Interesting from a Docker perspective, but I’m more interested in it as a sandbo... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

Igor_Wiwi 3 months ago | parent | context | favorite | on: macOS Container Machines

Interesting from a Docker perspective, but I’m more interested in it as a sandbox for AI agents and untrusted code execution.

I wrote about that angle here: https://igorstechnoclub.com/sandbox-exec/

Feels like the spiritual successor to sandbox-exec, but with VM-level isolation.

avel 3 months ago [–]

Yes, that article states that as well under limitations: "Deprecation status: While functional, Apple discourages its direct use in favor of App Sandbox for developers."

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact