devvm gives each project folder a VM of its own, so you or a coding agent can work in it without reaching the rest of your machine. Run devvm in a project folder and you're in a shell in its VM, with the toolchains your project's files call for, at the same path as on your machine.
- Isolated: each VM mounts only its project folder, and its
.gitis locked against changes from the VM. - Network tiers: new VMs reach only the hosts you allow, and your secrets, such as your GitHub token and your agents' logins, stay on your machine.
- Coding agents: Claude Code, Codex and opencode run in the VM with your settings, so you never install them on your machine.
- Ready in seconds: every VM is a copy of a base image, and toolchains are shared read-only between VMs.
brew install devvmhq/tap/devvm
cd ~/some-project
devvm- devvm: the source, issues and releases
- devvm.dev: the docs, from installing and your first VM to staying safe
- homebrew-tap:
brew install devvmhq/tap/devvm - Contributing and reporting a vulnerability