# nono mit Homebrew, Nix installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für nono in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:nono ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install nono ``` Evidenz: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#nono ``` Evidenz: nixpkgs package indexes: pkgs/by-name/no/nono/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Paketfakten - **Paketschlüssel:** brew:nono - **Paketmanager:** Homebrew - **Version:** 0.71.0 - **Quellzusammenfassung:** Capability-based sandbox shell for AI agents with OS-enforced isolation - **Homepage:** - **Repository:** - **Zuletzt aktualisiert:** 2026-07-31T16:35:42Z - **Generiert:** 2026-08-03T19:37:03+00:00 ## Executables - nono (Alias) ## Installationsverhalten - Bottle: nicht verfügbar ## Version und Aktualität - Seite generiert: 2026-08-03 - Manager-Version: 0.71.0 ## Projektgeschichte und Nutzung nono is a capability-based sandbox CLI and SDK project for AI agents, MCP tools, and LLM workloads. Its docs describe a secure, kernel-enforced sandbox with capability-based isolation, secure key management, rollback, and an immutable audit chain. ### Projektgeschichte The GitHub repository was created on 2026-01-31. Public launch material posted on 2026-02-02 framed nono as a response to local AI coding agents running with the user's full filesystem and network permissions. The core design uses kernel primitives instead of a container runtime: Landlock on Linux and Seatbelt on macOS. The project also exposes SDK directions beyond the CLI, with docs for a Rust core library plus Go, TypeScript, and Python integration paths. Release activity accelerated quickly in 2026. GitHub release metadata shows v0.66.0 published on 2026-06-29, and Homebrew packaged the same stable version in its 2026-07-01 formula data. ### Adoptionsgeschichte nono is young, but it had already become unusually visible for a 2026 security CLI: the GitHub repository had thousands of stars by 2026-07-01, Homebrew reported thousands of installs across 90 and 365 day windows in its 2026-07-01 formula data, and discussion/examples focus on sandboxing AI coding agents rather than generic process confinement. Because the project is close to the AI-agent security wave, adoption should be treated as early-stage and volatile. The reliable source-backed claim is that it had rapid package-manager and GitHub traction by mid-2026, not that it had become a mature standard. ### Wie es verwendet wird Typical CLI usage wraps an agent or command with explicit filesystem and network capabilities: examples include `nono run --allow . -- claude`, separate `--allow` and `--write` paths, `--net-block`, and `--dry-run`. The docs and launch post also describe default protection for sensitive paths such as SSH keys, AWS credentials, and shell configs. Package users reach for it when they want OS-enforced guardrails around an AI agent, build step, test run, or data-processing command without building a container image. The important operational model is that child processes inherit restrictions once the sandbox is applied. ### Warum Paket-Nerds sich dafür interessieren nono is notable because it packages a security boundary as a normal CLI wrapper for developer workstations. For package nerds, the interesting part is not only the Rust binary but the distribution of OS-specific confinement behavior through one command: Landlock-backed Linux behavior, Seatbelt-backed macOS behavior, and formula variants that differ by platform dependencies. ### Zeitleiste - 2026-01-31: GitHub repository created. - 2026-02-02: introductory post published. - 2026-06-29: v0.66.0 release published. - 2026-07-01: Homebrew formula data listed stable 0.66.0. ### Related projects - Related concepts and projects include Linux Landlock, macOS Seatbelt, AI coding agents such as Claude Code and OpenCode, MCP workloads, Docker, and local sandbox wrappers. ### Quellen - - - - - - - ## Sicherheitshinweise generalized runtime or code generation signal. - **Geiger-Risiko:** yellow / mittel - generalized runtime or code generation signal ## Andere Paketmanager-Einträge - Nix - nono: normalized package name match | nixpkgs package indexes: pkgs/by-name/no/nono/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/nono.yml](https://github.com/mxcl/pkgdb/blob/main/combined/nono.yml) ## Quellen - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph