Show HN: ClodPod – Run Claude Code safely in a macOS VM
github.com
ClodPod maps any number of your project directories into the virtual machine so Claude Code can work on your code while remaining isolated from your host computer.
ClodPod virtual machines include Xcode and common development tools, and it's easy to extend to add your own development tools and configuration files.
# Raison d'être
This project exists because I was foolishly trying to find a way to insulate my computer from destruction by rogue AI agents when running Claude Code with `--dangerously-skip-permissions` (to avoid frequent "do you want to proceed?" dialogs), when perhaps I should have simply learned to accept their infrequent rages.
I experimented with running Claude Code inside docker and podman containers (i.e. in Linux), but as my ultimate goal is to build apps using Xcode, I wanted to stick with OSX.
I considered using xtool (open source Xcode-on-Linux), but instead went down a different rabbit hole and tried providing the containers with limited access from the guest OS to my host computer using GNU Rush (Remote User SHell). This "worked" but was limiting.
I tried limiting Claude Code's filesystem access using exec-sandbox, and it works in a "proof-of-concept" sort of way, but the attack surface area was too large.
Eventually I settled on running the whole thing inside a virtual machine, which is probably where I should have started.
# Key features
- Builds a virtual machine and launches Claude Code with access to your projects
- Enables mapping multiple projects in the same virtual machine simultaneously
- Open multiple Claude Code sessions and shell prompts, or use the GUI
- Headless mode for CI/CD workflows with `--no-graphics`
- Includes Xcode and common development tools; you can add your own tools too
- Fast rebuild and relaunch using a two-layer caching system
- Open source: Apache 2.0 License