I have a similiar setup, but streamlined way more.

1. I just use docker on my Linux dev box to create disposable containers that my agents can do work sandbox’d inside of. But, Id like to eventually try out Amazon’s firecracker instead as a way to create thin linux VMs on the server machine.

2. I use Github Copilot as my AI distribution subscription, as this has first class integration with VS Code and allows me to easily rollback code changes, and click to preview inside of vscode natively.

3. I lock down all commands my agents can run behind MCP, instead of “can do anything” access to the terminal, my agents have an explicit set of MCP tools that wrap terminal commands, with params. This dramatically improves keeping the agent on the rails and avoids common issues like it getting very grep hungry and prepping files constantly (I return a 1 line warning anytime the agent invokes the grep tool on a file less than 200 lines in length, instead of results)

This simplifies a lot, I can manage a preset set of plugins and etc installed on the vscode instance via a dockerfile + docker conpose, letting me define a bespoke set of installed tools for a given project.

Can’t wait to have someone release a T-Shirt written:

This prompt should have been a script !!!

😑😑😑