being very useful when you want to share with a colleague and then close your laptop (assuming it’s running on a remote instance). https://github.com/deevus/pixels

For this specific problem I built pixels: https://github.com/deevus/pixels It supports running on a TrueNAS SCALE server, or via Incus (local or remote). I'm still working on tightening the security posture, but for many types of AI workflows it will be more than sufficient.

Location: Wollongong, Australia (UTC+10/+11) Remote: Yes Willing to relocate: No Technologies: Zig, C, Terraform, Docker, Linux, Go, Python, Laravel, Node, React, TypeScript, Flutter/iOS, Godot, PostgreSQL, AWS Resume/CV: https://github.com/deevus Email: See GitHub profile LinkedIn: https://linkedin.com/in/deevus Solo consultant (Simon Hartcher Services) and former startup CTO. Co-founding maintainer of Scoop (23k+ stars). True full-stack developer comfortable at every level of the stack. Recent work and open source: - Scoop - Windows CLI installer (https://github.com/ScoopInstaller/Scoop) - TrueNAS Terraform provider and Go client: https://github.com/deevus/terraform-provider-truenas - Pixels - disposable Linux containers for AI coding agents: https://github.com/deevus/pixels - Cryptographic protocol implementation in Zig (O

Pixels provisions Incus containers onto your TrueNAS server using their websocket API. I took inspiration from https://sprites.dev/. I have been doing a bit of vibe coding recently, but I didn't want to pay for a sandbox product. It's supposed to be simple to startup a container and get into a console. The most popular agent CLI's that I could think of are already installed if you provision with `devtools = true`. I used Claude Code extensively but this is NOT vibe coded! I review every line of code. I might have missed some corkers when developing this at midnight. It is using a bit of trickery to support checkpoints of the Incus containers. The main reason for this was so that you can spin up a base container, install everything you want, and then create a new container from that. I did try to make the sandbox secure. I think I can do a