AI编码
全球精选 ·
@aggrrrh
Coop：用于运行 Claude Code 和 Codex 的隔离 VM 环境
Trail of Bits 推出的 Rust CLI 工具，可创建一次性虚拟机，让 Claude Code 和 Codex 在隔离环境中安全访问 Docker、编译器、包管理器等，保护宿主机安全。支持 macOS 和 Linux，提供快速安装和配置。
AI推荐理由 Trail of Bits 发布的开源工具，提供隔离 VM 环境运行 Claude Code 和 Codex，增强安全性。信息具体，有安装和使用说明，但未提供实际效果验证。
78
评论 12
Star 638
社区积分 54
榜单名次 22
正文
# coop
Isolated VM environments for running Claude Code and Codex.
> **Pronunciation:** "coop" (/kuːp/) — one syllable, rhymes with "loop", like the thing you keep chickens in. Not "co-op".
coop is a Rust CLI that manages disposable virtual machines where Claude Code and Codex have full tool access: Docker, git, compilers, package managers, all without risk to your host machine. Each VM is isolated, reproducible, and cheap to create and destroy.
## Setup
Install the latest release:
```shell
curl -fsSL https://raw.githubusercontent.com/trailofbits/coop/main/install.sh | bash
```
Or build from source (requires [Rust](https://rustup.rs/) and CMake):
```shell
cargo build --workspace --release
cp target/release/coop target/release/coop-proxy /usr/local/bin/
```
Then build the VM template image:
```shell
coop setup
```
On Linux, `coop setup` also installs Firecracker and fetches a guest kernel. On macOS, install Lima first (`brew install lima`) — setup fails without it. coop is tested on macOS arm64 (Apple Silicon) and Linux x86_64; Linux arm64 builds are available but untested. Each backend has its own host requirements — see [Prerequisites](docs/getting-started.md#prerequisites).
Keep coop updated:
```shell
coop update
```
See [`coop update`](docs/commands.md#update) and the [`updates` config section](docs/configuration.md#updates-section).
## Usage
Start an instance for the current project and launch an agent CLI:
```
cd ~/code/my-project
coop up
coop claude
# or
coop codex
```
## Documentation
- [Documentation index](docs/index.md)
- [Getting started](docs/getting-started.md)
- [Command reference](docs/commands.md)
- [Configuration reference](docs/configuration.md)
- [Images and profiles](docs/images-and-profiles.md)
- [Workspace sync](docs/workspaces.md)
- [Claude Code integration](docs/claude-integration.md)
- [Codex integration](docs/codex-integration.md)
- [Editor integration](docs/editor.md)
- [Multi-instance](docs/multi-instance.md)
- [Platform backends](docs/backends.md)
- [Shell completion](docs/shell-completion.md)
- [Architecture](docs/ARCHITECTURE.md) and [trust model](docs/trust-model.md)
- [Contributing](CONTRIBUTING.md) and [security policy](SECURITY.md)