6 ms·

This is why I started https://nono.sh https://nono.sh , agents start with zero trust in a kernel isolated sandbox.

• js4ever 8mo ago
  What's the benefit over using docker?
  • bardsore 8mo ago
    Can't speak for the benefits of https://nono.sh/ https://nono.sh/ since I haven't used it, but a downside of using docker for this is that it gets complicated if you want the agent to be allowed to do docker stuff without giving it dangerous permissions. I have a Vagrant setup inspired by this blogpost https://blog.emilburzo.com/2026/01/running-claude-code-dangerously-safely/ https://blog.emilburzo.com/2026/01/running-claude-code-dange..., but a bug in VirtualBox is making one core run at 100% the entire time so I haven't used it much.
    • emilburzo 8mo ago
      > but a bug in VirtualBox is making one core run at 100% the entire time FYI they fixed it in 7.2.6: https://github.com/VirtualBox/virtualbox/issues/356#issuecomment-3817823550 https://github.com/VirtualBox/virtualbox/issues/356#issuecom...
• indigodaddy 8mo ago
  I had O4.5 build me this project to throw on a VPS or server, works well for me: https://github.com/jgbrwn/vibebin https://github.com/jgbrwn/vibebin