Clawk

Clawk gives coding agents a disposable Linux VM for installing packages, running builds and starting services locally. It's for developers who want an agent to control its working environment while keeping unshared host files and the host keychain outside the guest.

• A separate Linux environment: Each guest has its own kernel and root access, with an OCI image supplying the project's toolchain without a host Docker daemon.
• Persistent code and conversations: Repositories and agent state stay on the host and survive VM deletion; supported runners include Claude Code, Codex, pi and OpenCode.
• Parallel ticket work: Separate sandboxes can run together, and multi-repository tickets get individual Git worktrees with coordinated pull requests.
• Session snapshots: Snapshots preserve guest memory and disk so suspended work can resume, including running services.
• Restricted network access: An allow-list controls outbound connections outside the guest, while SSH-agent forwarding supports Git operations without copying private keys into the VM.

Clawk is open source under Apache 2.0. Its sandbox runs locally, but that doesn't keep everything an agent reads local: allowed destinations can receive code or supplied credentials. GitHub is allowed by default, and a forwarded SSH agent can authorize pushes. Destroying a VM preserves host-mounted code and conversations, but discards its disposable disk; restoring a snapshot also restores the saved disk and memory.