orka
alpha
Run LLM coding agents in isolated containers.
Mount what they need. Nothing else is reachable.
orka is a personal project, built and used daily by its author.
It works well for that purpose, but expect rough edges.
It is predominantly vibe-coded. If that's not for you, no worries.
Filesystem isolation
Agents run in containers, with only directories you mount — not $HOME, no credentials from the env, no shell history, no write to /.
Mounted a project, but prefer not to share the .env file? Use orka to shadow it with an empty, read-only stub.
Runtimes and Engines
Supports
- pi — main driver
- claude-code — occasional use
- codex — works, not extensively used
running in
- Docker — main driver
- Podman — some testing
- nerdctl — alpha
- bubblewrap — alpha
Presets
Reuse volumes and env vars in a named preset —
whatever toolchain: Rust, Go, uv, etc.
Run orka --preset rust and those paths are mounted automatically.
Stack presets when a project uses more than one.