trailofbits/coop

coop

Isolated VM environments for running Claude Code and Codex.

Pronunciation: "coop" (/kuːp/) — one syllable, rhymes with "loop", like the thing you keep chickens in. Not "co-op".

coop is a Rust CLI that manages disposable virtual machines where Claude Code and Codex have full tool access: Docker, git, compilers, package managers, all without risk to your host machine. Each VM is isolated, reproducible, and cheap to create and destroy.

Setup

Install the latest release:

curl -fsSL https://raw.githubusercontent.com/trailofbits/coop/main/install.sh | bash

Or build from source (requires Rust and CMake):

cargo build --workspace --release
cp target/release/coop target/release/coop-proxy /usr/local/bin/

Then build the VM template image:

coop setup

On Linux, coop setup also installs Firecracker and fetches a guest kernel. On macOS, install Lima first (brew install lima) — setup fails without it. coop is tested on macOS arm64 (Apple Silicon) and Linux x86_64; Linux arm64 builds are available but untested. Each backend has its own host requirements — see Prerequisites.

Keep coop updated:

coop update

See coop update and the updates config section.

Usage

Start an instance for the current project and launch an agent CLI:

cd ~/code/my-project
coop up
coop claude
or
coop codex

Documentation

• Documentation index
• Getting started
• Command reference
• Configuration reference
• Images and profiles
• Workspace sync
• Claude Code integration
• Codex integration
• Editor integration
• Multi-instance
• Platform backends
• Shell completion
• Architecture and trust model
• Contributing and security policy