{"slug": "clawk", "name": "Clawk", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.803, "rising": -0.98, "first": "2026-07-13", "latest": "2026-07-20", "why": "Clawk (recently submitted to HN here https://news.ycombinator.com/item?id=48892859) might be good", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 0, 0, 0, 0, 0, 3, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Clawk (recently submitted to HN here https://news.ycombinator.com/item?id=48892859) might be good", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/clawkwork/clawk", "official_url": "https://github.com/clawkwork/clawk", "pricing": "", "aliases": ["Clawk", "clawk"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 783671264, "item_id": 48979454, "url": "https://news.ycombinator.com/item?id=48979454", "by": "nextaccountic", "date": "2026-07-20", "version": null, "stance": "recommend", "quote": "Clawk (recently submitted to HN here https://news.ycombinator.com/item?id=48892859) might be good", "excerpt": "Elsewhere in the thread someone linked to https://pleasedonotescape.com/ which is a list of sandboxes Maybe sandboxing isn't the job for an agent harness? Maybe choosing a VM as your sandbox, with access only to project directory.. and then enabling YOLO mode on the agent, is the way to go. And in any case, for an agent that can write and run code, no allowlist for which programs are allowed to run is sufficient, sin", "context": "", "use_case": "agent sandboxing", "switched_from": "", "story": "Stop Using OpenCode"}, {"id": 782456465, "item_id": 48903529, "url": "https://news.ycombinator.com/item?id=48903529", "by": "hsin003", "date": "2026-07-14", "version": null, "stance": "recommend", "quote": "Really cool project.", "excerpt": "Really cool project. It's fascinating to see more developers pushing back against the complexity of modern container orchestrators. We actually open-sourced Containarium (https://github.com/FootprintAI/Containarium) recently with a very similar philosophy: keeping container environments lightweight, simple, and highly portable. also support MCP and eBPF for convience and security too.", "context": "", "use_case": "disposable VMs for coding agents", "switched_from": "", "story": "Show HN: Clawk \u2013 Give coding agents a disposable Linux VM, not your laptop"}, {"id": 782333040, "item_id": 48895815, "url": "https://news.ycombinator.com/item?id=48895815", "by": "kerblang", "date": "2026-07-13", "version": null, "stance": "recommend", "quote": "Check the 2nd section of article", "excerpt": "Check the 2nd section of article https://github.com/clawkwork/clawk#why-a-vm A lot of people would yell \"docker isn't secure!\" but if you're running Docker on MacOS (and Windows, I think) you're already running a Linux VM. But if you really wanna let your agent YOLO their way along, Docker is kinda restrictive, so that a full VM lets it install things, start services, and so on.", "context": "", "use_case": "Disposable Linux VM for coding agents", "switched_from": "", "story": "Show HN: Clawk \u2013 Give coding agents a disposable Linux VM, not your laptop"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["agent sandboxing", "disposable vms for coding agents", "disposable linux vm for coding agents"], "compared": [{"slug": "docker-sandboxes", "name": "Docker Sandboxes", "co": 1, "switched_from": 1, "switched_to": 0}], "makers": [{"id": 787872561, "item_id": 49242035, "url": "https://news.ycombinator.com/item?id=49242035", "by": "celrenheit", "date": "2026-08-10", "version": null, "stance": "recommend", "quote": "These were some of the reasons that led me to build: Clawk", "excerpt": "I tried it and it worked great at first but I had multiple issues with it, the disk space usage was growing significantly, I need to login multiple times for each sandbox, it's closed source and not possible to customize to my need. One other thing, I want to be able to handle multiple repos in the same sandbox and have a standard workflow around worktrees (one worktree per repo, all the worktree mounted in the VM). ", "context": "", "use_case": "multi-repo agent sandboxes with worktrees", "switched_from": "Docker Sandboxes", "story": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents"}, {"id": 782315536, "item_id": 48894721, "url": "https://news.ycombinator.com/item?id=48894721", "by": "celrenheit", "date": "2026-07-13", "version": null, "stance": "recommend", "quote": "mostly macOS out of the box. I've tested it on linux and it worked", "excerpt": "mostly macOS out of the box. I've tested it on linux and it worked but it's not my daily driver. I'll make the platform scope clearer in the README", "context": "", "use_case": "disposable VMs for coding agents", "switched_from": "", "story": "Show HN: Clawk \u2013 Give coding agents a disposable Linux VM, not your laptop"}, {"id": 765970882, "item_id": 47873180, "url": "https://news.ycombinator.com/item?id=47873180", "by": "celrenheit", "date": "2026-04-23", "version": null, "stance": "recommend", "quote": "Shameless plug: https://clawk.work/", "excerpt": "Shameless plug: https://clawk.work/ `ssh you/repo/branch@box.clawk.work` \u2192 jump directly into Claude Code (or Codex) with your repo cloned and credentials injected. Firecracker VMs, 19\u20ac/mo. POC, please be kind.", "context": "", "use_case": "Cloud VMs for coding agents", "switched_from": "", "story": "I Am Building a Cloud"}], "threads": [{"url": "https://news.ycombinator.com/item?id=48892859", "title": "Show HN: Clawk \u2013 Give coding agents a disposable Linux VM, not your laptop", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=49239751", "title": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48978112", "title": "Stop Using OpenCode", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47872324", "title": "I Am Building a Cloud", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {"recommend": 3}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 783671264, "item_id": 48979454, "url": "https://news.ycombinator.com/item?id=48979454", "by": "nextaccountic", "date": "2026-07-20", "version": null, "stance": "recommend", "quote": "Clawk (recently submitted to HN here https://news.ycombinator.com/item?id=48892859) might be good", "excerpt": "Elsewhere in the thread someone linked to https://pleasedonotescape.com/ which is a list of sandboxes Maybe sandboxing isn't the job for an agent harness? Maybe choosing a VM as your sandbox, with access only to project directory.. and then enabling YOLO mode on the agent, is the way to go. And in any case, for an agent that can write and run code, no allowlist for which programs are allowed to run is sufficient, sin", "context": "", "use_case": "agent sandboxing", "switched_from": "", "story": "Stop Using OpenCode"}, {"id": 782456465, "item_id": 48903529, "url": "https://news.ycombinator.com/item?id=48903529", "by": "hsin003", "date": "2026-07-14", "version": null, "stance": "recommend", "quote": "Really cool project.", "excerpt": "Really cool project. It's fascinating to see more developers pushing back against the complexity of modern container orchestrators. We actually open-sourced Containarium (https://github.com/FootprintAI/Containarium) recently with a very similar philosophy: keeping container environments lightweight, simple, and highly portable. also support MCP and eBPF for convience and security too.", "context": "", "use_case": "disposable VMs for coding agents", "switched_from": "", "story": "Show HN: Clawk \u2013 Give coding agents a disposable Linux VM, not your laptop"}, {"id": 782333040, "item_id": 48895815, "url": "https://news.ycombinator.com/item?id=48895815", "by": "kerblang", "date": "2026-07-13", "version": null, "stance": "recommend", "quote": "Check the 2nd section of article", "excerpt": "Check the 2nd section of article https://github.com/clawkwork/clawk#why-a-vm A lot of people would yell \"docker isn't secure!\" but if you're running Docker on MacOS (and Windows, I think) you're already running a Linux VM. But if you really wanna let your agent YOLO their way along, Docker is kinda restrictive, so that a full VM lets it install things, start services, and so on.", "context": "", "use_case": "Disposable Linux VM for coding agents", "switched_from": "", "story": "Show HN: Clawk \u2013 Give coding agents a disposable Linux VM, not your laptop"}]}