Skip to content
AI News HubLIVE
More
Summary only

code-on-incus: Give each AI agent its own isolated machine with root

code-on-incus (COI) is an open-source tool that leverages Incus system containers to provide AI coding agents with isolated machine environments featuring full root access, systemd, Docker, and package management. It defaults to protecting host credentials, employs kernel-level nftables monitoring for real-time threat detection and automated response, and supports popular AI coding assistants like Claude Code and opencode.

SourceHacker News AIAuthor: Tomte
code-on-incus: Give each AI agent its own isolated machine with root
Report an error

The correction channel is not available yet. You can copy the article reference below for later.

Correction instructions

Summary only

Under the source content permission, this page provides an editorial summary, key points, and a link to the original article.

Key points and analysis

Article intelligence

InvestorsIntermediate

Key points

  • Provides full system containers with root, Docker, and service management for each AI agent
  • Host SSH keys, environment variables, and Git tokens are never exposed unless explicitly mounted
  • Kernel-level nftables monitoring detects reverse shells, data exfiltration, and other threats, auto-pausing or killing containers
  • Supports parallel multi-slot sessions, session resume, persistent containers, and integration with multiple AI coding tools

Highlights and analysis are generated automatically and may contain errors. Check the original source.

More recent stories on this topic · Agents