GhostVM 0.0.1 lacked features that today make it usable.

I couldn't copy-paste between guest and host OS.

I could share a directory, but I had to decide on boot.

GhostVM 2.4.0 has many features that make it feel just like an application. Today I barefly notice the VM layer.

Copy-Paste is seamless. Or mostly seamless.

Copy-buffers can contain sensitive data, the VM guest does not have immediate access. You must approve from a quick permission prompt.

(You can always allow, if you prefer)

Copy-Paste also supports rich data types. You can screenshot an image, switch into the VM and paste the image without any intermediate files.

I created GhostVM with claude and codex, often alternating to get the best of both worlds.

I'm not loyal, I use whatever is best for the problem in front of me.

The "zero to mvp" was very quick, not even 30 minutes. The polish, the refinement, the little features that keep me coming back to using GhostVM every day took months.

I wanted to move VSCode, Claude, and Codex into the VM, and remove any agentic tools from my outer operating system.

My concern was security and isolation.

I don't want prompt injection to have a direct vector to my 1Password, documents, etc. But I DO want my agents to run unabated.

I think agents with full system access work far better. I just wanted to give them their own system.

Asking an agent to share your desktop is like having employees share a laptop.

I can run 3-4 VMs simultaneously on my M1 Macbook Pro, with plenty of overhead to still do my work.

The end goal is a MacStudio in the corner with a bunch of VMs running agents with full computer use.

I will get there.

Each tool I create with an agent gets me closer to that goal.

The repository is here. Feedback is welcome.

I will likely not take direct pull requests, rather I will pass requests to an agent.

We have reached an era where it's easier to create than review.

github.com

GitHub - groundwater/GhostVM