stoat: a single Go binary that lets AI agents spin up and control QEMU VMs safely
Bright-Fun-1638 · reddit · 2026-09-12
- The author needed agent-native sandboxed execution for Claude Code: Docker lacks systemd/kernel modules/loopback, and VirtualBox/VMware assume a human in a GUI — so he built stoat, a single Go binary that starts QEMU directly and exposes agent-friendly tools.
- Usage: stoat create dev --image debian-13, stoat up dev, then stoat mcp install claude-code wires tools into Claude Code.
- Agents get tools for exec, files, packages, ports, services, logs, and snapshots inside the VM; broken states can be rolled back via snapshots.
- Each VM has an agentaccess level from none to exec, letting you hand over one guest fully while keeping another read-only.
- Linux with KVM only for now; GCP/AWS connectors and OSX/Windows binaries are planned.
Related event: stoat: A Single Go Binary Giving Agents Snapshot-Isolated QEMU VMs(2 posts)→
More from coding & agent
- effect-harness on Cloudflare: run agent loops, tools and credentials on separate VMs — samgoodwin89 · 2026-10-31
- jh3yy: agents gave me flow state — my tools finally keep up with my brain — jh3yy · 2026-10-31
- CAFE ecosystem: Maple moves 300k lines of React to Foldkit in 3 days — samgoodwin89 · 2026-10-31
- Non-coder builds 100-star Android TV launcher entirely with Claude — SuB8u · 2026-10-31
- Factory acquires typedef_ai to give coding agents an enterprise data context layer — maddiehfaulkner · 2026-10-31
- Browser agent's graph reroute wins 5/5 vs 0/5 for trajectory replay, author retracts own number — JeremyCMorgan · 2026-10-31