July 13, 2026
Bot Jail Goes Luxury
Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
Coders are obsessed with this ‘burner laptop’ idea — but the Docker crowd is not impressed
TLDR: Clawk gives coding bots a disposable computer instead of access to your real one, aiming to stop accidents and keep private stuff safe. Commenters split fast between “finally, useful” and “isn’t this just Docker again?”, with a side of joking fear about AI escape acts.
A new Show HN project called Clawk is pitching a very relatable fantasy: let the coding bot loose somewhere far, far away from your actual computer. Instead of giving an AI helper access to your personal machine, Clawk spins up a throwaway Linux computer just for the bot, lets it install stuff, run code, and even push to GitHub, while keeping your files and saved passwords out of reach. If the bot trashes the place? Delete it and start over. Very “send the raccoon into a rental, not your house.”
And the comments instantly turned into a mini tech soap opera. The biggest skeptical shout came fast: “why not just a docker container” — basically, why invent a new safe room when people already have one? That kicked off the familiar security panic, with one commenter joking that everyone feels brave until the agent realizes it’s trapped and breaks out of jail. Yes, the vibe was part product review, part sci-fi prison break.
But it wasn’t all doom-posting. One fan flat-out said they loved it and planned to use it, while another chimed in with the classic internet move: cool project, but my project does this too. There was even a rival shoutout to Fly.io’s Sprites, which some commenters said already does this beautifully. So the mood? Equal parts hype, suspicion, and “haven’t we seen this before?” In other words: the internet’s favorite genre.
Key Points
- •Clawk runs coding agents such as Claude Code or Codex inside a disposable Linux VM rather than directly on the host machine.
- •The article says the VM isolates the host by mounting only selected project data, blocking non-allow-listed outbound connections, and keeping host SSH keys out of the guest.
- •Git operations such as `git push` can still work through forwarded `ssh-agent`, although the article warns that any data the agent can read could be published to allowed destinations.
- •If a VM is damaged, users can destroy and recreate it while keeping the repository and conversation history on the host and resuming the session later.
- •Clawk is described as pre-1.0 software that supports one-command startup, OCI-image-based root filesystems, multiple sandboxes, and automatic suspension of idle VMs.