Requires login. Garbage.

binsquare 2 hours ago | parent | next [-]

I build a OSS lightweight, portable VM for those that don't want lock ins: https://github.com/smol-machines/smolvm

I have a solution based on Nix that can be used to generate reproducible container images: https://github.com/nothingnesses/agent-images . It lets you customise which agents, harnesses, or any other packages you want included in the VM and it uses `agent-box` for sandboxing.

▲

dizhn 35 minutes ago | parent | prev [-]

This looks like gvisor but is a vm like firecracker right? Any reason you did not want to use firecracker?

(I am testing this now as a backend for my pet project which currently supports firecracker and gvisor. No network.)

	▲	binsquare 9 minutes ago \| parent [-]
		It's a batteries included alternative to firecracker with a couple of new ideas tossed into the mix i.e. portable like a container (bake into a single file and rehydrate the vm anywhere), dynamic resource allocation, etc.

▲

Alifatisk 2 hours ago | parent | prev [-]

What? Does using sbx require login? Bummer.

▲

dSebastien 2 hours ago | parent [-]

Yes and they have a specific subscription for managing sandbox policies across the enterprise: Docker AI Governance

	▲	dSebastien 2 hours ago \| parent [-]
		You can create those manually but if you want to enforce those then you need the subscription