Thriving 
PY Containerized environment for running coding agents with auditability on macOS and Linux
https://mikkovihonen.github.io/pa-container/ ↗ HEALTH ? 88 / Healthy
Thriving PY // readme
pa-container
A containerized environment for running autonomous coding agents (Pi, OpenCode, Antigravity, and Claude Code) with local large language model (LLM) inference, headless virtual desktop support, and full auditability. A transparent proxy container based on mitmproxy intercepts all HTTP, HTTPS, and DNS traffic from the agent container. It enforces an allowlist and injects secrets when required. It supports macOS, Linux, and WSL2.
Highlights
- Sandboxed agent — The agent container sends all internet traffic only through the proxy. It uses an
--internalnetwork without a gateway. The system denies all other protocols by default. - Auditable traffic — All HTTP, HTTPS, and DNS traffic is intercepted by
mitmproxy. It uses a hostname allowlist and a token injector. It saves the traffic to a flow export file for each project. - Multi-agent architecture — Pluggable agent drivers for Pi, OpenCode,…