OpenCCVM

Ccvm — Development skill for Claude Code

Development community

Run Claude Code in an ephemeral, RAM-only NixOS microVM — a drop-in for claude that brings your existing config.

How to install Ccvm

This entry records only its repository, not the path inside it, so there is no exact command to give. Open OpenCCVM/ccvm and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Ccvm does

Run Claude Code in an ephemeral, RAM-only NixOS microVM — a drop-in for claude that brings your existing config. Fully reproducible. Lock down egress in one line.

Alternatives in Development

Jupyter Notebook — Create clean, reproducible Jupyter notebooks for experiments and tutorials 14.6k ★
Microsandbox — Open-source self-hosted MicroVM sandboxes with sub-200ms startup, hardware-level isolation via libkrun 5k ★
Dario — A local OpenAI- and Anthropic-compatible proxy that brings your Claude Pro/Max subscription to Cursor, Cline 485 ★

README

ccvm

**CLI for isolating and securing the Claude Code experience with little-to-no added friction**

***100% reproducible from this repository.***

[![flake check](https://github.com/openccvm/ccvm/actions/workflows/flake-check.yml/badge.svg)](https://github.com/openccvm/ccvm/actions/workflows/flake-check.yml) [![docs](https://img.shields.io/badge/docs-mdBook-1f6feb)](https://openccvm.github.io/ccvm/) [![License: MIT](https://img.shields.io/badge/License-MIT-green)](LICENSE)

**[About](#about) · [Quick start](#quick-start) · [Documentation](#documentation) · [Roadmap](#roadmap) · [License](#license)**

About

`ccvm` is a drop-in replacement for running `claude`.

Running `ccvm` in any project directory automatically whips up a RAM-only NixOS microVM and drops you into the same TUI that running `claude` would. Everything Claude does happens inside a completely ephemeral sandbox that can only see the one directory you launched it in — not the rest of your machine, your SSH keys, or your cloud credentials — and it all disappears when you close it.

By default it feels exactly like native `claude` (live edits to your project, your `~/.claude` settings, your git identity) — but your **login credential never crosses** into the VM, and one setting (`egressAllowlist`) locks down where the VM can connect. The full threat model and every option live in the **[documentation](https://openccvm.github.io/ccvm/)**.

Quick start

**Requirements:** Linux and [Nix](https://nixos.org/download/) (with flakes enabled).

Just want to try it, without installing anything? In any project directory:

nix run github:openccvm/ccvm

[!NOTE] No Nix yet? Install it with the [official installer](https://nixos.org/download/), then enable flakes once by adding `experimental-features = nix-command flakes` to `~/.config/nix/nix.conf`.