undefined | Better HN

0 pointsaussieguy12342mo ago0 comments

If you're on Linux, you can run AI agents in Firejail to limit access to certain folders/files.

0 comments

Does it allow access to GPUs and all system resources? That is unfortunately a limitation a lot of these sandboxes often have and you need to run a container or vm to get that.

nezhar2mo ago

Looks interesting. How does this compare to a container?

aussieguy1234OP2mo ago

It uses Linux kernel namespaces instead of chroot (containers are just fancy Liunx chroot)

samlinnfer2mo ago

Ackually, “containers” on linux are usually implemented using linux namespaces instead of chroot.

j / k navigate · click thread line to collapse