$ cd ~/projects/toby

Toby

[ Private-home Linux sandboxes for AI coding agents and development tools. ]

view on github releases docs

about

Toby runs development tools in private-home Linux sandboxes. Each launch uses a verified OCI root filesystem and Bubblewrap, without using Docker as its runtime.

Agents, package managers, and VCS clients see the selected projects and Toby-managed storage. Host files such as ~/.ssh, ~/.gnupg, and ordinary tool configuration stay outside the sandbox.

features

  • Launchers for OpenCode, Claude Code, Codex, Copilot, Cursor, Grok, and more, plus exec, npm, uv, gh, and glab.
  • Environment names select a persistent private home, so different tools can share one home for the same project.
  • Sandbox images come from any OCI registry, OCI archive imports, or opt-in Buildah builds.
  • Host Git credentials, signing, and MCP servers are reached through Toby-managed connectors, with host actions gated by approvals.
  • Per-project launch files, reusable tool profiles, and config-owned multi-project launches.
  • Ships as Debian and Arch packages or binary-only x86_64 and arm64 archives, with optional systemd socket units.

usage

~/projects/toby

# launch a tool in a persistent environment

$ toby opencode my-app

$ toby codex my-app

$ toby exec my-app -- npm test

$ toby claude review --project ~/Projects/my-app

$ cd ~/projects