dirien

Herdr Sbx Plugin — DevOps skill for Claude Code

DevOps community

Herdr plugin that runs coding agents inside Docker Sandboxes (sbx), one microVM per agent.

How to install Herdr Sbx Plugin

This entry records only its repository, not the path inside it, so there is no exact command to give. Open dirien/herdr-sbx-plugin and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Herdr Sbx Plugin does

Herdr plugin that runs coding agents inside Docker Sandboxes (sbx), one microVM per agent.

Alternatives in DevOps

Docker 71.9k ★
Claude Code Router — Use Claude Code as the foundation for coding infrastructure, allowing you to decide how to interact with the m 30.1k ★
Skill Claw — OpenClaw instance administration — manage hosts across macOS, Ubuntu/Debian, Docker, OCI, and Proxmox 2.8k ★

README

herdr-sbx-plugin

One coding agent per Docker Sandbox, driven from Herdr.

[![Herdr plugin](https://img.shields.io/badge/herdr-plugin-76e6a3)](https://herdr.dev/plugins) [![Requires Herdr 0.9.0 or newer](https://img.shields.io/badge/herdr-%E2%89%A50.9.0-6db8ff)](https://herdr.dev/docs/plugins/) ![Linux and macOS](https://img.shields.io/badge/platform-Linux%20%7C%20macOS-f2c66d) [![Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE) [![CI](https://github.com/dirien/herdr-sbx-plugin/actions/workflows/ci.yml/badge.svg)](https://github.com/dirien/herdr-sbx-plugin/actions/workflows/ci.yml)

![Your repository is mounted into a Docker Sandbox microVM; the plugin creates the sandbox, verifies the agent and attaches it to a Herdr pane; credentials are injected by the sbx proxy and never enter the VM.](docs/assets/herdr-sbx-plugin-hero.svg)

This [Herdr](https://herdr.dev) plugin starts Claude Code, Codex, Gemini CLI, OpenCode, Copilot CLI or Cursor Agent inside a [Docker Sandbox](https://docs.docker.com/ai/sandboxes/), a microVM with its own kernel, filesystem and network policy, and gives it a Herdr pane on your side. Herdr keeps its status detection and key bindings, `sbx` does the isolation, and the plugin is the thin layer between the two.

Your repository is mounted into the VM at its own path, so the agent's edits land in your checkout as they happen. Credentials never enter the VM: `sbx` injects them through a proxy on the way out. Outbound traffic is blocked unless you allow it.

**Boundary:** Linux or macOS, with `sbx` installed and signed in on the same machine as Herdr. Verified with Herdr 0.9.0 and sbx 0.42.1 on macOS. There is no Windows support, because the command typed into a pane assumes a POSIX or fish shell.