Eclipse Enclave

A Docker-based sandbox for running agentic coding tools — Claude, Codex, OpenCode, and others — in an isolated container while keeping your project files on the host. Network access is restricted to allowlisted domains by default, auth and history persist across sessions, and YOLO mode is on so agents can act without confirmation prompts.

Website · Getting Started · Docs

Requirements

Linux and macOS (with Docker Desktop) are supported natively. On Windows, Enclave runs inside WSL2: the Linux instructions apply within the WSL distribution, and `enclave.exe` is a launcher that forwards to it rather than a native build. See [Windows](docs/windows.md).

Runtime dependencies:

• Rootful Docker (CLI on PATH, daemon running) with the buildx plugin; the sandbox image build requires BuildKit. Rootless Docker is not supported.
• Optional: qemu-system-x86_64 and cpio for the experimental qemu backend, which builds an x86-64 guest and is practical only on x86-64 Linux hosts, where KVM can accelerate it. On arm64 hosts and on macOS it falls back to full emulation. The default docker backend is unaffected and runs natively on every supported platform.

Building from source additionally requires Git, Make, and Go 1.24 or newer. Use the official [Go installation instructions](https://go.dev/doc/install) if your distribution does not provide a recent enough version.

On Ubuntu 24.04, install the runtime dependencies with:

sudo apt-get update
sudo apt-get install docker.io docker-buildx git
sudo systemctl enable --now docker

On Fedora 44, install the runtime dependencies with:

sudo dnf install docker docker-buildx
sudo systemctl enable --now dock