Viewing profile — eperot

gVisor is open-source, and `cuda-checkpoint` is freely available. gVisor's `runsc checkpoint` subcommand supports a `--save-restore-exec-argv` which lets you specify a program to e…

Wrong headline order, right? Should read "Reduce GPU Cold Starts with gVisor Snapshotting".

Ah, I see the distinction. In my case, I was using the PulseAudio client+server with a network sink running in-sandbox, producing a set of audio samples that are then replayed by a…

That's the approach I initially took, but experienced some combination of noticeable stuttering and latency regardless of which buffering strategy I tried... Had to switch to a sha…

Thanks. We're working on rootless network setup to make `runsc do --rootless` work with networking enabled when `passt` is installed right now. See issue #13337 (yes that's a cool …

Any reason why you wouldn't use gVisor's bwrap interface yet? We're working on it precisely to make DIY sandboxing on Linux as easy as possible in order to get Linux-sandboxing-at-…

An overkill fully-local multi-agent setup with gVisor sandboxing. Hope some folks here can appreciate the Evangelion vibes :)

I have been [working on one]( https://github.com/EtiennePerot/safe-code-execution )! The library is in [src/safecode/sandbox.py]( https://github.com/EtiennePerot/safe-code-executio…