3 ms·
What are the current best options for sandboxed execution environments? HuggingFace seems to have a tie-up with E2B, although by default smolagents runs somethi
by darkteflon 1y ago
What are the current best options for sandboxed execution environments? HuggingFace seems to have a tie-up with E2B, although by default smolagents runs something ephemeral in-process. I feel like there must be a good Docker container solution to this that doesn’t require signing up to yet another SaaS. Any recommendations?
- colonCapitalDee 1y agoTry gVisor
- codethief 1y agoThat sounds like a category error? An alternative OCI runtime is not what GP asked for.
- colonCapitalDee 1y agoUsing gVisor to run a Docker container creates a sandboxed execution environment inside the Docker container
- codethief 1y agoI am still not following. Where was OP talking about wanting to nest containers? Slightly off-topic, on the topic of nesting containers: Have you run gVisor successfully in such a setup? I seem to remember using gVisor to run the child container is not that easy and gVisor might still need some syscalls(?) that the parent container might not allow. I might be misremembering, though.
- ATechGuy 1y agoAre you looking for an open-source sandboxing solution? Self hosting is available for E2B. You still have to subscribe to a SaaS for ephemeral cloud compute though.