mensfeld/code-on-incus

<p align="center"> <img src="misc/logo.png" alt="Code on Incus Logo" width="350"> </p>

code-on-incus (coi)

Isolated machines for AI coding agents - with active defense.

COI gives each AI agent its own machine - a full system container with root access, systemd, Docker, and the ability to install anything. Agents work like they would on a real server: run services, manage packages, use cron - without touching your actual system. Files stay correctly owned, no permission hacks needed.

Your credentials stay on the host. SSH keys, environment variables, and Git tokens are never exposed to AI tools unless you explicitly mount them. If something goes wrong, COI catches it - reverse shells, credential scanning, data exfiltration - and pauses or kills the container automatically. No manual intervention needed.

Built by developers, for developers who run AI agents and want to know what those agents are doing. Not a product, not a startup - a tool that does the job.

Who this is for

• You run AI coding agents and want them to have full machine access - root, Docker, package managers, services - without risking your host
• You want to know when an agent does something suspicious, not find out after the fact
• You run multiple agents in parallel and need them isolated from each other
• You want persistent dev environments that survive restarts and reboots, not throwaway containers that lose your setup every time
• You care about your credentials not ending up inside an agent-c