Dockerized solution for security and safety

[byjlw]

I use Cline I kinda want the features you added but it's risky from a computer integrity standpoint auto running system commands.
Openhands solves this problem but it's expensive to run eating a ton of tokens.
Having cline take the docker approach of Openhands would be super ideal.

In openhands, VS Code is in the browser and every execution happens in the container so the host machine is protected.

[sktripamer]

I think the software should come as is, and perhaps there could just be docs to get it easily running in a VM/docker. Multipass is a good and easy tool for spinning up VMs to run inside of.

[motin]

I just discovered Cline as I am a Openhands user that is annoyed by having to run agents inside docker containers. While great for safety, it also adds a lot of friction to subtle things, most notably incompatibility between venvs and node_modules when sharing the code with the agent (host being macos, agent running in linux container).
Just saying this to make sure that dockerization remains an optional feature when the safety/convenience tradeoff is justified.

[mrubens]

I've had the same experience with Openhands for what it's worth.

I develop on Mac, and what I found works best is to run Cline within a Mac VM using https://getutm.app/ or similar.

[TomLucidor]

@motin use Kevin, it tries to decouple from containers https://github.com/SmartManoj/Kevin