Reverse Engineering Claude Code: 10GB Ubuntu ARM64 VM and vsock RPC
foxtrot_north · reddit · 2026-07-06
A developer deconstructed the 10GB VM image within the Claude Code application's support folder, discovering that it eschews containers or Seatbelt sandboxing. Instead, it utilizes Apple's Virtualization.framework to boot a complete Ubuntu ARM64 cloud image. The control plane is managed by the daemon coworkd (internally sdk-daemon), which communicates with the host via vsock RPC and runs with root privileges; outbound network traffic is handled through a gVisor user-space network stack. The disk architecture employs a compressed golden image paired with a disposable, per-session overlay layer that automatically resets upon each boot to ensure isolation. The author has published a comprehensive technical analysis on Substack.
More from coding & agent
- A 9B Ollama agent can run a fully local DJ radio with tools, memory, and TTS — pinku1 · 2026-07-27
- Bugbot rejects an MCP permission flag because it would break path-scoped isolation — zeeg · 2026-07-27
- One GPT-5.6 agent is guarding a Blink security system while another makes a parody rap album — repligate · 2026-07-27
- An agent got unblocked by reusing a logged-in browser, not stealth tricks — armanidev_ · 2026-07-27
- Paper argues graph topology can become the core operating system for AI agents — theomitsa · 2026-07-27
- Claude Code desktop adds UI markup feedback for smoother visual editing — EricBuess · 2026-07-27