coop README

The project's README from github.com/trailofbits/coop. As one markdown file: README.md.

coop

Isolated VM environments for running Claude Code and Codex.

Pronunciation: "coop" (/kuːp/) — one syllable, rhymes with "loop", like the thing you keep chickens in. Not "co-op".

coop is a Rust CLI that manages disposable virtual machines where Claude Code and Codex have full tool access: Docker, git, compilers, package managers, all without risk to your host machine. Each VM is isolated, reproducible, and cheap to create and destroy.

Setup

Install the latest release:

curl -fsSL https://raw.githubusercontent.com/trailofbits/coop/main/install.sh | bash

Or build from source (requires Rust and CMake):

cargo build --workspace --release
cp target/release/coop target/release/coop-proxy /usr/local/bin/

Then build the VM template image:

coop setup

On Linux, coop setup also installs Firecracker and fetches a guest kernel. On macOS, install Lima first (brew install lima) — setup fails without it. coop is tested on macOS arm64 (Apple Silicon) and Linux x86_64; Linux arm64 builds are available but untested. Each backend has its own host requirements — see Prerequisites.

Keep coop updated:

coop update

See coop update and the updates config section.

Usage

Start an instance for the current project and launch an agent CLI:

cd ~/code/my-project
coop up
coop claude
# or
coop codex

Documentation

coop (trailofbits/coop)

sandboxing
Searching Database…

785 ·GitHub
What is this?coop is a Rust CLI that spins up disposable, isolated virtual machines so Claude Code and Codex can run with full tool access (Docker, git, compilers, package managers) without putting your host machine at risk.
Is this a GUI app or a command-line tool?It's a command-line tool, not a GUI app. coop manages microVMs under the hood (Firecracker/KVM on Linux, Lima on macOS) and you interact with it entirely through the terminal.
How do I get it running?Install the latest release binary (or build from source if you have Rust and CMake), then run coop setup to build the VM template image before starting an instance for your project.
Do I need anything installed before I run setup?On macOS you must install Lima first via brew install lima, or coop setup will fail; on Linux, setup installs Firecracker and fetches a guest kernel automatically.
Does coop work the same on every machine?Not fully — it's officially tested on macOS arm64 (Apple Silicon) and Linux x86_64. Linux arm64 builds exist but are untested, and each backend has its own host prerequisites.
Which coding agents does coop support?Claude Code and Codex are both supported, each with its own integration documentation.
Why use a VM instead of just a container?A VM gives the agent full tool access including Docker, compilers and package managers while keeping it fully isolated from the host kernel, which a shared-kernel container can't guarantee.
How is the name 'coop' pronounced?It's pronounced like the thing you keep chickens in — one syllable, rhymes with 'loop' — not 'co-op'.
Can agents run Docker inside the sandboxed VM?Yes, each coop VM ships with full tool access including Docker, git, compilers and package managers.
What are similar projects?nvx, brig, arcbox, smolvm, CubeSandbox, agentbox, quicksand, ProxmoxVE
Size
2.2 MB
Stars
785
Age
6mo
Commits · 90 Days