--- title: "Sandbox AI coding agents with microVMs on Fedora Linux" url: https://daily.dev/posts/sandbox-ai-coding-agents-with-microvms-on-fedora-linux-xfe5hlygw source_url: https://fedoramagazine.org/sandbox-ai-coding-agents-with-microvms-on-fedora-linux type: article source: "Fedora Magazine" published: 2026-06-15T08:01:44.331Z updated: 2026-06-15T08:03:12.254Z tags: ["ai-agents", "fedora"] reading_time: 8 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Sandbox AI coding agents with microVMs on Fedora Linux **[Fedora Magazine](https://daily.dev/sources/fedoramag)** · 8 min read · 0 upvotes · 0 comments ## Summary AI coding agents like Claude Code and Codex pose security risks when run with unrestricted access on developer machines. MicroVMs offer a practical middle ground between containers (which share the host kernel) and full VMs. Using Fedora Linux, podman, and the krun runtime, developers can run each agent in its own microVM with its own kernel, providing stronger isolation. The article walks through a complete setup including a Dockerfile, docker-compose.yaml with krun annotations for UID/GID translation and SELinux labeling, and an entrypoint script. Key gotchas include allocating sufficient RAM/CPU, using libkrun >= 1.8, and handling the USER directive manually. A helper script automating the entire setup is also provided. The author notes microVMs are not bulletproof and recommends full VMs for truly dangerous workloads. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Docker Sandboxes: Run Claude Code and More Safely](https://daily.dev/posts/docker-sandboxes-run-claude-code-and-more-safely-6ydoupfk7) · Docker · 1 upvotes · 0 comments - [Why MicroVMs: The Architecture Behind Docker Sandboxes](https://daily.dev/posts/why-microvms-the-architecture-behind-docker-sandboxes-qzo1tfme1) · Docker · 10 upvotes · 0 comments - [Your Container Is Not a Sandbox](https://daily.dev/posts/your-container-is-not-a-sandbox-dkskd3kl8) · Lobsters · 26 upvotes · 1 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#fedora](https://daily.dev/tags/fedora) [View this post on daily.dev](https://daily.dev/posts/sandbox-ai-coding-agents-with-microvms-on-fedora-linux-xfe5hlygw)