winix

A Linux kernel running in the browser as WebAssembly, with an API for running shell commands and managing files. API reference

About this sandbox
  • No CPU emulation. The kernel and tools are compiled to wasm32. Other packages run under Blink (slower).
  • Programmatic API. Your app can run commands, read files, and write files in the sandbox. Use it to let an AI agent run tools, test code, or run scripts without touching your own machine.
  • Network access is controlled. Programs in the sandbox cannot connect to the internet on their own. Requests only go out when you allow them, and you can log or block them.
  • Saved sessions. A machine can be saved to a .winix file and loaded later. The archive is validated before a machine boots.
booting…
$

Sessions save files only (not running programs or editor buffers, and not the terminal). Stop background writers and save editors first. Backups can contain secrets such as .env files and keys.