stoat gives coding agents sandboxed QEMU VMs with snapshots via MCP
Bright-Fun-1638 · reddit · 2026-09-12
- After an errant rm and a broken package manager from running coding agents directly on his machine, the author found containers insufficient: they fail once a guest needs systemd, kernel modules or loopback, and share his kernel anyway.
- VirtualBox/VMware expose nothing an agent can call, so the working setup drives QEMU directly, defines VMs in TOML, and scopes one MCP server per guest — giving the agent exec, files, packages, ports, services, logs and snapshots inside the VM.
- Two must-haves: per-VM access levels (none to exec) so "give the agent a VM" never becomes "give the agent every VM", and snapshots (stoat snapshot / stoat restore) to roll back risky operations.
- Local VMs need Linux with KVM; macOS/Windows fall back to a slower, paid remote GCE path. Go binary on GitHub, AGPL-3.0: NovusEdge/stoat.
Related event: stoat: A Single Go Binary Giving Agents Snapshot-Isolated QEMU VMs(2 posts)→
More from coding & agent
- Grok Build ships v1.0.29/30: tmux lag fix, Ctrl+G dock toggle, multi-agent crash fixes — XFreeze · 2026-09-13
- Codex harness burns tokens polling idle loops; workaround: disable polling or delegate — brandon_galang · 2026-09-13
- Same LLM eval, different scores: a method to tell real regressions from noise — bgoncalves · 2026-09-13
- Spend 20% of your time having AI build your app, 80% using it — Daniel_Farinax · 2026-09-13
- OpenAI shows off GPT-6 Astra community builds, from 3D anatomy to Unity air traffic sims — OpenAIDevs · 2026-09-13
- GitHub repo curates 500+ agentic AI projects for ideas and implementation study — Roger_M_Taylor · 2026-09-13