agos

An unattended Linux desktop for AI agents. A Debian 13 VM that boots, configures itself from cloud-init and hands an agent a full X11 desktop to drive, with no human input at any point. When you want in, it is one browser tab away, with a takeover button that pauses the agent.

Install on Proxmox VE

Paste this into the Proxmox host's shell, as root:

sh
bash -c "$(curl -fsSL https://kroq.dev/tools/agos-proxmox.sh)"

A guided setup asks how you want to reach the desktop (Tailscale, LAN or an SSH tunnel), which of your SSH keys may log in, and optionally for API keys; Advanced lets you pick storage, bridge and sizing. Nothing changes until you confirm the summary. It then downloads the release image, checks its signed checksums, creates the VM, waits for first boot, takes a golden snapshot to roll back to and shows the desktop URL and password. Proxmox VE 8 or 9 on amd64; arm64 needs 9.2 or later. Read the script.

Unattended

Flags skip the wizard, for scripts and agents. Secrets go in a root-only file, never on a command line.

bash
cat > /root/agos.secrets <<'EOF'
TS_AUTHKEY=tskey-auth-...        # join your tailnet, serve the desktop over HTTPS
ANTHROPIC_API_KEY=sk-ant-...     # for Claude Code inside the VM
EOF
chmod 600 /root/agos.secrets

curl -fsSLO https://kroq.dev/tools/agos-proxmox.sh
bash agos-proxmox.sh --dry-run
bash agos-proxmox.sh --yes --ssh-key-file /root/.ssh/authorized_keys

What you get

  • agentdScreenshots and input over MCP and REST. Accepts Anthropic, OpenAI and Gemini computer-use tool calls as they are.
  • TakeoverWatch in the KasmVNC web client. Take over and the agent's input is refused until you hand back.
  • Zero-touchNo boot menu, login screen, first-run wizards, keyring or update prompts.
  • AgentsClaude Code preinstalled and pre-seeded, with the desktop registered as its MCP server.
  • T3 CodeOn the desktop's second workspace, out of the agent's view. Sign in to T3 Connect once (agos t3 link) to drive it from your phone.

Manage

bash
bash agos-proxmox.sh status
bash agos-proxmox.sh reset --name agos --yes    # roll back to the golden snapshot
bash agos-proxmox.sh destroy --name agos --yes

The same image (amd64 and arm64) runs on libvirt, Incus, UTM, VirtualBox and Hyper-V. To have an agent do the install, point it at deploy/install.md.

Source

Codex for Linux

An unofficial installer for OpenAI's Codex desktop app on Linux, tuned for Wayland stability. Built and tested on CachyOS (Arch Linux).

Install

sh
curl -fsSL https://kroq.dev/tools/codex-for-linux.sh | sh

The script installs dependencies, downloads Codex.dmg, builds the Linux wrapper, sets up the CLI and creates a desktop launcher. Read the script.

Supported distros

  • Arch familyCachyOS, Arch Linux, EndeavourOS, Manjaro, Garuda
  • Fedora familyFedora, Nobara
  • Debian, UbuntuUbuntu 22.04+, Debian 12+, Linux Mint 21+, Pop!_OS 22.04+
  • openSUSETumbleweed and recent Leap

The installer uses standard Linux tooling (curl, python3, 7z, make, g++, tar, xz), rebuilds native modules locally, and bootstraps a portable Node.js 20 when the system version is missing or too old.

Installed paths

  • App directory~/.local/share/codex-linux-wayland-stable/codex-linux
  • Launcher script~/.local/share/.../codex-linux/codex-linux.sh
  • Desktop entry~/.local/share/applications/codex-desktop.desktop
  • CLI shortcut~/.local/bin/codex-desktop

Rendering flags

bash
CODEX_USE_X11_ON_WAYLAND=1 codex-desktop  # force X11 under Wayland
CODEX_DISABLE_GPU=1 codex-desktop          # disable GPU acceleration
CODEX_OZONE_PLATFORM=wayland codex-desktop # force Wayland directly
Source