alt Hacker NewsNeat! I wasn’t aware that Docker has an embedded microVM option.
I use Kata Containers on Kubernetes (Firecrackers) and restrict network access with a proxy that supports you to block/allow domain access. Also swap secrets at runtime so agents don’t see any secrets (similar to Deno sandboxes)
If anybody is interested in running agents ok K8S, here is my shameless plug: https://github.com/lobu-ai/lobu
Kata containers are the right way to go about doing sandboxing on K8s. It is very underappreciated and, timing-wise, very good. With ec2 supporting nested virtualization, my guess is there is going to be wide adoption.