{"slug": "yolobox", "name": "yolobox", "category": "ai", "category_name": "AI tools and apps", "description": "", "recommenders": 5, "commenters": 7, "warners": 1, "score": 3.556, "rising": -1.64, "first": "2026-01-12", "latest": "2026-07-13", "why": "", "why_is_quote": false, "has_verdict": false, "sentiment": {"recommend": 5, "neutral": 0, "compare": 1, "warn": 1}, "spark": [0, 0, 4, 0, 1, 0, 0, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/finbarr/yolobox", "official_url": "https://github.com/finbarr/yolobox", "pricing": "", "aliases": ["yolobox", "Yolobox"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 759388320, "item_id": 47461770, "url": "https://news.ycombinator.com/item?id=47461770", "by": "nateb2022", "date": "2026-03-20", "version": null, "stance": "recommend", "quote": "See also: https://github.com/finbarr/yolobox", "excerpt": "See also: https://github.com/finbarr/yolobox \"Let your AI go full send. Your home directory stays home.\"", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: What Are You Working On? (March 2026)"}, {"id": 748003680, "item_id": 46750230, "url": "https://news.ycombinator.com/item?id=46750230", "by": "ahstilde", "date": "2026-01-24", "version": null, "stance": "recommend", "quote": "https://github.com/finbarr/yolobox/", "excerpt": "https://github.com/finbarr/yolobox/", "context": "", "use_case": "Agent sandboxing", "switched_from": "", "story": "Claude Code's new hidden feature: Swarms"}, {"id": 747167904, "item_id": 46697994, "url": "https://news.ycombinator.com/item?id=46697994", "by": "Finbarr", "date": "2026-01-20", "version": null, "stance": "recommend", "quote": "quite a few improvements shipped in the last week", "excerpt": "Running in a VM certainly has some benefits (particularly the ability to run docker inside of it easily). Last week I shared https://github.com/finbarr/yolobox which takes the docker approach (nearly 400 github stars already and quite a few improvements shipped in the last week).", "context": "", "use_case": "Sandboxed dev environment", "switched_from": "", "story": "Running Claude Code dangerously (safely)"}, {"id": 746292128, "item_id": 46643258, "url": "https://news.ycombinator.com/item?id=46643258", "by": "nullishdomain", "date": "2026-01-15", "version": null, "stance": "recommend", "quote": "yolobox is the easiest I have found.", "excerpt": "yolobox is the easiest I have found. Basically a batteries included image with a bit of sugar. https://github.com/finbarr/yolobox `yolobox run claude` launches Claude Code with --dangerously-skip-permissions mode inside of a container with a good set of default tools included.", "context": "", "use_case": "Sandboxed Claude Code runs", "switched_from": "", "story": "Claude Cowork Runs Linux VM via Apple Virtualization Framework"}, {"id": 745580433, "item_id": 46598777, "url": "https://news.ycombinator.com/item?id=46598777", "by": "Gerharddc", "date": "2026-01-13", "version": null, "stance": "recommend", "quote": "Very cool!", "excerpt": "Very cool! I've recently built something similar at https://github.com/Gerharddc/litterbox (https://litterbox.work/). Litterbox only works on Linux as it heavily relies on Podman, but it does have a few other benefits for my use-case: - Most importantly, it exposes a Wayland socket so that I can run my entire dev environment (i.e. editor etc.) inside the container. This gives additional protection against exploits in", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Yolobox \u2013 Run AI coding agents with full sudo without nuking home dir"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 745633616, "item_id": 46602101, "url": "https://news.ycombinator.com/item?id=46602101", "by": "catlifeonmars", "date": "2026-01-13", "version": null, "stance": "warn", "quote": "just in framing it as a security feature", "excerpt": "From \u201cHow it works\u201d in the readme: > yolobox uses container isolation (Docker or Podman) as its security boundary\u2026 I have no issue with running agents in containers FWIW, just in framing it as a security feature. > what vectors are you expecting the LLM to use to break out? You can just search for \u201cDocker CVE\u201d. Here is one later last year, just for an example: https://nvd.nist.gov/vuln/detail/CVE-2025-9074", "context": "", "use_case": "sandboxed AI coding agents", "switched_from": "", "story": "Show HN: Yolobox \u2013 Run AI coding agents with full sudo without nuking home dir"}]}], "who": [], "tags": [], "use_cases": ["sandboxing coding agents", "agent sandboxing", "sandboxed dev environment", "sandboxed claude code runs", "sandboxed ai coding agents", "sandboxing ai coding agents"], "compared": [{"slug": "docker", "name": "Docker", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [{"id": 756857552, "item_id": 47303597, "url": "https://news.ycombinator.com/item?id=47303597", "by": "Finbarr", "date": "2026-03-08", "version": null, "stance": "recommend", "quote": "I built yolobox to solve this using docker/apple containers", "excerpt": "Awesome to see a bash-only method of solving this problem. Also like that it alerts on attempts to read restricted stuff. I built yolobox to solve this using docker/apple containers: https://github.com/finbarr/yolobox", "context": "", "use_case": "Agent sandboxing with containers", "switched_from": "", "story": "Agent Safehouse \u2013 macOS-native sandboxing for local agents"}, {"id": 745499920, "item_id": 46593745, "url": "https://news.ycombinator.com/item?id=46593745", "by": "Finbarr", "date": "2026-01-12", "version": null, "stance": "neutral", "quote": "We expanded the README", "excerpt": "Good feedback, thank you. We expanded the README: https://github.com/finbarr/yolobox/commit/ad776012f82f9d67e1dea3ada30b9fba449f0f4a", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Yolobox \u2013 Run AI coding agents with full sudo without nuking home dir"}], "threads": [{"url": "https://news.ycombinator.com/item?id=46592344", "title": "Show HN: Yolobox \u2013 Run AI coding agents with full sudo without nuking home dir", "mentions": 4}, {"url": "https://news.ycombinator.com/item?id=48892859", "title": "Show HN: Clawk \u2013 Give coding agents a disposable Linux VM, not your laptop", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47303111", "title": "Ask HN: What Are You Working On? (March 2026)", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47301085", "title": "Agent Safehouse \u2013 macOS-native sandboxing for local agents", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46743908", "title": "Claude Code's new hidden feature: Swarms", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46690907", "title": "Running Claude Code dangerously (safely)", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {"recommend": 4, "warn": 1}, "2026-02": {}, "2026-03": {"recommend": 1}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {"compare": 1}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 782332864, "item_id": 48895804, "url": "https://news.ycombinator.com/item?id=48895804", "by": "asah", "date": "2026-07-13", "version": null, "stance": "compare", "quote": "WDYT of yolobox ?", "excerpt": "WDYT of yolobox ? https://github.com/finbarr/yolobox", "context": "", "use_case": "sandboxing coding agents", "switched_from": "", "story": "Show HN: Clawk \u2013 Give coding agents a disposable Linux VM, not your laptop"}, {"id": 759388320, "item_id": 47461770, "url": "https://news.ycombinator.com/item?id=47461770", "by": "nateb2022", "date": "2026-03-20", "version": null, "stance": "recommend", "quote": "See also: https://github.com/finbarr/yolobox", "excerpt": "See also: https://github.com/finbarr/yolobox \"Let your AI go full send. Your home directory stays home.\"", "context": "", "use_case": "", "switched_from": "", "story": "Ask HN: What Are You Working On? (March 2026)"}, {"id": 748003680, "item_id": 46750230, "url": "https://news.ycombinator.com/item?id=46750230", "by": "ahstilde", "date": "2026-01-24", "version": null, "stance": "recommend", "quote": "https://github.com/finbarr/yolobox/", "excerpt": "https://github.com/finbarr/yolobox/", "context": "", "use_case": "Agent sandboxing", "switched_from": "", "story": "Claude Code's new hidden feature: Swarms"}, {"id": 747167904, "item_id": 46697994, "url": "https://news.ycombinator.com/item?id=46697994", "by": "Finbarr", "date": "2026-01-20", "version": null, "stance": "recommend", "quote": "quite a few improvements shipped in the last week", "excerpt": "Running in a VM certainly has some benefits (particularly the ability to run docker inside of it easily). Last week I shared https://github.com/finbarr/yolobox which takes the docker approach (nearly 400 github stars already and quite a few improvements shipped in the last week).", "context": "", "use_case": "Sandboxed dev environment", "switched_from": "", "story": "Running Claude Code dangerously (safely)"}, {"id": 746292128, "item_id": 46643258, "url": "https://news.ycombinator.com/item?id=46643258", "by": "nullishdomain", "date": "2026-01-15", "version": null, "stance": "recommend", "quote": "yolobox is the easiest I have found.", "excerpt": "yolobox is the easiest I have found. Basically a batteries included image with a bit of sugar. https://github.com/finbarr/yolobox `yolobox run claude` launches Claude Code with --dangerously-skip-permissions mode inside of a container with a good set of default tools included.", "context": "", "use_case": "Sandboxed Claude Code runs", "switched_from": "", "story": "Claude Cowork Runs Linux VM via Apple Virtualization Framework"}, {"id": 745633616, "item_id": 46602101, "url": "https://news.ycombinator.com/item?id=46602101", "by": "catlifeonmars", "date": "2026-01-13", "version": null, "stance": "warn", "quote": "just in framing it as a security feature", "excerpt": "From \u201cHow it works\u201d in the readme: > yolobox uses container isolation (Docker or Podman) as its security boundary\u2026 I have no issue with running agents in containers FWIW, just in framing it as a security feature. > what vectors are you expecting the LLM to use to break out? You can just search for \u201cDocker CVE\u201d. Here is one later last year, just for an example: https://nvd.nist.gov/vuln/detail/CVE-2025-9074", "context": "", "use_case": "sandboxed AI coding agents", "switched_from": "", "story": "Show HN: Yolobox \u2013 Run AI coding agents with full sudo without nuking home dir"}, {"id": 745580433, "item_id": 46598777, "url": "https://news.ycombinator.com/item?id=46598777", "by": "Gerharddc", "date": "2026-01-13", "version": null, "stance": "recommend", "quote": "Very cool!", "excerpt": "Very cool! I've recently built something similar at https://github.com/Gerharddc/litterbox (https://litterbox.work/). Litterbox only works on Linux as it heavily relies on Podman, but it does have a few other benefits for my use-case: - Most importantly, it exposes a Wayland socket so that I can run my entire dev environment (i.e. editor etc.) inside the container. This gives additional protection against exploits in", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Yolobox \u2013 Run AI coding agents with full sudo without nuking home dir"}, {"id": 745489697, "item_id": 46593106, "url": "https://news.ycombinator.com/item?id=46593106", "by": "jcjmcclean", "date": "2026-01-12", "version": null, "stance": "recommend", "quote": "I'll give this a try tomorrow, should be fun.", "excerpt": "I was talking to ChatGPT about the best way to achieve this a few days ago. Thanks for getting something running and sharing it! I'll give this a try tomorrow, should be fun.", "context": "", "use_case": "sandboxing AI coding agents", "switched_from": "", "story": "Show HN: Yolobox \u2013 Run AI coding agents with full sudo without nuking home dir"}]}