lynaghk/vibe
Easy Linux virtual machine on MacOS to sandbox LLM agents.
What it solves
Vibe provides a secure, zero-configuration sandbox for running LLM agents on ARM-based Macs. It prevents agents from accidentally or maliciously modifying the host system or accessing files outside of explicitly shared directories, allowing users to run agents with high-privilege flags (like --yolo) without risking their actual machine.
How it works
It uses a lightweight Linux virtual machine (Debian) instead of containers to provide a stronger security boundary. Vibe manages the lifecycle of these VMs, allowing users to quickly spin up a guest environment that shares specific host folders via VirtioFS. It includes a custom user-mode network stack to ensure reliable connectivity regardless of host network changes. Users can create custom VM templates by running provisioning scripts to pre-install tools and configurations.
Who it’s for
Developers using LLM agents (such as Claude Code or Codex) on M-series Macs who want a safe, isolated environment to execute agent-generated commands.
Highlights
- Fast Boot: Boots in approximately 10 seconds on M1 hardware.
- Security-First: Uses virtualization rather than containers to prevent malicious escapes.
- Customizable Templates: Supports provisioning custom images with built-in or external scripts.
- Zero-Config Networking: Bundles a networking helper to avoid common MacOS virtualization network instabilities.
- Minimalist Implementation: Written in ~2000 lines of Rust with very few dependencies.