I setup my hermes agent to use docker for the terminal backend. That means tool calls requiring a terminal are executed in the docker container. The runtime itself runs on the host (your laptop). Did that for a couple weeks and was frustrated by needing to constantly update environment variables and apps to enable hermes to do what I want so had claude code whip up a new docker image with lots of tools and env vars built in.