3 ms·
What VM do you run it in? as context, I build a light weight portable vm designed for this purpose, so genuinely curious.
by binsquare 2mo ago
What VM do you run it in?
as context, I build a light weight portable vm designed for this purpose, so genuinely curious.
- dist-epoch 2mo agoGiven that people use VMs to sandbox agents of Mac/Windows/Linux, what does portable mean?
- binsquare 2mo agoi have a mechanism to package a VM into a .smolmachine file that you can rehydrate into a prepared vm akin to a container image.
- worldsayshi 2mo agoI've tried both incus and firecracker. Both seem to work well after initial script setup. I've got the impression that firecracker should be a fairly safe option for such use cases.
- embedding-shape 2mo agoI'm using a container. The risk isn't exactly "agent leverages 0-day against you to steal all your data" but more "agent mistakenly though $HOME was theirs and deleted it" so as long as you "copy data in > copy data out" without bind-mounting or automatically sync files, container works just fine for "isolating" them.