3 ms·
I've been using a VM for a sandbox, just to make sure it won't delete my files if it goes insane. With some host data directories mounted read only inside the
by dist-epoch 1y ago
I've been using a VM for a sandbox, just to make sure it won't delete my files if it goes insane.
With some host data directories mounted read only inside the VM.
This creates some friction though. Feels like a tool which runs the AI agent in a VM, but then copies it's output to the host machine after some checks would help, so that it would feel that you are running it natively on the host.
- jitl 1y agoThis is very easy to do with Docker. Not sure it you want the vm layer as an extra security boundary, but even so you can just specify the VM’s docker api endpoint to spawn processes and copy files in/out from shell scripts.
- simonw 1y agoHave you tried giving the model a fresh checkout in a read-write volume?
- dist-epoch 1y agoHmm, excellent idea, somehow I assumed that it would be able to do damage in a writable volume, but it wouldn't be able to exit it, it would be self-contained to that directory.