{"slug": "microsandbox", "name": "microsandbox", "category": "infra", "category_name": "Infrastructure and DevOps", "description": "", "recommenders": 3, "commenters": 5, "warners": 0, "score": 3.366, "rising": 2.67, "first": "2026-06-06", "latest": "2026-09-23", "why": "microsandbox by default speak ssh without you needing to have a ssh server in the vm.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 1, "compare": 1, "warn": 0}, "spark": [0, 0, 0, 0, 0, 0, 0, 1, 0, 2, 1, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "microsandbox by default speak ssh without you needing to have a ssh server in the vm.", "icon": true, "domain": null, "github_repo": "github.com/superradcompany/microsandbox", "official_url": "https://github.com/superradcompany/microsandbox", "pricing": "", "aliases": ["microsandbox"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 797156722, "item_id": 49822295, "url": "https://news.ycombinator.com/item?id=49822295", "by": "dbmikus", "date": "2026-09-23", "stance": "recommend", "quote": "Use your favorite VMM / hypervisor (likbrun, smolvm, microsandbox, etc).", "excerpt": "You don't need to do this on a cloud, you can get the same type of VM and network jail running on your own computer. The important parts are: 1. a VMM hypervisor 2. a network proxy / gateway Use your favorite VMM / hypervisor (likbrun, smolvm, microsandbox, etc). They give you control over the network interface or let you inject your own network layer. The network proxy can handle all the ingress/egress rules, creden", "context": "builds open core tools for sandboxed agents", "use_case": "sandboxing agents in VMs", "switched_from": "", "story": "Cloud Agents Are Inevitable AI Prisons"}, {"id": 791643298, "item_id": 49477706, "url": "https://news.ycombinator.com/item?id=49477706", "by": "vollbrecht", "date": "2026-08-28", "stance": "recommend", "quote": "microsandbox by default speak ssh without you needing to have a ssh server in the vm.", "excerpt": "step 1) create a Dockerfile with claude-code / pi.dev + acp_agents + whatever dev env you need. step 2) use microsandbox to create a fs image from that Dockerfile image. ( All secrets you need inside the vm live only on the host and are injected in the tcp stream on egress) step 3) microsandbox by default speak ssh without you needing to have a ssh server in the vm. You can proxy forward everything through it if you ", "context": "", "use_case": "sandboxing AI agents in VMs", "switched_from": "", "story": "AI Agent Has Root"}, {"id": 789538193, "item_id": 49346137, "url": "https://news.ycombinator.com/item?id=49346137", "by": "Bnjoroge", "date": "2026-08-18", "stance": "recommend", "quote": "smolvm or microsandbox are great options", "excerpt": "If you want something cross-platform, smolvm or microsandbox are great options(built on top of libkrun vmm)! If you are looking for linux-only, the typical choices are firecracker-based solutions.", "context": "", "use_case": "cross-platform microVMs", "switched_from": "", "story": "Ask HN: Alternatives to GitHub"}, {"id": 779023825, "item_id": 48688989, "url": "https://news.ycombinator.com/item?id=48688989", "by": "dbmikus", "date": "2026-06-26", "stance": "recommend", "quote": "friendly layers on top of it like https://microsandbox.dev/", "excerpt": "Why do you want to self-host vs. using one of the many providers out there? Daytona, E2B, OpenComputer, Freestyle, Blaxel, Vercel, Modal, Cloudflare, Tensorlake, Superserve, etc. etc. Some of them work by pre-purchasing credits, so you can control the blast radius of spend. Also, if you want a more embedded sandbox runtime as a library instead of a daemon + REST API, you can check out libkrun (and friendly layers on ", "context": "", "use_case": "sandboxes", "switched_from": "", "story": "Run isolated sandboxes with full lifecycle control: AWS introduces MicroVMs"}]}], "caveats": [], "who": [{"by": "dbmikus", "context": "builds open core tools for sandboxed agents", "url": "https://news.ycombinator.com/item?id=49822295", "date": "2026-09-23"}], "tags": [], "use_cases": ["sandboxing agents in vms", "running agents in microvm", "sandboxing ai agents in vms", "cross-platform microvms", "sandboxes", "agent sandboxing"], "compared": [{"slug": "smolvm", "name": "smolvm", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "libkrun", "name": "libkrun", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49820267", "title": "Cloud Agents Are Inevitable AI Prisons", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49801329", "title": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49477311", "title": "AI Agent Has Root", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49331033", "title": "Ask HN: Alternatives to GitHub", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48642510", "title": "Run isolated sandboxes with full lifecycle control: AWS introduces MicroVMs", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48413629", "title": "Ask HN: What is your (AI) dev tech stack / workflow? (June 2026)", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {"compare": 1, "recommend": 1}, "2026-07": {}, "2026-08": {"recommend": 2}, "2026-09": {"neutral": 1, "recommend": 1}, "2026-10": {}}, "quotes": [{"id": 797156722, "item_id": 49822295, "url": "https://news.ycombinator.com/item?id=49822295", "by": "dbmikus", "date": "2026-09-23", "stance": "recommend", "quote": "Use your favorite VMM / hypervisor (likbrun, smolvm, microsandbox, etc).", "excerpt": "You don't need to do this on a cloud, you can get the same type of VM and network jail running on your own computer. The important parts are: 1. a VMM hypervisor 2. a network proxy / gateway Use your favorite VMM / hypervisor (likbrun, smolvm, microsandbox, etc). They give you control over the network interface or let you inject your own network layer. The network proxy can handle all the ingress/egress rules, creden", "context": "builds open core tools for sandboxed agents", "use_case": "sandboxing agents in VMs", "switched_from": "", "story": "Cloud Agents Are Inevitable AI Prisons"}, {"id": 796869969, "item_id": 49804373, "url": "https://news.ycombinator.com/item?id=49804373", "by": "gregwebs", "date": "2026-09-22", "stance": "neutral", "quote": "uses microsandbox (libkrun) to run inside a tiny and fast VM", "excerpt": "Glad to see this coming with gVisor support to help secure the Kernel- IMHO we should expect frontier models to find Kernel exploits. I am working on a project similar in spirit that uses microsandbox (libkrun) to run inside a tiny and fast VM. It includes other security properties that are needed for some workloads. * network allow lists * credential masking * github allow list https://github.com/gregwebs/agent-vm/#", "context": "", "use_case": "running agents in microVM", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 791643298, "item_id": 49477706, "url": "https://news.ycombinator.com/item?id=49477706", "by": "vollbrecht", "date": "2026-08-28", "stance": "recommend", "quote": "microsandbox by default speak ssh without you needing to have a ssh server in the vm.", "excerpt": "step 1) create a Dockerfile with claude-code / pi.dev + acp_agents + whatever dev env you need. step 2) use microsandbox to create a fs image from that Dockerfile image. ( All secrets you need inside the vm live only on the host and are injected in the tcp stream on egress) step 3) microsandbox by default speak ssh without you needing to have a ssh server in the vm. You can proxy forward everything through it if you ", "context": "", "use_case": "sandboxing AI agents in VMs", "switched_from": "", "story": "AI Agent Has Root"}, {"id": 789538193, "item_id": 49346137, "url": "https://news.ycombinator.com/item?id=49346137", "by": "Bnjoroge", "date": "2026-08-18", "stance": "recommend", "quote": "smolvm or microsandbox are great options", "excerpt": "If you want something cross-platform, smolvm or microsandbox are great options(built on top of libkrun vmm)! If you are looking for linux-only, the typical choices are firecracker-based solutions.", "context": "", "use_case": "cross-platform microVMs", "switched_from": "", "story": "Ask HN: Alternatives to GitHub"}, {"id": 779023825, "item_id": 48688989, "url": "https://news.ycombinator.com/item?id=48688989", "by": "dbmikus", "date": "2026-06-26", "stance": "recommend", "quote": "friendly layers on top of it like https://microsandbox.dev/", "excerpt": "Why do you want to self-host vs. using one of the many providers out there? Daytona, E2B, OpenComputer, Freestyle, Blaxel, Vercel, Modal, Cloudflare, Tensorlake, Superserve, etc. etc. Some of them work by pre-purchasing credits, so you can control the blast radius of spend. Also, if you want a more embedded sandbox runtime as a library instead of a daemon + REST API, you can check out libkrun (and friendly layers on ", "context": "", "use_case": "sandboxes", "switched_from": "", "story": "Run isolated sandboxes with full lifecycle control: AWS introduces MicroVMs"}, {"id": 774788850, "item_id": 48424303, "url": "https://news.ycombinator.com/item?id=48424303", "by": "jpeeler", "date": "2026-06-06", "stance": "compare", "quote": "I've been considering switching my approach to using a microVM through microsandbox", "excerpt": "I'm currently using herde[1] to handle/supervise multiple agents (with some patches I need to try to upstream) along with Nono[2] for sandboxing. This sandboxing approach avoids use of a microVM, which lets me use tooling I already have installed inside the sandbox. The downside is getting all the policies correct as it seems every project needs some new type of access, though Nono does try to make policy writing eas", "context": "", "use_case": "agent sandboxing", "switched_from": "", "story": "Ask HN: What is your (AI) dev tech stack / workflow? (June 2026)"}]}