Devvm runs coding agents in local VMs with project-level isolation

CJ Reynolds' open-source tool gives each project folder its own Lima VM for Claude Code, Codex or OpenCode, with allowlisted networking by default. By default, the project folder remains writable from the VM; the open network tier can also reach services on the host and local network.

By · Published

Primary source: Hacker News

Why it matters

Coding agents now execute code, install dependencies and use credentials on a developer's real machine. Devvm puts each project and agent in a local VM with allowlisted networking by default, while leaving the mounted project folder writable and reserving host and LAN reach for the open tier.

A clear acrylic case holding a tan file folder and gray device sits on a workbench, with keys hanging on the wall and an “RW” logo in the background.

In a Syntax video, CJ Reynolds (@CodingGarden) shows what the description calls "his new tool" devvm, built to let a developer create a VM for any project folder. A speaker profile for CJ Reynolds identifies him as "Senior Creator @ Syntax / Sentry," and his Coding Garden page on Syntax gives the title as "Senior Creator (Video)." He is also known as the host of Coding Garden.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.