AI agent sandbox: root inside disposable real-boot Linux VMs. The rig grants the driving account no host sudo, /dev/kvm or libvirt access; deny-by-default egress with a package cache; reset from a pinned base.
linux devops systemd integration-testing self-hosted kvm qemu libvirt virtual-machines selinux infrastructure-testing golden-image ai-agent agent-sandbox coding-agents network-egress root-environment destructive-testing distro-testing
-
Updated
Jul 31, 2026 - Shell