eperot

6 ms·

1.
by eperot 3mo ago
gVisor is open-source, and `cuda-checkpoint` is freely available. gVisor's `runsc checkpoint` subcommand supports a `--save-restore-exec-argv` which lets you specify a program to execute before gVisor starts taking the process snapshot
2.
by eperot 3mo ago
Wrong headline order, right? Should read "Reduce GPU Cold Starts with gVisor Snapshotting".
3.
by eperot 3mo ago
Ah, I see the distinction. In my case, I was using the PulseAudio client+server with a network sink running in-sandbox, producing a set of audio samples that are then replayed by a PulseAudio client in the out-of-sandbox Rust application re
4.
by eperot 3mo ago
That's the approach I initially took, but experienced some combination of noticeable stuttering and latency regardless of which buffering strategy I tried... Had to switch to a shared memory ring buffer, along with some adaptive playba
5.
by eperot 3mo ago
Thanks. We're working on rootless network setup to make `runsc do --rootless` work with networking enabled when `passt` is installed right now. See issue #13337 (yes that's a cool issue number) which should unblock this. The tty i
6.
by eperot 3mo ago
Any reason why you wouldn't use gVisor's bwrap interface yet? We're working on it precisely to make DIY sandboxing on Linux as easy as possible in order to get Linux-sandboxing-at-home to mature beyond the current syscall-fil
7.
by eperot 5mo ago
An overkill fully-local multi-agent setup with gVisor sandboxing. Hope some folks here can appreciate the Evangelion vibes :)
8.
Magi: Multi-Agent GVisor Isolation(gvisor.dev)
7 points by eperot 5mo ago|1 comments
9.
by eperot 2y ago
I have been [working on one]( https://github.com/EtiennePerot/safe-code-execution )! The library is in [src/safecode/sandbox.py]( https://github.com/EtiennePerot/safe-code-execution/blo