Sandboxing AI Agents in Linux

1. agent-vm

   1 3 91 7.1 Shell

   Run AI agents in safe VMs scoped to a local folder

   

   This is the way to go! On my side I've build a very small `claude-vm` wrapper to run each instance in a VM with Lima: https://github.com/sylvinus/agent-vm

2. AppSignal

   www.appsignal.com featured

   Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.

   

3. try

   2 14 5,465 7.0 Shell

   Control and manipulate a command's effects before modifying your live system

   

   > Part #2 to me, I also want observability as to what the agent changed.

   You could potentially combine https://github.com/binpash/try with bubblewrap (I'm not sure how well they compose and as the docs say it isn't a full sandbox).

   The good (and bad because it's confusing and can lead to surprises if misconfigured) thing about Linux containers is all the pieces of containers can be used independently. The "try" tool lets you use the overlay part of containers on your host system, just like Bubblewrap lets you combine the namespacing parts of containers with your host system.

4. bubblewrap

   3 104 8,222 7.5 C

   Low-level unprivileged sandboxing tool used by Flatpak and similar projects

   

   Bubblewrap supports overlayfs mounts [1]. Seems like you should be able to replicate that flow with it.

   [1] https://github.com/containers/bubblewrap/issues/412

Suggest a related project