feat: support extra host mounts via ~/.agent-vm/volumes

[jbpenrath]

Allow to mount extra folders. It can be useful, to mount global claude configuration or a git config for example.

[sylvinus]

good idea, would be cool to support write volumes too?

[Fingarde]

#11

[Fingarde]

good idea, would be cool to support write volumes too?

If mount points are stored in the project folder, the AI could modify writable mount points, which I think poses a security risk.
Maybe additional mount points should be read-only and only used to mount folders such as ~/.config/opencode or ~/claude.

But we absolutely need this feature !!!

[jbpenrath]

I tried to complete this work.
Now you can mount folders and also single files through a little tweak because I did not find secure and easy way to mount single files with virtiofs. (As a workaround, I create a staging folder that is mounted in the VM. Then for each files, I create an hard link in this staging folder then I'm able within the VM to bind each file to its destination.)

Furthermore like docker compose, for folder only, you can suffix volume entry by :ro or :rw to make folder writable or read-only (read-only by default if no suffix is provided)

[JeSuisUnCaillou]

Maybe additional mount points should be read-only and only used to mount folders such as ~/.config/opencode or ~/claude.

Read-only would allow claude code to read its global skills and all which would already be great, but it would prevent claude code to write memories in ~/.claude/projects/<the-project-slug>/memory. And it's a pretty useful feature of claude code in my opinion.