AI Sandbox Manager: LXC-Based Sandbox for Codex with GPU Passthrough and Computer Use on Headless Linux
A developer frustrated with the default Codex sandbox built ai-sandbox-manager, an LXC-based sandbox framework that gives AI agents (Codex) full sudo access and GPU passthrough while keeping them isolated from the host OS. The project is a proof of concept, tested on the DGX Spark (NVIDIA's unified architecture where GPU passthrough to VMs is problematic), but with minimal modifications it should work on macOS or Windows WSL.
Key Features
- LXC containers instead of full VMs – multiple instances can share a GPU, enabling parallel agent runs (e.g., training tiny models for different features autonomously).
- GPU passthrough works even on DGX Spark, where traditional VM GPU passthrough is not possible.
- Persistent environment – set up once (install software, log into accounts, copy .env files), save as a template, then spin up copies on demand.
- Computer use on headless Linux via CUA (which normally lacks Linux desktop support).
- Sudo access for the agent – install packages, run commands, test Docker containers – without risking the host.
- Git push prevention hook – prevents the agent from force-pushing or rewriting history (currently blocks all pushes; planned refinement to only block force-pushes).
- Multiple parallel browser/development sessions – each agent gets its own desktop, viewable via a desktop interface.
How It Works
The core idea: set up a VM-like environment as an LXC container, configure it with everything the agent needs, save the image as a template, then clone it for each agent session. This approach avoids the resource sharing limitations of true VMs while still providing strong isolation.
Quick Start
Clone the repo from GitHub and follow the setup instructions in the README. The framework is designed for headless Linux, particularly the DGX Spark, but is adaptable to other host systems.
Who It's For
Developers running Codex (or similar AI coding agents) who want a safe, repeatable sandbox with GPU access and full system control for the agent, without risking the host OS.
📖 Read the full source: r/LocalLLaMA
👀 See Also
OpenEvol: Offline Self-Improvement Pipeline for LLMs Using Conversation History
OpenEvol v0.1.1 is an offline pipeline that automatically mines AI conversation history to create fine-tuning datasets without manual labeling. It runs on CPU initially and supports five teacher backends including OpenAI-compatible APIs and HuggingFace Transformers.
OpenClaw Agent Gains Phone Call Capability Through Custom Skill
A developer created a custom skill for self-hosted OpenClaw agents that enables phone call functionality, allowing the agent to initiate calls based on triggers like build completions or server outages. The implementation provides voice interaction with full chat capabilities including web searches and alert setup.
Feynman: Open Source Research Agent with Paper-Codebase Audit Tool
Feynman is an open source research agent CLI that dispatches four subagents in parallel to answer research questions and includes a unique audit tool that compares paper claims against actual codebases. It features one-command installation, MIT license, and runs on pi for agent runtime with alphaxiv for paper search.
QCAI App Provides Mobile Control Center for OpenClaw Ecosystem
Academic research team releases QCAI app for iOS and Android, built with AI-assisted development, offering dashboard monitoring, gateway chat, and secure VPN access to OpenClaw tools.