Bastion – isolated Linux VMs for background coding agents

In plain words

Bastion provides isolated Linux virtual machines designed for running background coding agents. It's built for developers who need to execute code in a contained environment without affecting their main system. The product emphasizes isolation as its core feature, ensuring that automated coding tasks run safely within dedicated VMs while maintaining separation from production or local systems.

written from the facts on this page · September 2026

From the sources

curl -fsSL https://bastion.computer/install.sh | bash Run every coding agent in isolation Each coding agent runs in its own VM with full control over its development environment, from the filesystem to background processes. Orchestrate coding agents across a cluster of physical servers and run them asynchronously in the background. Initialize every agent from a schema-validated JSON template with no manual provisioning required. Run Bastion on any Linux machine with KVM support, from local workstations to cloud servers. { "agents" : { "opencode" : { "working_directory" : "/workspace/app" , "auth" : { "openai" : { "type" : "api" , "key" : "${{ secret.OPENAI_API_KEY }}" } }, "config" : {…from bastion.computer

• 
  Sub-millisecond VM sandboxes using CoW memory forkingMar 2026 · github.com · ▲311

  I wanted to see how fast an isolated code sandbox could start if I never had to boot a fresh VM. So instead of launching a new microVM per execution, I boot Firecracker once with Python and numpy already loaded, then snapshot the full VM state. Every execution after that creates a new KVM VM backed by a `MAP_PRIVATE` mapping of the snapshot memory, so Linux gives me copy-on-write pages automatically. That means each sandbox starts from an already-running Python process inside a real VM, runs the code, and exits. These are real KVM VMs, not containers: separate guest kernel, separate guest…

• 
  Harness by Autonomous6d ago · autonomous.ai · ▲288

  Every coding agent, every machine, one command center.

• 
  Clawk – Give coding agents a disposable Linux VM, not your laptopJul 2026 · github.com · ▲226

  Give coding agents a disposable Linux VM, not your laptop - clawkwork/clawk

• 
  The Cloud for AI AgentsNov 2025 · hopx.ai · ▲128

  Spin up secure sandboxes in ~100 ms

• 
  Hosting 100 Linux dev environments on one VM using LXCJan 2026 · github.com · ▲16

  Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI - FootprintAI/Containarium

• 
  Run coding agents in microVM sandboxes instead of your host machineApr 2026 · github.com · ▲63

  Hi HN, we built SuperHQ, an open source app that runs AI coding agents in isolated microVM sandboxes instead of directly on your machine. Each agent gets its own VM with a full Debian environment. You mount your projects in, writes go to a tmpfs overlay so your host is never touched, and you get a diff view to accept or discard changes. API keys never enter the sandbox. We also just launched remote.superhq.ai which acts as a remote control for SuperHQ, allowing you to access your workspaces and agents from anywhere.

• 
  /dev/null▲472

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲340

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 27d ago · corespeed.io

• 
  Fundraisly▲1,537

  AI fundraising agent that finds investors and books meetings

  AI · Jun 2026 · fundraisly.com

• 
  Homebrew 6.0.0▲1,481

  Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!

  Dev tools · Jun 2026 · brew.sh

• 
  Performative-UI – A react component library of design tropes▲1,181

  Hi HN! I was super frustrated at apps like tiktok and wechat preventing me from saving or downloading the animated gifs, so I made a little tool to turn a screen recording into a slack-sized emoji. Hope you get some value from this!

  Life & fun · Jun 2026 · vorpus.github.io

• 
  Upstream▲976

  The inbox designed for humans and agents

  AI · Jun 2026 · upstream.do

• 
  Goldfish▲958

  Press Option. It knows your work and replies like you

  AI · Jun 2026 · goldfish.sh

• 
  I made Google Trends for Hacker News by indexing 18 years of comments▲822

  Search 18 years of Hacker News and chart how any topic, tool, or person trended. Overlay terms to compare their rise and fall across 45M posts and comments.

  Life & fun · Jun 2026 · hackernewstrends.com