Hacker News new | ask | show | jobs
by jboss10 19 days ago
Gondolin[1] is what you are describing. It's made by the same person who made the Pi coding agent and sends all of the agent's bash into a small QEMU vm.

[1](https://earendil-works.github.io/gondolin/
1 comments
binary132 18 days ago
He described a separate machine where the execution and context would be hosted, not local sandboxes. Did I misunderstand how Gondolin works?
link
jboss10 18 days ago
> Gondolin gives you that. Lightweight micro-VMs (QEMU by default, optional libkrun backend) boot in under a second on your Mac or Linux machine. The network stack and virtual filesystem are implemented entirely in JavaScript, giving you complete programmatic control over what the sandbox can access and what secrets it can use.
link
nextaccountic 12 days ago
> The network stack and virtual filesystem are implemented entirely in JavaScript

This is slightly insane

I suppose it will be slow too if the agent needs to grep over megabytes of data

link