A single bash script that spins up an ephemeral QEMU/KVM virtual machine pre-loaded with Claude Code and Codex — a sandboxed environment for running AI coding agents safely.

Your current directory is mounted read-write into the VM at /workspace, so agents can edit your code without risking your host system.

Inspired by https://github.com/lynaghk/vibe and its earlier bash version.

• Linux with KVM support
• qemu-system-x86_64, qemu-img, virtiofsd, genisoimage, curl, ssh

On Debian/Ubuntu:

sudo apt install qemu-system-x86 qemu-utils virtiofsd genisoimage curl openssh-client iproute2

On Arch Linux:

sudo pacman -S qemu-full virtiofsd cdrtools curl openssh iproute2

On NixOS (or any system with Nix + flakes), a flake.nix is provided that wraps the script with all of its runtime dependencies. You also need KVM enabled on the host (virtualisation.libvirtd.enable = true; or at minimum boot.kernelModules = [ "kvm-intel" ];/"kvm-amd", plus your user in the kvm group).

Run it directly without installing:

nix run github:angelakis/vibetron
# or from a local checkout:
nix run .

Install into your profile:

nix profile install github:angelakis/vibetron
vibetron

Or drop into a dev shell that has vibetron on PATH:

nix develop

./vibetron              # 4G RAM, 4 CPUs, 10G disk
./vibetron --ram 8G --cpus 8
./vibetron --update-baked   # rebuild the provisioned image

On first run, Vibetron downloads a Debian 13 cloud image, bakes in dev tools (build-essential, node, ripgrep, Claude Code, Codex), and caches the result for fast subsequent boots.

Two convenience aliases are provided:

claude-yolo   # claude --dangerously-skip-permissions
codex-yolo    # codex --dangerously-bypass-approvals-and-sandbox

Host directories ~/.claude and ~/.codex are mounted in, so your API keys and config carry over automatically.

If your project has a .git directory, Vibetron bind-mounts /tmp over /workspace/.git inside the VM. This keeps agents from reading or writing your host Git metadata while still allowing normal file edits in /workspace.