# agent-images

Reproducible OCI container images, built with Nix, that sandbox AI coding agents such as Claude Code, Codex CLI and OpenCode so that a compromised or overreaching agent has limited access to the host filesystem and credentials.

agent-images consumes agent packages from a companion project, llm-agents.nix, and turns them into container images usable standalone with Podman or Docker, or through an orchestration project called agent-box. The stated motivation is that AI coding agents need filesystem access to be useful, but that same access lets them read secrets such as SSH keys, cloud credentials and API tokens; running an agent inside a container limits what it can see, and building the images with Nix keeps them reproducible and easy to customize.

Images are provided for a long list of AI coding agents and assistants, including Claude Code, Codex CLI, Copilot CLI, Cursor Agent, Gemini CLI, Goose, OpenCode, Qwen Code and several OpenClaw-family agents, each buildable with a single Nix build command. Every image ships a default set of base packages such as git, coreutils, bash and ripgrep.

It is written in Shell script and released under the BlueOak-1.0.0 license.

Website: https://github.com/nothingnesses/agent-images