Show HN: Locki – AI sandboxing for real-world projects

Hello HN! I was bothered that no existing sandboxing solution can run my $job project, due to the limitations of running inside an OCI container, or some sort of limited process like landlock / bubblewrap etc. My options were spawning a new VM per worktree, which takes minutes to boot and allocates a chunk of RAM... or build a custom solution which uses just a single VM plus LXC containers -- the kind of containers with a full init system, capable of running systemd services, OCI containers and even full Kubernetes distributions.

So here it is. Fresh container start takes <10s. Works best with VSCode, which will neatly show changes from all worktrees in the sidebar, letting you review, edit and commit them easily. Let me know what you think!

▲

tpemist 5 hours ago | parent [-]

hey this is great idea. Can you share what kind of $job project you're working on?

	▲	PufPufPuf 4 hours ago \| parent [-]
		Actually I can, it's open source: https://github.com/kagenti/adk It's an agent development platform. It needs MicroShift, which is notoriously not easy to run locally -- ADK makes it simple by using a prebuilt Lima VM for CLI deploy, but that doesn't work well in development.