OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Agent Security & Sandboxing

Clawk

Clawk is a command-line tool that runs coding agents and shells in disposable Linux virtual machines, with a project directory mounted from the host. The guest provides root access and a separate Linux kernel; the VM disk can be discarded while repository files and agent conversations remain on the host.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Clawk — OpenViST project profile in Agent Security & Sandboxing.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use Clawk when a coding agent needs a full Linux environment for builds, tests, package installation or services, and you want the VM separated from the host and disposable independently of the repository and conversation state.

Who it is for

  • Developers who want coding agents to install packages, run code, tests or background services in a separate Linux machine.
  • Teams or individuals handling work across several repositories who want a sandbox and worktree per repository.

Documented uses

  • Run Claude Code, Codex, pi, OpenCode or a shell inside a disposable Linux VM.
  • Install dependencies and use system-level Linux tools without running those tasks directly on the host.
  • Expose a guest development server on a localhost port or allow a required network host.
  • Stop, resume or destroy a sandbox while keeping repository files and agent conversations on the host.
Before you choose

Requirements & limits

The documented macOS requirement is macOS 14 or later on Apple silicon. Linux support uses Firecracker and is experimental. The project is open source under Apache-2.0; its README specifies Go 1.26 or later.

  • The VM has its own Linux kernel and gives the agent root in the guest, while the host filesystem is not mounted except for explicitly shared project files.
  • Outbound traffic is allow-listed, but allowed hosts remain reachable; GitHub is pre-allowed and SSH-agent forwarding can permit pushes.
  • The VM disk is disposable. Repository files and agent conversations persist on the host after shutdown or destruction.
  • A custom OCI image can supply the guest root filesystem; the README says no Docker daemon is required.
  • Linux support is explicitly experimental, while the documented macOS requirement is macOS 14 or later on Apple silicon.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Start an agent sandbox for a repository

Open a coding agent or shell in a disposable VM for the current project directory, then stop or remove the VM while retaining host-side project and agent state.

Before you start

  • macOS 14 or later on Apple silicon; Linux support is experimental and uses Firecracker.
  • Clawk installed; the README documents Homebrew installation.
  • A project directory on the host.

Steps

  1. Change to the project directory.

  2. Run clawk to boot a sandbox for that directory and attach Claude Code.

  3. Run clawk run shell to open a shell in the same sandbox, or clawk run codex to start Codex.

  4. Run clawk down to stop the VM, or clawk destroy to remove it; use clawk attach to return to a stopped sandbox.

Expected outcome

The agent works in a disposable Linux VM with the repository mounted in; the repository and agent state persist on the host when the VM is stopped or destroyed.

Guide limitations

  • The documented macOS requirement is version 14 or later on Apple silicon; Linux support is experimental.
  • VM disk contents such as package installs, caches and guest home files are not preserved by stopping or destroying the VM, except for documented snapshot and Linux-provider behavior.
  • Clawk is pre-1.0 and may have breaking changes.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
14 October 2026
Original website title
clawkwork/clawk · Official homepage title · retained in its source language
How we review sourcesSuggest a correction