BAbargava·Sep 8, 2026
I use cco [1]. There's also drydock [2] - but this is macOS only.
--
[1] https://github.com/nikvdp/cco
[2] https://github.com/sricola/drydock
In Coop – Isolated VM Environments for Running Claude Code and Codexnikvdp
cco
Shell2025–2026
nikvdp / cco
cco
A thin protective layer for Claude Code
4Distinct people
6Mentions
0Explicit recommenders
429GitHub stars
What to know before exploring
What it is
A thin protective layer for Claude Code
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by month6 dated mentions
Observed mentions: 2025-07-04 06:19:02 UTC to 2026-09-08 05:27:13 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| Jul 2025 | 2025-07-01 00:00:00 UTC | 2025-08-01 00:00:00 UTC | 1 | 1 | 0 |
| Aug 2025 | 2025-08-01 00:00:00 UTC | 2025-09-01 00:00:00 UTC | 1 | 0 | 1 |
| Sep 2025 | 2025-09-01 00:00:00 UTC | 2025-10-01 00:00:00 UTC | 0 | 0 | 0 |
| Oct 2025 | 2025-10-01 00:00:00 UTC | 2025-11-01 00:00:00 UTC | 1 | 0 | 1 |
| Nov 2025 | 2025-11-01 00:00:00 UTC | 2025-12-01 00:00:00 UTC | 0 | 0 | 0 |
| Dec 2025 | 2025-12-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 0 | 0 | 0 |
| Jan 2026 | 2026-01-01 00:00:00 UTC | 2026-02-01 00:00:00 UTC | 1 | 0 | 1 |
| Feb 2026 | 2026-02-01 00:00:00 UTC | 2026-03-01 00:00:00 UTC | 0 | 0 | 0 |
| Mar 2026 | 2026-03-01 00:00:00 UTC | 2026-04-01 00:00:00 UTC | 1 | 0 | 1 |
| Apr 2026 | 2026-04-01 00:00:00 UTC | 2026-05-01 00:00:00 UTC | 0 | 0 | 0 |
| May 2026 | 2026-05-01 00:00:00 UTC | 2026-06-01 00:00:00 UTC | 0 | 0 | 0 |
| Jun 2026 | 2026-06-01 00:00:00 UTC | 2026-07-01 00:00:00 UTC | 0 | 0 | 0 |
| Jul 2026 | 2026-07-01 00:00:00 UTC | 2026-08-01 00:00:00 UTC | 0 | 0 | 0 |
| Aug 2026 | 2026-08-01 00:00:00 UTC | 2026-09-01 00:00:00 UTC | 0 | 0 | 0 |
| Sep 2026 | 2026-09-01 00:00:00 UTC | 2026-10-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
6 sourcescco I another option in this space.
https://github.com/nikvdp/cco
In Agent Safehouse – macOS-native sandboxing for local agentsFor a similar but lighter weight (and less isolated) tool that uses the OS's sandboxing functionality (bubblewrap on linux, Seatbelt/sandbox-exec on macos) or docker check out cco [1] (note: I built it). It's primarily useful now because it can also sandbox other agents like opencode or codex since Anthropic has added native sandboxing functionality to Claude Code itself now. Their sandbox works similarly, also using bubblewrap and seatbelt, and can be accessed via the /sandbox slash command inside Claude Code [2].
[1]: https://github.com/nikvdp/cco
[2]: https://code.claude.com/docs/en/sandboxing
In Running Claude Code dangerously (safely)claude condom gives you protection on claude YOLO mode
https://github.com/nikvdp/cco
In Living Dangerously with ClaudeI made a similar thing not long ago that lets you choose between docker, seatbelt (macOS's native sandboxing) and bubblewrap (on Linux).
I use it on macOS primarily, and have basically stopped using docker mode in favor of the native sandboxing because features like image pasting Just Work™.
http://github.com/nikvdp/cco
In Docker container for running Claude Code in "dangerously skip permissions" modeShow HN: Cco – a sandbox for Claude Code so you can YOLO made safe(ish)ly
I love the feeling of using Claude Code with --dangerously-skip-permissions on, but it always made me feel a bit uneasy. It's not that hard to trick Claude into doing bad things, and with web search enabled especially, the odds of Claude running into prompt injection attacks or accidentally downloading and running a virus don't actually seem all that low.
Running Claude Code without web search and constantly having to respond to it's permissions prompts is so slow though! I wanted something that let me get the best of both worlds, so I (well, Claude mostly) ended up
building cco, which runs Claude Code in a customized docker env that gives it access to all it's tools, but also keeps it safely away from the rest of your computer.
So far it's neatly solved my yolo mode misgivings, maybe it can solve yours too. It doesn't guarantee your co
Read the rest
mputer will be 100% safe, but running Claude Code inside cco should definitely be safer.