orka
Run LLM coding agents in isolated containers.
Mount what they need. Nothing else is reachable.
Filesystem isolation
Agents run in containers, with only directories you mount — not $HOME, no credentials from the env, no shell history, no write to /.
Mounted a project, but prefer not to share the .env file? Use orka to shadow it with an empty, read-only stub.
Runtimes and Engines
Supports
- pi
- claude-code
- codex
running in
- Docker
- Podman
- nerdctl
- bubblewrap
Presets
Reuse volumes and env vars in a named preset —
whatever toolchain: Rust, Go, uv, etc.
Run orka --preset rust and those paths are mounted automatically.
Stack presets when a project uses more than one.