code-on-incus

What it does

Each AI agent gets a full system container — root, systemd, Docker, cron, install whatever it likes — so it works like it would on a real server without touching yours, and file ownership stays sane. Credentials stay on the host unless you deliberately mount them, and there's active monitoring for reverse shells, credential scanning and exfiltration. Linux and Incus required. The isolation protects your machine, not whatever you hand the agent access to. MIT.

Summary based on the project's own description. The Japanese page has a fuller beginner guide: setup difficulty, what to prepare, and a step-by-step start.

Screenshots & visuals

Before you start

• Setup difficultySome setup needed
• Command lineRequired
• API keyNot required
• Sends data onlineYes

Judged automatically from the project's own metadata. Always confirm on the official page.

code-on-incus FAQ

Is code-on-incus free?

Yes. It runs on your own machine, so there is no usage-based cost either.

Do I need to install anything or write code to use code-on-incus?

It needs the command line. If you are not comfortable typing commands, expect to get stuck during setup.

Does code-on-incus work on a phone?

No. It needs a computer.

Can I use code-on-incus commercially?

The licence is MIT, which permits commercial use. Conditions such as keeping the copyright notice still apply, so read the licence text before shipping it inside something.

How it compares

The conditions that decide whether you can actually use it, side by side.

"Sends data out" means your input is uploaded to someone's server. Pick "No" when the material cannot leave your organisation.

Other ai agents tools