Agent Devbox

agent-devbox

Spin up a disposable cloud dev machine with AI coding agents (Codex CLI, Claude Code, Antigravity CLI) pre-installed — straight from GitHub Actions, no local tooling required.

Use this template → add secrets → run "Deploy to Hetzner" → ssh dev@ → work


What you get

A fresh Ubuntu 24.04 server with:

• Agents: Codex CLI, Claude Code, Google Antigravity CLI (agy) pre-installed and ready to auth (OpenCode optional)
• Codex Sandbox: bubblewrap (bwrap) pre-configured with unprivileged user namespaces for secure local execution
• Headless browser: Chromium via Playwright, so agents can run E2E tests and take screenshots (optional, on by default)
• Dev shell: zsh with autosuggestions, syntax highlighting, a starship prompt, fzf and zoxide, plus modern CLIs (eza, bat, fd, ripgrep, jq, yq, delta, lazygit, direnv, shellcheck, httpie) and neovim
• tmux: a persistent session auto-attached on SSH login — with directory-labelled tabs and a live AI status bar (auto-detects Claude, Codex, Agy; tracks context/rate limits, activity ⚡, and cost)
• Runtimes: Node.js 22, npm, pnpm, Python 3, pipx
• Docker: Engine + Compose plugin (optional)
• Workspace: /workspace owned by the dev user (on Hetzner: a separate volume, so it can outlive the server type)
• Hardened SSH: key-only auth, no root login, no passwords

Quick start (Hetzner — recommended first)

1. Click Use this template (or fork).
2. Add repository secrets (Settings → Secrets and variables → Actions):

   Secret	What it is
   HCLOUD_TOKEN	Hetzner Cloud API token (read+write)
   HETZNER_S3_ACCESS_KEY	Hetzner Object Storage access key (for Terraform state)
   HETZNER_S3_SECRET_KEY	Hetzner Object Storage secret key
   SSH_PUBLIC_KEY	Your SSH p