Claude Cowork Runs Linux VM via Apple Virtualization Framework

Re:Claude Cowork Runs Linux VM via Apple Virtualization Fram... by realityfactchex on Thursday January 15, 2026 @02:45PM (#46638121)

Isn't the easy way just a development VM? As in:

Install your OS of choice in a virtual machine, e.g. even hosted on your main machine.

Install the AI coding tool in the virtual machine.

Set up a shared folder between host+guest OS.

Only let the VM access files that are "safe" for it to access. Its own repo, in its own folder.

If you want to give the AI tool and VM internet access and tool access, just limit what it can reach to things it is allowed to go haywire on. All the internet and all OS tools are ok. But don't let this AI do "real things" on "real platforms" -- limit the scope of what it "works on" to development assets.

When deploying to staging or prod, copy/sync files out of the shared folder that the AI develops on, and run them. But check them first for subterfuge.

So, don't give the AI access to "prod" configs/files/services/secrets, or general personal/work data, etc. Manage those in other "folders" entirely, not accessible by the development VM at all.

Is that close?

[ Parent | on HN ]

Re:Claude Cowork Runs Linux VM via Apple Virtualization Fram... by c0balt on Thursday January 15, 2026 @03:16PM (#46638563)

Automating this setup is also somewhat easily possible with, e. G., Lima[0] or HashiCorp vagrant[1].

[0]: https://lima-vm.io/

[1]: https://developer.hashicorp.com/vagrant

[ Parent | on HN ]

Re:Claude Cowork Runs Linux VM via Apple Virtualization Fram... by w0m on Thursday January 15, 2026 @03:23PM (#46638685)

I'd just do it over a Docker mount (or equivalent) to keep it a bit more lightweight. Can keep the LLM running local; and teach it how to test/debug via instruction files.

[ Parent | on HN ]

Re:Claude Cowork Runs Linux VM via Apple Virtualization Fram... by mkagenius on Thursday January 15, 2026 @08:52PM (#46642067)

Did somewhat exactly that for apple container based sandbox - Coderunner[1]. You can use it to safely execute ai generated code via an MCP at http://coderunner.local:8222

A fun fact about apple containers[2], it's more isolated than docker containers as in it doesn't share the VM across all containers.

1. https://github.com/instavm/coderunner

2. https://github.com/apple/container

[ Parent | on HN ]

Re:Claude Cowork Runs Linux VM via Apple Virtualization Fram... by netcoyote on Thursday January 15, 2026 @10:47PM (#46642775)

Here are my open-source (MIT) solutions for Mac development:

SandVault [0]: Run AI agents isolated in a sandboxed macOS user account

ClodPod [1]: Run AI agents isolated inside an OSX virtual machine

0: https://github.com/webcoyote/sandvault

1: https://github.com/webcoyote/clodpod

[ Parent | on HN ]

Re:Claude Cowork Runs Linux VM via Apple Virtualization Fram... by WA on Friday January 16, 2026 @02:54AM (#46644128)

Thanks for sharing. Which one do you use for what?

[ Parent | on HN ]

Re:Claude Cowork Runs Linux VM via Apple Virtualization Fram... by cyberpunk on Friday January 16, 2026 @02:59PM (#46651383)

you can also just type “docker sandbox run claude” if you have docker desktop installed (or something along those lines)

edit: it only mounts $PWD

[ Parent | on HN ]