Clawk
Dev tools
agent sandbox
SHOW HN2026
How HN took it
8 positive, 13 neutral or asking, 1 mixed, 12 critical, out of 34 comments about the project. Thread score -0.23.
Idea: 1 for, 9 againstPrivacy: 4 for, 1 againstPerformance: 1 for, 1 againstExecution: 1 for, 0 againstDocs: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful VM approach for agent isolation
From 2 comments
love what youve done here. i will be using this in the future.
ebeirne on HNAnd, make coding harnesses run 20x faster at many multi-processing and file operations by running the coding harness itself inside of Linux instead of MacOS…
ttul on HN
Objections
Too many similar AI sandbox projects
From 3 comments
This is like the 30th AI sandbox project on Show HN. Why this one over the rest?
rvz on HNHow many of these are there now, a hundred? We get it, you can run an agent in a VM/container/sandbox. What about configuration management & rollbacks? What about the policy…
0xbadcafebee on HNIs there anyone who is NOT building another AI sandbox solution?
mlnj on HN
A separate user or existing containers are enough
From 3 comments
I still don't understand the point of all these VMs and containers for agents. Just create a separate user on your machine without sudo privileges, switch to it in your terminal…
vqtska on HNCan't I just use a `docker run` command to run claude and bind in the current directory into the docker container?
djha-skin on HNwhy not just a docker container
prairieroadent on HN
Mac-first with only experimental Linux support
From 1 comment
> Requires macOS 14+ on Apple silicon. (Linux is supported via firecracker and currently experimental...) So should be noted it's mostly macOS out of the box with some Linux…
rock_artist on HN
Requests
Persistent state across sessions
From 1 comment
The blast radius problem is real. I've been running coding agents with fairly broad filesystem access and the thing that makes me nervous isn't the agent doing something…
elombn on HN
Remote dev environments and self-hosting
From 1 comment
Local first is also a feature, for work you often can't run company code on a remote VM that isn't company owned. Remote dev envs are on the roadmap though, that's one of the…
celrenheit on HN
Questions
How the network filtering works without root
From 1 comment
> clawk forward add my-project 3000 > clawk network allow my-project api.example.com Can you describe the implementation details? How did you implement the firewall without root?…
matheusmoreira on HN
How it differs from Docker or devcontainers
From 2 comments
What does Clawk do that Docker without exposed ports doesn't?
oleg_kabanov on HNIs it similar to devcontainers?
thiodrio on HN
Alternatives named
yoloAI
From 1 comment
yoloAI does something similar: - Sandbox on Linux using Docker, Podman, containerd, gVisor, Kata, Firecracker - Sandbox on Mac using Docker, Podman, Apple containers, Seatbelt,…
kstenerud on HN
Incus
From 1 comment
This is the right idea IMO but I don't want to trust a third party tool for it either (no offense OP!). Ever since I started running coding agents with shell access I've jailed…
JeremyNT on HN
Docker or Podman containers
From 1 comment
I am certainly no expert in this space so it is quite possible I'm missing something critical, but what seems to work for me is a Podman image I built on my computer with some…
einhard on HN
Landlock and bwrap
From 1 comment
you can also simply use Landlock and bwrap on Linux. Pi even has a plugin for that https://pi.dev/packages/pi-landstrip
bpavuk on HN