The idea
Agent Airlock is a rootless Podman container for AI coding agents and their tools. The container can see only the host's ~/git folder and its own home volume. It can reach the host's local language model server, and it can run VS Code itself on the host's Wayland display. It runs on Linux, inside WSL2 on Windows, and on macOS with podman machine.
What it does
Claude Code and Codex run inside the container as command-line tools and as VS Code extensions, with their MCP servers. Agents can install tools without changing the host system. Test servers inside the container are available only on the host's localhost, so you can open them in the host's browser. One launcher builds the image, starts the container, opens the editor, and runs the sign-in steps.
Why I built it
The agents get a full development environment, but they can't reach the rest of the computer. I built this website inside it.