itlabs-gmbh

Skiff — Development skill for Claude Code

Development community

A fresh Linux VM on your Mac in half a second.

How to install Skiff

This entry records only its repository, not the path inside it, so there is no exact command to give. Open itlabs-gmbh/skiff and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Skiff does

A fresh Linux VM on your Mac in half a second. Throwaway sandboxes for coding agents on Apple Silicon, with credentials brokered from the Mac.

Alternatives in Development

  • Microsandbox — Open-source self-hosted MicroVM sandboxes with sub-200ms startup, hardware-level isolation via libkrun 5k ★
  • Sandbox-agent (Rivet) — Run Claude Code and other coding agents in sandboxes controlled over HTTP 1.2k ★
  • Clawk — Give coding agents a disposable Linux VM, not your laptop 996 ★

README

skiff – a fresh Linux VM on your Mac in half a second

[![CI](https://github.com/itlabs-gmbh/skiff/actions/workflows/ci.yml/badge.svg)](https://github.com/itlabs-gmbh/skiff/actions/workflows/ci.yml) [![License: Apache-2.0](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](LICENSE) [![Go Reference](https://pkg.go.dev/badge/github.com/itlabs-gmbh/skiff.svg)](https://pkg.go.dev/github.com/itlabs-gmbh/skiff)

`skiff` gives you throwaway Linux VMs on Apple Silicon, one per task or coding agent: `skiff new dev` boots an Ubuntu 24.04 VM with its own kernel, disk, IP and root SSH in about two seconds (the boot itself takes half a second), and `skiff rm dev` throws it away. Credentials the agent needs stay on the Mac and reach the VM through a broker, never as copies.

macOS (skiff)
 ├── VM dev   (Virtualization.framework via Apple's `container`, 192.168.64.x, ssh dev.skiff)
 ├── VM ai    (…)                                     ──┐ relay: localhost:3000 → ai:3000
 └── broker   (credentials, MCP servers, audit log)   ◀─┘ ssh -R tunnel per session

Each VM is a `container machine`: a Virtualization.framework VM driven by Apple's [container](https://github.com/apple/container) CLI. There is no nested virtualization and no shared runtime VM, so JIT-heavy workloads such as Claude Code run at Mac speed. The host side is one Go binary; the guest is a plain Ubuntu image with systemd, sshd and skiff's key.

Requirements

  • Apple Silicon (any generation)
  • macOS 26 or newer (what Apple's container supports)
  • Homebrew (skiff installs container through it if needed)
  • Go 1.26+ to build skiff

Check with `skiff doctor`.

Install

go install github.com/itlabs-gmbh/skiff/cmd/skiff@latest
skiff prepare           # one-time setup, about a minute

Or from a checkout: `make install` (go install ./cmd/skiff → `$(go env GOPATH)/bin/skiff`).

`skiff prepare` is idempotent. It:

  1. verifies the host (Apple Silicon, macOS version, Hypervisor framework, `cont