Devvm.dev Introduces Per-Project VMs for Isolated Development Environments

Isolated Development Environments

Devvm.dev has released a new tool designed to provide a dedicated virtual machine (VM) for every development project. This system creates an isolated sandbox environment, pre-configured with the necessary toolchains, allowing developers or coding agents to begin work immediately. The primary goal is to enhance security by containing potential threats within the VM.

Simplified Setup and Toolchain Management

Developers can initiate a VM by navigating to their project folder and running a single `devvm` command. The tool automatically identifies required toolchains based on project files, with options for customization. It also integrates with coding agents such as Claude Code, Codex, and opencode, which can run directly within the VM. User-defined layers (docker, nix, desktop) are also supported, and custom layers can be created.

Security and Isolation Features

The platform addresses common developer security concerns like supply chain attacks and leaked secrets by sandboxing the development environment. Each VM mounts only the project folder, restricting access to other parts of the user's home directory. Network access is controlled through configurable tiers, with a default allowlist that limits outbound connections through a local proxy. On macOS, git hooks and configurations are locked within the VM.

Developer Experience

Devvm.dev aims for a zero-configuration experience, providing sensible defaults. VMs include optional extras like oh-my-bash and fzf. Git user information is automatically configured for commits made within the VM. Port forwarding is handled automatically, mapping VM ports to the host machine. The tool also supports opening the VM directly in VS Code via Remote-SSH.