Agentjail - self-hosted Linux sandbox for AI code
Minimal Linux sandbox for running untrusted code, designed for AI agents and build systems. Self-hosted alternative to Freestyle.sh-style code execution services.
This entry doesn't have a long-form writeup yet. Follow the source link above for the full context.
Featured in
Related entries
smolvm - portable lightweight VMs in a single file
Open-source CLI for sub-second VMs on macOS (Hypervisor.framework) and Linux (KVM) via libkrun. Sandboxes untrusted code with hardware isolation and packs stateful environments into a single .smolmachine file.
CubeSandbox - sub-60ms self-hosted E2B alternative
Open-source sandbox runtime for LLM-generated code built on RustVMM and KVM. Targets sub-60ms cold starts with full kernel isolation, designed as a self-hostable replacement for closed E2B-style services.
stereOS - hardened Linux for AI agents
Nix-based Linux distribution purpose-built for running AI agents. Hardened defaults and an immutable base aimed at sandboxing autonomous coding agents.
sandboxed.sh - self-hosted agent sandbox orchestrator
Self-hosted Rust orchestrator that runs Claude Code and OpenCode inside isolated Linux workspaces, with skills, configs, and encrypted secrets stored in a git repo.