Sandbox for Agentic Application With Cloud Native Stack
summary
Builds a self-hosted agent sandbox using agent-sandbox, Kata Containers, containerd on Kubernetes plus Dragonfly and Nydus for lazy image distribution and an optional PVM kernel driver. Claims a working demo assembled in about a week, with warm-start latency around 1.4 seconds for prewarmed sandboxes, but the live demo shows websocket/terminal hiccups and PVM not tested in that environment yet. Provides CRD-based lifecycle control, automated cleanup, and open source artifacts and scripts.
AI-written summary · about
chapters (9)
- 0:00Agent sandbox project intro
- 1:03Agent sandbox needs cloud native
- 5:35Sandbox lifecycle and isolation
- 8:49VM sandbox with Kata Containers
- 11:18Building with open source stack
- 17:02Demo setup and environment
- 23:07Agent sandbox in production
- 27:53Future plans and contributions
- 29:19Q&A
related talks
14mTaming Agentic AI: Run Rogue Code Safely on Kubernetes with Agent Sandbox
28mSecure AI Agent Sandboxing With OpenStack Zun and Kata Container
25mFrom Cloud To AI: How Kata Containers 4.0 Reinvents the Sandbox for the Agent Era
12mDocker Sandboxes for AI
25mCloud-Native Sandboxes for Microservices: Understanding New Threats and Attacks
39mTrust, but Sandbox: Securing AI Agents in Kubernetes
05mProject Lightning Talk: Run Sandbox Securely and Cost-Effectively With OpenKruise Agents
40mArrakis: How To Build An AI Sandbox From Scratch