AI Sandbox Manager: LXC-Based Sandbox for Codex with GPU Passthrough and Computer Use on Headless Linux
A developer frustrated with the default Codex sandbox built ai-sandbox-manager, an LXC-based sandbox framework that gives AI agents (Codex) full sudo access and GPU passthrough while keeping them isolated from the host OS. The project is a proof of concept, tested on the DGX Spark (NVIDIA's unified architecture where GPU passthrough to VMs is problematic), but with minimal modifications it should work on macOS or Windows WSL.
Key Features
- LXC containers instead of full VMs – multiple instances can share a GPU, enabling parallel agent runs (e.g., training tiny models for different features autonomously).
- GPU passthrough works even on DGX Spark, where traditional VM GPU passthrough is not possible.
- Persistent environment – set up once (install software, log into accounts, copy .env files), save as a template, then spin up copies on demand.
- Computer use on headless Linux via CUA (which normally lacks Linux desktop support).
- Sudo access for the agent – install packages, run commands, test Docker containers – without risking the host.
- Git push prevention hook – prevents the agent from force-pushing or rewriting history (currently blocks all pushes; planned refinement to only block force-pushes).
- Multiple parallel browser/development sessions – each agent gets its own desktop, viewable via a desktop interface.
How It Works
The core idea: set up a VM-like environment as an LXC container, configure it with everything the agent needs, save the image as a template, then clone it for each agent session. This approach avoids the resource sharing limitations of true VMs while still providing strong isolation.
Quick Start
Clone the repo from GitHub and follow the setup instructions in the README. The framework is designed for headless Linux, particularly the DGX Spark, but is adaptable to other host systems.
Who It's For
Developers running Codex (or similar AI coding agents) who want a safe, repeatable sandbox with GPU access and full system control for the agent, without risking the host OS.
📖 Read the full source: r/LocalLLaMA
👀 See Also
Multi-Agent Memory: Open Source Shared Memory System for AI Agents
Multi-Agent Memory is an open source project that provides a shared memory system for AI agents across different machines, tools, and frameworks. It supports four distinct memory types with specific behaviors and includes features like credential scrubbing, agent isolation, and LLM consolidation.
Local AI Development with Qwen3.6-27B and Opencode on a 5090
A Reddit user shares their experience switching from cloud AI coding tools (Claude Code, Cursor) to a local setup using Opencode + llama-server + Qwen3.6-27B at 128K context on a single RTX 5090, citing freedom from usage limits and account risks.
Introducing cltree: A File Tree TUI for Claude Code
cltree is a split-pane TUI that displays your project file tree in real-time alongside Claude Code, showing the current working directory, hiding noise, and allowing all keystrokes to pass through.
ClankerRank: A Benchmark for AI-Assisted Coding Skills with Claude Haiku
A developer built ClankerRank to measure proficiency in AI-assisted coding using Claude's Haiku 4.5 model. The platform presents identical bugs to users, scores outputs with hidden test suites, and has revealed clear skill gaps among hundreds of participants.