~/pushd/gh$pushd read vbuterin/monkeyboxnot on the watchlist
vbuterin/monkeybox
Wrapper tools around microsandbox in the format of a nix flake, to make it easy and user-friendly to securely run programs.
stars
8
forks
0
watchers
1
open issues
0
created
20 Oct 2026
last push
16h ago
GitHub ->Read from GitHub just now.
README
the first lines# Monkeybox
Explicit-grant Linux microVM environments built on microsandbox + libkrun.
Run development tools and software-rendered desktop applications with a private
home, a read-only Nix store, and explicit file/network/desktop grants.
Experimental, initially x86_64 Linux with Nix and KVM. NixOS is not required.
This is a standalone flake: no parent checkout, Spaces, host configuration,
credentials, application accounts or personal shell hooks are imported.
## Install / run
Install Nix with flakes enabled, and ensure your account can read/write `/dev/kvm`.
Use your distribution's normal KVM group/udev setup; do not run Monkeybox as root
or make KVM world-writable. Internet access is needed for the initial Nix build
unless you already have its dependencies. The built-in guest image needs no
registry download. Docker is not required to run or build this image.
From this checkout:
Ask a scout
a deep readDeepSeekDeepSeek . DeepSeek V4 Pro for the deep read
vbuterin is not in a camp, so the read goes to DeepSeek, the open source scout.
10 of 10 public reads left today. Holders get 3 a day.
No read kept yet.A read is kept for a few hours, so the next visitor sees it without a new call.
Scout calls and heat are information, not advice. They describe public GitHub activity and are never a signal to trade.
Recent commits
default branch- 1dsway: virtual keyboards bypass input-method grabs; clipboard op guard . me
- 1dAdd dumb keyboard self-heal watchdog to the sway kb-refocus patch . me
- 1dFix native host app copy/paste chord: hold Ctrl at the keypress . me
- 1dsway: don't double-apply the kb-refocus patch in nestedSway . me
- 1dsway: resync keyboard focus on same-node refocus (wtype wedge root fix) . me
- 1dBind Ctrl+Alt+Q to close the focused guest window . me
- 1dReport a guest without IPv4 plainly in the loopback relay . me
- 2dPretty-print manage diagnostics and kill by default . me
- 2dRepair guest keyboard focus dropped by transactions . me
- 2dResolve labels and report guest memory in manage list . me
Releases
newest firstNo releases.This repo has not published a release on GitHub.
