claude-hdb
0c9971ecf8
A CLI that mints trust-less, network-isolated Incus VMs with Claude Code installed. Boxes are strictly creds-free — the operator logs into Claude interactively inside; authenticated state is reused via snapshots. The tool knows nothing about projects; a repo ships an optional agent-facing .claudebox/ runbook that Claude reads. - bin/claudebox: new/shell/exec/snapshot/restore/down/start/rm/status; creds-free 'new' (fresh launch or clone via --from <src>[/<snap>]). - cloud-init: global ~/.claude/CLAUDE.md self-describing the box + .claudebox/ runbook. - install.sh: curl-pipe-bash installer. - host/: Incus isolation stack (claudenet + claude-isolate ACL + claude-dev profile + firewall). - docs/: design + .claudebox/ convention. Initial canonical import (prototyped separately; re-homed onto the heavy-duty fork). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
14 lines
248 B
YAML
14 lines
248 B
YAML
name: claude-dev
|
|
description: Trust-less claudebox (resources + isolated NIC)
|
|
config:
|
|
limits.cpu: "4"
|
|
limits.memory: 8GiB
|
|
devices:
|
|
eth0:
|
|
type: nic
|
|
network: claudenet
|
|
name: eth0
|
|
root:
|
|
type: disk
|
|
pool: default
|
|
path: /
|