afshinm/zerobox
View on GitHub ↗ ★ 728 Rust
Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.
6 mentions on Hacker News by 2 people: 1 story, 5 comments · first 2026-03-30 · latest 2026-06-07
20082026
-
…https://github.com/always-further/nono smolvm: https://github.com/smol-machines/smolvm zerobox https://github.com/afshinm/zerobox and matchlock https://github.com/jingkaihe/matchlock They all have pros and cons. Pick the one that suits you…
comment by mathstuf · 2026-06-07 · in Anthropic, please ship an official Claude Desktop for Linux -
That's exactly how I tried to address that problem with https://github.com/afshinm/zerobox -- you control what network access (e.g. `--deny-net *.amazonaws.com`) your agent has and you also get snapshotting out of the box. That said, using…
comment by afshinmeh · 2026-05-06 · in Show HN: Tilde.run – Agent sandbox with a transactional, versioned filesystem -
…for the same purpose [2] [1] https://openai.com/index/the-next-evolution-of-the-agents-sd... [2] https://github.com/afshinm/zerobox
comment by afshinmeh · 2026-05-03 · in The agent harness belongs outside the sandbox -
I'm adding snapshotting as well https://github.com/afshinm/zerobox/pull/21 Then you can run: ``` zerobox --snapshot -- sh -c 'echo "abc" > a' ``` and also `zerobox snapshot list/diff/restore`
comment by afshinmeh · 2026-04-03 · in Show HN: Zerobox – Sandbox any command with file, network, credential controls -
…(Apple M5) and on average I'm seeing 10ms overhead. I added a benchmark section to the repo as well https://github.com/afshinm/zerobox?tab=readme-ov-file#perfor... Also, I'm literally wrapping Claude with zerobox now! No latency issues at…
comment by afshinmeh · 2026-04-01 · in Show HN: Zerobox – Sandbox any command with file, network, credential controls