DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
World desk7 min

Can Bivack Run Coding Agents in a Persistent Cloud Sandbox?

Bivack gives each user a browser-accessible Lambda MicroVM with an S3 Files-backed home. Here’s how its persistence works, what credentials mean for team trust, and what operating the AWS stack entails.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Bivack lets you run selected coding agents in a per-user AWS Lambda MicroVM, then reconnect through a browser terminal or workbench to the same environment. Its home directory persists on Amazon S3 Files across MicroVM restarts. The trade-off is a self-managed AWS deployment, network-backed storage that the author says is slower than local disk, and a trust boundary that still includes credentials users choose to save in that home.

What Bivack puts in the cloud

Bivack is a self-hosted development sandbox described by its author, Gunnar Grosch. Instead of keeping an agent’s task tied to a laptop, an operator deploys AWS infrastructure and gives each user a Lambda MicroVM. The user can close a browser and reconnect later, or use another device, while returning to the same per-user machine and files.

As an Amazon Associate I earn from qualifying purchases.

The unit is one machine per user, not one machine per agent. Agents selected for that user share the machine, workspace, and files. That arrangement can suit work that needs a persistent shell and a common project directory; it does not give each agent a separate VM.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The implementation and cost examples below are Grosch’s account in an Ileventech article published September 21, 2026. They are not independent security tests, performance measurements, or current AWS price quotes.

#1 Best Overall
Sale
ASUS ROG Zephyrus Duo Gaming Laptop, 16” OLED ROG Nebula HDR 16:10 3K 120Hz/0.2ms, the Intel Core Ultra 9 386H Processor, NVIDIA GeForce RTX 5070Ti Laptop GPU, 32GB LPDDR5X, 1TB PCIe 4.0 NVMe M.2 SSD
  • DUAL-SCREEN ADVANTAGE - Enjoy a spacious workflow with a two 16-inch touch screen, 3K OLED ROG Nebula Display HDR that keeps games, chats, streams, tools, calendars in view—giving you more room to game, create, and multitask.
  • 5 MODES THAT MATCH WHATEVER YOU DO - Switch between laptop, dual-screen, book, and sharing so you can game, work, stream, code, read, or present in any environment, whether you’re at home or on the go. Enjoy tent mode for a new take on two person gaming.
  • POWER TO GAME AND CREATE - An Intel Core Ultra 9 386H processor with 16 cores, an NPU of 50+ TOPs, and NVIDIA GeForce RTX 5070 Ti Laptop GPU deliver immersive graphics, smooth gameplay, and the performance needed for demanding high-level creative work and intensive gaming sessions. Experience the power and creativity of AI in a Copilot + PC.
  • BUILT FOR MULTI-WORKFLOW - With 32GB LPDDR5X 8533 Mhz memory and a 1TB PCIe 4.0 SSD, the Zephyrus Duo handles multiple windows, software, and applications at once—making multitasking smooth whether you're gaming, creating, coding, or presenting.
  • REFINED CRAFTSMANSHIP - The CNC-milled aluminum chassis is carved from a single solid piece of metal, giving the Duo a stronger build with a premium finish. Paired with the new Stellar Grey color and iconic slash lighting across the lid, it delivers both durability and standout style.

How sign-in leads to a browser workspace

  1. Authenticate: The user signs in through Amazon Cognito. API Gateway validates the JWT.
  2. Find or create the user environment: A token Lambda function maps the verified user subject to an S3 Files access point and a MicroVM. Grosch says the function creates those resources on the first request.
  3. Connect: The function returns a short-lived token and the VM endpoint. A browser terminal client or self-hosted VS Code workbench connects to that machine over WebSocket.
  4. Mount the home: A MicroVM lifecycle hook mounts the user’s persistent home directory.

Why the terminal and editor use WebSockets

The client design follows an authentication constraint in the described Lambda MicroVM endpoint: it expects the token in the X-aws-proxy-auth header. Browser code can set a header for fetch requests or a WebSocket handshake, but ordinary page navigation and the page’s later subresource requests cannot supply that custom header. As Grosch explains it, that makes serving a conventional web IDE directly from the VM impractical in this setup. Bivack instead serves the browser interface separately and has its terminal and workbench connect to the VM using authenticated WebSockets.

What persists—and what does not

The MicroVM is described as disposable and suspendable; the user’s home is stored on S3 Files so it can be mounted again after a restart. This separates the lifetime of the machine from the lifetime of the user’s files. It also means filesystem activity depends on network-backed storage. Grosch explicitly warns that the home is slower than a local disk, so workloads that make heavy use of small, frequent file operations may feel different from a laptop’s SSD.

Persistence is useful for resuming work, but it is not the same as a backup or a guarantee against data loss. The described account establishes a persistent home across VM restarts, not a particular backup, recovery, or retention policy. An operator should decide separately how project data and user homes are backed up.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Samsung 14" Galaxy Chromebook Go Laptop PC Computer, Intel Celeron N4500 Processor, 4GB RAM, 64GB Storage, ChromeOS, XE340XDA-KA2US, Student Laptop, Silver
  • SLIM. LIGHTWEIGHT. READY TO GO: The all-new slim design is perfect for busy lives on the go.
  • SKILLFULLY DESIGNED. MILITARY TOUGH: Built with premium craftsmanship to withstand the occasional drop or ding.
  • ALL-DAY, ALL-IN-ONE CHARGING: Power through your school day – and beyond – with a long-lasting 12-hour battery.¹
  • 3X FASTER THAN THE PREVIOUS GENERATION OF WIFI: Crush your schoolwork in record time with Wi-Fi that’s three times faster than the previous generation of Wi-Fi.
  • YOUR PHONE AND CHROMEBOOK WORK BETTER TOGETHER: Easily transfer files between devices, and control your phone right from your Chromebook.

Understand the credential boundary before sharing it

Grosch says the sandbox does not have access to the AWS account that hosts the Bivack stack. That is a meaningful boundary around the deployment account, but it does not make the environment credential-free. Users may sign in to coding-agent providers or other services inside the sandbox; those credentials are saved under the persistent home and remain inside that user’s trust boundary.

For a team deployment, the operator owns the bucket containing users’ homes and can read teammates’ provider logins, according to the article. Treat the operator as trusted with that data. This arrangement may be unsuitable where policy requires that administrators cannot access user credentials, or where credentials must not persist on a shared service.

Agents, tools, and image changes

Grosch says the generated configuration enables Claude Code by default. Codex, OpenCode, and Kiro CLI are opt-in, as are some infrastructure command-line tools. Tools are packaged into the image rather than installed separately by each user into an ephemeral VM.

Rank #3
Acer Aspire Go 15 AI Ready Laptop | 15.6" FHD (1920 x 1080) IPS Display | AMD Ryzen 7 7730U | AMD Radeon Graphics | 16GB DDR4 | 512GB PCIe Gen4 SSD | Wi-Fi 6 | Windows 11 Home | AG15-42P-R9FW
  • Exceptional Performance and Productivity: Experience smooth and responsive performance powered by an AMD Ryzen 7 7730U processor and 16GB memory and 512GB SSD. Enjoy extended productivity thanks to exceptional battery life and the support of Copilot, your everyday AI companion.
  • Copilot in Windows - your AI Assistant: Do more, quicker than ever across multiple applications with the centralized generative AI assistance of Copilot in Windows Accessible with a single touch of the Copilot Key
  • Immersive Visuals: With its narrow bezel design the 15.6" 1080p Full HD IPS display is perfect for casual web browsing and watching movies or streaming, allowing for a sharp, detailed view of what's in front of you. And with Acer BluelightShield, lower the levels of blue light to lessen the negative effects of blue light exposure.
  • User-Friendly by Design: Seamlessly connect or charge your devices through a full-function USB Type-C port, while Wi-Fi 6 and HDMI 2.1 connectivity enhance your digital experiences to be faster, smoother, and more enjoyable.
  • Unlock More with AcerSense: Intuitive device control is available at the touch of a button with AcerSense, which manages battery life, storage, and apps for optimal performance. Acer TNR solution and Acer PurifiedVoice enhance your video calling experience to a new level of clarity and quality.

Changing the image’s tools triggers an image rebuild and VM recycle. Grosch reports builds taking five to ten minutes; that is an author-reported duration, not a benchmark or service-level guarantee. Because a recycle affects the machine, operators should account for rebuilds when managing active work, even though the persistent home is intended to remain available.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What deployment requires

The prerequisites and version numbers below are those listed in Grosch’s September 21, 2026 article, not a guarantee that they remain current. He says the deployment needs AWS CLI v2 2.35.10 or newer, AWS SAM CLI 1.163.0 or newer, Node.js 20 and npm, zip, Python 3, AWS authentication, and a region where Lambda MicroVMs are available. The article uses us-east-1 in examples; that example alone does not establish service availability in every region. Check current AWS service documentation, limits, and regional availability before choosing a deployment region.

The described flow is to clone the project, copy deploy.env.example to deploy.env, configure the AWS profile, region, and login email, then run the deployment script. Docker is not listed as a prerequisite because the image build is performed server-side.

Rank #4
Apple 2026 MacBook Neo 13-inch Laptop with A18 Pro chip: Built for AI and Apple Intelligence, Liquid Retina Display, 8GB Unified Memory, 256GB SSD Storage, 1080p FaceTime HD Camera; Blush
  • AN AMAZING MAC AT A SURPRISING PRICE — With an incredibly portable and durable aluminum design, up to 16 hours of battery life,* and the A18 Pro chip, MacBook Neo is ready to go wherever school takes you.
  • FOUR STUNNING COLORS. ONE DURABLE DESIGN — Choose from four beautiful colors — Silver, Blush, Citrus, or Indigo — each with a color-coordinated keyboard. And MacBook Neo is made with a durable recycled aluminum enclosure that helps it reach 60 percent recycled content by weight — the most ever in any Apple product.*
  • FLY THROUGH EVERYDAY ASSIGNMENTS — Whether you’re cramming for finals, using Apple Intelligence* to summarize class notes, creating presentations, or even playing the latest Apple Arcade game,* MacBook Neo delivers the performance and AI capabilities you need to get things done.
  • UP TO 16 HOURS OF BATTERY LIFE — MacBook Neo delivers all day battery life, so you can power through from early morning classes to late night study sessions without worrying about plugging in.
  • A VIBRANT 13-INCH DISPLAY* — The gorgeous Liquid Retina display on MacBook Neo supports 1 billion colors, so photos and videos pop and text is crisp for easy reading.
  1. Clone the Bivack project using its documented repository instructions.
  2. Copy deploy.env.example to deploy.env.
  3. Set the AWS profile, target region, and login email in deploy.env.
  4. Authenticate to AWS and run ./scripts/deploy.sh.
  5. Follow the project’s first-login flow; Grosch describes a temporary password for the initial sign-in.

The article also describes teardown, optional NAT configuration, budget email alerts, and break-glass tooling. Those are parts of the project’s deployment flow, not independently verified behavior. Review the project’s current instructions before applying or removing infrastructure, and confirm what will be deleted or retained—especially the persistent user homes.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Cost depends on more than whether a VM is active

Grosch describes MicroVM compute as billed while running and says suspended compute costs nothing; storage remains a cost. That is a useful way to think about the architecture, not a complete bill estimate. The total depends on the AWS services and configuration actually deployed, how long users run machines, storage usage, network traffic, and region. Check current AWS pricing rather than treating the author’s examples as quotes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For context only, the article’s deployment example sets an optional monthly AWS Budget to $25 when configured, with email alerts at 80% and 100%. Grosch also estimates a small NAT instance at a few dollars per month and a managed NAT Gateway at roughly ten times that amount. These are dated author estimates, not verified or generally applicable prices.

Best Value
Sale
ASUS Zenbook Duo Laptop (2026), Dual 14” OLED 3K 144Hz Touch Display, Intel Core Ultra 9 Processor 386H, Intel Graphics, 32GB RAM, 1TB SSD, Sleeve and Stylus Included, WiFi 7, Windows 11, Moher Gray
  • High-Performance DUO Take your productivity further in Windows 11 with the 16-core Intel Core Ultra 9 Processor 386H, delivering responsive multitasking and enhanced graphics performance. Paired with 32 GB RAM and 1 TB storage, demanding workloads stay smooth and efficient.
  • AI That Works Supercharge your productivity with 50 TOPS on Copilot, giving you instant file retrieval, quick summaries, faster searches, and more without the waits that break your flow.
  • Transforms in Seconds Switch modes fast with a magnetic keyboard and integrated kickstand. Move from dual-screen productivity to laptop or sharing mode in just a few seconds, keeping your workflow fluid wherever you are.
  • Immerse Your Senses Dual 3K 144 Hz ASUS Lumina OLED touchscreens with 100% DCI-P3 color deliver vivid clarity and up to 1000 nits HDR brightness, while the anti reflection coating and E Reading mode help reduce eye strain during extended use. Six speakers with Dolby Atmos support add rich, spacious sound.
  • All-Day Power A 99Wh battery setup keeps you moving through busy days, and fast-charge technology brings you to 60% in just 49 minutes.

How Bivack compares with other ways to run agents

Approach Environment and isolation Persistence and access Main trade-off
Local agent environment Agents, credentials, and source stay on the user’s own device. Work is tied to that device; the device must remain available for long-running tasks. Least cloud infrastructure to operate, but less convenient for switching devices or leaving long tasks running when the laptop is unavailable.
Hosted agent service The provider runs the task; environment control is more limited, and code is placed in the service provider’s account. Access and persistence depend on the service. Less infrastructure setup, in exchange for giving the provider more control over the execution environment and custody of code.
Self-managed VPS A familiar persistent host, but users share a host and kernel. The box must stay running; the author notes that its local home is lost if the box is lost. Grosch’s article estimates about $5 per month for a small VPS setup, but that dated estimate is not a current price quote. It also lacks Bivack’s per-user MicroVM arrangement.
Bivack One Lambda MicroVM per user; that user’s selected agents share the machine. Browser terminal and workbench reach the same machine; S3 Files backs the home across VM restarts. Requires operating an AWS stack and accepting network-backed home storage that the author says is slower than local disk.

The useful comparison is not just a monthly compute figure. Consider who controls the environment, where code and credentials live, what is isolated from what, whether work survives restarts or device changes, and who is responsible for keeping the system available. Also account for active compute, idle behavior, storage, networking, and filesystem performance.

Who is likely to benefit

Bivack is most compelling for a developer or team that wants a browser-accessible, persistent environment, prefers to operate its own AWS stack, and accepts that an infrastructure operator can access team homes. Its per-user VM model can separate users’ machines while allowing multiple selected agents for one user to share a workspace.

A local setup is simpler when the laptop is the intended home for source and credentials. A hosted service reduces infrastructure work if provider-run execution and code custody are acceptable. A VPS may be a more familiar persistent host when per-user MicroVMs and browser access are not worth the added AWS components. Bivack’s distinction is the combination of per-user Lambda MicroVMs, S3 Files-backed homes, and browser access—not a demonstrated promise of lower cost or stronger security.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.