Security●●Solid
Minimal Linux sandboxes to manage AI-Generated Code with ease
Embedded Rust sandbox with seccomp and DNS rebinding protection, no VM required.
Big BrainSolve My ProblemShip It
bugthesystem
101mo ago
Back to browse
GitHub Repository
Minimal Linux sandboxes for running untrusted code. Built for AI agents, build systems, and any scenario where you need to execute code you didn't write.
21 starsRust
Agentjail – Self Hosted Freestyle.sh
by ziyasal·Apr 19, 2026·2 points·0 comments
AI Analysis
●●●BangerWizardryBig BrainShip It
Landlock + seccomp-BPF sandboxing with preset configs beats rolling your own isolation.
Strengths
- •Rootless design with user namespaces eliminates setuid helper attack surface
- •Preset configurations for build, install, agent, GPU use cases reduce misconfiguration risk
- •Live forking via COW reflinks clones running jails in milliseconds for incremental builds
Weaknesses
- •Linux 5.13+ requirement excludes older enterprise environments still on LTS kernels
- •GPU passthrough marked experimental, not production-ready for ML workloads yet
Category
Target Audience
Backend engineers running untrusted code
Similar To
gVisor · Firecracker · Bubblewrap
Post Description
Minimal Linux sandbox for running untrusted code. Built for AI agents, build systems, and any scenario where you need to execute code you didn't write.
Similar Projects
AI/ML●●●Banger
Moltis – AI assistant with memory, tools, and self-extending skills
Single Rust binary, zero runtime deps, self-extending skills, local or routed LLMs.
WizardrySolve My Problem
fabienpenso
131524mo ago
Developer Tools●●Solid
Sandbox agents without losing your dev environment
Virtualenv-style sandboxing with namespace isolation for runaway LLM agents.
Big BrainNiche Gem
mixedbit
402mo ago
Developer Tools●●●Banger
BVisor – An Embedded Bash Sandbox, 2ms Boot, Written in Zig
gVisor-inspired—2ms userspace sandbox beats containers for ephemeral agent tasks.
WizardryBig Brain
edunteman
2493mo ago
Security●●●Banger
Drop – Linux sandboxing for LLM agents and untrusted code
Virtualenv for system isolation—your configs carry over but SSH keys stay protected.
Big BrainSolve My ProblemZero to One
mixedbit
102mo ago
AI/ML●●Solid
Multi-agent coding assistant with a sandboxed Rust execution engine
Firecracker MicroVM isolation beats Copilot Workspace on security, but category's saturated.
WizardryBold Bet
chrismeurer
1032mo ago