devvm.dev: Isolated VM for Secure Project Development
Original title: Devvm.dev: One VM for every project
devvm creates per-project VMs to sandbox toolchains, agents, and code against prompt injections, supply chain attacks, and rogue agents.
devvm.dev is an open-source tool for running isolated virtual machines for each development project. It mounts the project folder read-write at ~/web while excluding sensitive directories like ~/.ssh, ~/.aws, and ~/Documents. Network access uses a default proxy allowlist. It supports project toolchains like node and Python plus coding agents like Claude, with git hooks locked for protection.
- Isolated VM per project folder
- Project mounted read-write, home dirs excluded
- Default network via proxy allowlist
- Supports node, Python, Claude agent
- Locks .git hooks for added protection
Impact: None; limits blast radius of dev attacks
- 1.Customize network allowlist and tier
- 2.Use --clone for full repo isolation
From the original article
6 min read at devvm.dev
An isolated sandbox with your project’s toolchain, ready for you or a coding agent to start coding. On your machine, you run devvm in ~/web, and ~/. ssh, ~/.
By luispa · devvm.dev
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.