agentbox

Literally all of them: https://github.com/rcarmo/agentbox

I run mine inside https://github.com/rcarmo/agentbox (with https://github.com/rcarmo/webterm)

I've been collecting a list of sandboxing related projects as well, some lower level than others. I wish I had time to evaluate them all: - https://github.com/jingkaihe/matchlock - https://github.com/mishushakov/libkrun-go - https://github.com/earendil-works/gondolin - https://github.com/butter-dot-dev/bvisor - https://github.com/amlalabs/amla-sandbox - https://github.com/eryx-org/eryx - https://github.com/containers/bubblewrap (not new) - https://github.com/coplane/localsandbox - https://github.com/sd2k/conch - https://github.com/Gerharddc/litterbox - https://github.com/finbarr/yolobox - https://github.com/coventry/sandbox-codex - https://github.com/osks/ctenv - https://github.com/tianon/gosu - https://github.com/colony-2/shai - https://github.com/rcarmo/agentbox - https://github.com/coder/httpjail - https://github.com/bytecodealliance/c

I ran it for a couple of days in a VM in my Proxmox cluster. It was cute, but so amazingly insecure (systemd + sudo + installing whatever it wanted, plus requiring Telegram for access - or another SIM card for Signal) that I just gave up and started building my own thing (https://github.com/rcarmo/vibes) so I could have a mobile experience I could trust over Tailscale and sandbox copilot CLI (or any ACP-compliant agent) in a container (I've also been working on https://github.com/rcarmo/webterm and https://github.com/rcarmo/agentbox, so I am 300% positive I can do better sandboxing and safer integrations...) It also BURNS through tokens like mad, because it has essentially no restrictions or guardrails and will actually implement baroque little scripts to do whatever you ask without any real care as to the consequences.. I can do a lot mo

Well, I built https://github.com/rcarmo/agentbox - which I run in a VM, with a dedicated container per project. Right now most of them are running Copilot CLI, others Mistral Vibe or Toad, and I have just built a small web front end based on https://github.com/rcarmo/textual-webterm that lets me see a dashboard of all running tmux sessions inside the containers, click through, and prompt the agents every hour or so. Looks like this: https://mastodon.social/@rcarmo/115937685095982965 SyncThing syncs their workspaces to my desktop/laptop, I make small adjustments (I don’t do stupid wasteful things like the Ralph approach, I prefer clear SPEC documents and TODO checklists, plus extensive testing and switching models for doing code audits on each other), my changes sync back, etc. I’m considering calling it “million monkeys”, really.

I use https://github.com/rcarmo/agentbox inside a Proxmox VM. My setup syncs the workspaces back to my Mac via SyncThing, so I can work directly in the sandbox or literally step away.