<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
    <title>isolation</title>
    <link rel="self" type="application/atom+xml" href="https://links.biapy.com/guest/tags/1505/feed"/>
    <updated>2026-07-28T07:24:33+00:00</updated>
    <id>https://links.biapy.com/guest/tags/1505/feed</id>
            <entry>
            <id>https://links.biapy.com/links/12465</id>
            <title type="text"><![CDATA[gVisor]]></title>
            <link rel="alternate" href="https://gvisor.dev/" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/12465"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[The Container Security Platform.
 Application Kernel for Containers.

gVisor provides a strong layer of isolation between running applications and the host operating system. It is an application kernel that implements a Linux-like interface. Unlike Linux, it is written in a memory-safe language (Go) and runs in userspace.

gVisor includes an Open Container Initiative (OCI) runtime called runsc that makes it easy to work with existing container tooling. The runsc runtime integrates with Docker and Kubernetes, making it simple to run sandboxed containers.

- [gVisor @ GitHub](https://github.com/google/gvisor).]]>
            </summary>
            <updated>2026-04-08T14:31:29+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/12461</id>
            <title type="text"><![CDATA[Hazmat]]></title>
            <link rel="alternate" href="https://github.com/dredozubov/hazmat" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/12461"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[Full autonomy. Controlled environment.
OS-level containment for AI coding agents on macOS.

 macOS containment for AI agents — user isolation, kernel sandbox, pf firewall, DNS blocklist, backup/rollback. TLA+ verified.

AI coding agents are most useful when you let them work autonomously. But full autonomy means the agent runs with your full privileges, your credentials, your files.

Hazmat makes that safe.

Related contents:

- [Hazmat - Vos agents IA en cage sous macOS @ Korben :fr:](https://korben.info/hazmat-sandbox-macos-agents-ia.html).]]>
            </summary>
            <updated>2026-04-13T09:17:43+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/12431</id>
            <title type="text"><![CDATA[Coasts]]></title>
            <link rel="alternate" href="https://coasts.dev/" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/12431"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[Containerized Hosts for AI Agents.
 Localhost service isolation and orchestration for git worktrees. 

Coasts (Containerized Hosts) is a CLI tool with a local observability UI for running multiple isolated instances of a full development environment on a single machine. It works out of the box with your current setup: no changes to your existing application code, just a small Coastfile at your repo root. If you already use Docker Compose, Coasts can boot from your existing docker-compose.yml; if you do not use Docker or Compose, Coasts works just as well.

- [Coasts @ GitHub](https://github.com/coast-guard/coasts).]]>
            </summary>
            <updated>2026-04-07T05:41:33+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/12245</id>
            <title type="text"><![CDATA[Agent Sandbox]]></title>
            <link rel="alternate" href="https://agent-sandbox.sigs.k8s.io/" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/12245"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes. 

- [Agent Sandbox @ GitHub](https://github.com/kubernetes-sigs/agent-sandbox).

Related contents:

- [Running Agents on Kubernetes with Agent Sandbox @ Kubernetes blog](https://kubernetes.io/blog/2026/03/20/running-agents-on-kubernetes-with-agent-sandbox/).
- [Why sandboxing your agent is not enough @ CNCF](https://www.cncf.io/blog/2026/07/07/why-sandboxing-your-agent-is-not-enough/).]]>
            </summary>
            <updated>2026-07-15T07:56:22+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/10568</id>
            <title type="text"><![CDATA[microbox]]></title>
            <link rel="alternate" href="https://github.com/HQarroum/microbox" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/10568"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[📦 Lightweight, ephemeral, sandboxes for Linux.

Create lightweight sandboxes for Linux with host isolation, rootfs images, and networking.

Microbox is a sandbox runtime that creates ephemeral and isolated execution environments on Linux by combining specific kernel features such as namespaces, cgroups, seccomp, and capabilities. It provides lightweight sandboxes to run container-like applications securely.]]>
            </summary>
            <updated>2025-10-07T06:29:53+00:00</updated>
        </entry>
            <entry>
            <id>https://links.biapy.com/links/2517</id>
            <title type="text"><![CDATA[Apache Mesos]]></title>
            <link rel="alternate" href="https://mesos.apache.org/" />
            <link rel="via" type="application/atom+xml" href="https://links.biapy.com/links/2517"/>
            <author>
                <name><![CDATA[Biapy]]></name>
            </author>
            <summary type="text">
                <![CDATA[Program against your datacenter like it’s a single pool of resources.

Apache Mesos is a cluster manager that provides efficient resource isolation and sharing across distributed applications, or frameworks. It can run Hadoop, Jenkins, Spark, Aurora, and other frameworks on a dynamically shared pool of nodes.

Apache Mesos abstracts CPU, memory, storage, and other compute resources away from machines (physical or virtual), enabling fault-tolerant and elastic distributed systems to easily be built and run effectively. 

- [Apache Mesos @ GitHub](https://github.com/apache/mesos/).
- [\#302.src - Clusters: L&amp;#039;orchestrateur universel avec Benjamin Chastanier @ &amp;lt;ifttd&amp;gt; :fr:](https://www.ifttd.io/episodes/clusters).]]>
            </summary>
            <updated>2025-08-28T22:57:01+00:00</updated>
        </entry>
    </feed>
