Would it be possible to have sandboxed VMs ? (for safe agentic coding)

[fad1]

Currently VMs allow accessing the host's file system throw a non-disablable mounted shared folder. It would be great to be able to have option to set only one single shared folder between host and VM for agentic coding. (Currently using a vmware VM, which is heavy on ressources)

Thanks !

[mccun934]

came looking for this as well. I want to be able to kick off Claude Code in a orb machine but not have any access to my local MacOS filesystem. Couldn't find any way to create machines without full read access to /

[fad1]

Yes, I really dove into this, and my conclusion is that if what you do on your Mac matters, the only way to be 100% safe is to use a VM for AI coding.

[mccun934]

just gave Canonical's Multipass a try, worked great. Have a sandbox VM + CC cruising along on a project

[fad1]

Interesting, I'll try it. Thanks.