41–50 of 58 posts
Why do I need this if I already have containers and k8s for running agents?
It is well known that containers do not provide you safe isolation. It is not their purpose. They share kernel and page cache with the host. Any kernel exploit gives to someone in a container potential root control of the host (see DirtyPipe, DirtyCow). That's why you need VM-level isolation.
I would really like to see a good local sandboxing solution in this space, something that is truly local-first. This is especially important since many coding models / agentic builders will eventually become lightweight enough to run them on-device instead of having to buy tokens and share user data with big LLM cloud providers.
what does Katakana add on top of Kata?
Earlier quoted context omitted.
It is well known that containers do not provide you safe isolation. It is not their purpose. They share kernel and page cache with the host. Any kernel exploit gives to someone in a container potential root control of the host (see DirtyPipe, DirtyCow). That's why you need VM-level isolation.
today i'm one of the lucky 10k https://xkcd.com/1053/
Nice, seems way cheaper to use than the new Cloudflare Sandbox SDK solution
I would really like to see a good local sandboxing solution in this space, something that is truly local-first. This is especially important since many coding models / agentic builders will eventually become lightweight enough to run them on-device instead of having to buy tokens and share user data with big LLM cloud providers.
What about this: https://github.com/apple/container
Earlier quoted context omitted.
True! GCP does. I haven't tested it yet. I didn't know D.O does. If anyone knows others, I'm interested too!
We (NanoVMs) can run (both unikernel and normal linux) virtualized workloads on plain old ec2 instances (eg: t2.small).
I would really like to see a good local sandboxing solution in this space, something that is truly local-first. This is especially important since many coding models / agentic builders will eventually become lightweight enough to run them on-device instead of having to buy tokens and share user data with big LLM cloud providers.
https://rstrict.cloud/ is a CLI built in Rust on top of the Landlock API for the Linux kernel. It lets you narrow the permission scope of an executable using simple command line wrappers.