{"slug": "sysbox", "name": "sysbox", "category": "infra", "category_name": "Infrastructure and DevOps", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.715, "rising": -0.98, "first": "2026-04-06", "latest": "2026-07-13", "why": "I recently moved to sysbox and it's a bit quicker.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 2, "neutral": 0, "compare": 0, "warn": 1}, "spark": [0, 0, 0, 0, 0, 0, 1, 0, 1, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I recently moved to sysbox and it's a bit quicker.", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/nestybox/sysbox", "official_url": "https://github.com/nestybox/sysbox", "pricing": "", "aliases": ["sysbox", "Sysbox"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 782343393, "item_id": 48896462, "url": "https://news.ycombinator.com/item?id=48896462", "by": "mbid", "date": "2026-07-13", "stance": "recommend", "quote": "I found sysbox to work very well", "excerpt": "That's pretty much the flow I formalized here: https://github.com/nvidia/rumpelpod Instead of generating patches, this exposes the agent's checkout as a git remote though. Most similar tools (and I believe your tooling as well?) bind-mount the repository checkout from the host into the container. This was always a source of user and permission errors for me, since you have to align the user ids inside and outside the", "context": "", "use_case": "Nested Docker in containers", "switched_from": "", "story": "Grok uploaded my user directory to xAI's servers"}, {"id": 772883488, "item_id": 48305218, "url": "https://news.ycombinator.com/item?id=48305218", "by": "benjamincburns", "date": "2026-05-27", "stance": "recommend", "quote": "I recently moved to sysbox and it's a bit quicker.", "excerpt": "I suspect the first case worked as intended, and VS Code is greasing the wheels. I'm sure there's a way to get it working in iTerm 2, though I wouldn't be surprised if the solution was some Goldbergian chain of forwarded unix sockets and a helper daemon living inside the sandbox. Thanks for mentioning yoloAI, though. I started off sandboxing via devcontainers using kata & cloud hypervisor set up as a custom docker ru", "context": "", "use_case": "sandboxing Claude Code sessions", "switched_from": "Kata Containers", "story": "Why Ctrl+V won't paste images in Claude Code on WSL, with a fix"}, {"id": 762627264, "item_id": 47664204, "url": "https://news.ycombinator.com/item?id=47664204", "by": "benswerd", "date": "2026-04-06", "stance": "recommend", "quote": "You can handroll a lot with:", "excerpt": "Self hosting can be doable for constant small/medium size workloads You can handroll a lot with: https://github.com/nestybox/sysbox?tab=readme-ov-file https://gvisor.dev https://github.com/containers/bubblewrap?tab=readme-ov-file For hardware virtualized machines it much harder but you can do it via: https://github.com/firecracker-microvm/firecracker/ https://github.com/cloud-hypervisor/cloud-hypervisor Freestyle/oth", "context": "", "use_case": "self-hosted sandboxes", "switched_from": "", "story": "Launch HN: Freestyle: Sandboxes for AI Coding Agents"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 762621939, "item_id": 47663871, "url": "https://news.ycombinator.com/item?id=47663871", "by": "benswerd", "date": "2026-04-06", "stance": "warn", "quote": "which is VM-like but when you run low level things it has issues.", "excerpt": "I'm working on an article deep diving into the differences between all of us. I think the goal of Freestyle is to be the most powerful and most EC2 like of the bunch. Daytona runs on Sysbox (https://github.com/nestybox/sysbox) which is VM-like but when you run low level things it has issues. Modal is the only provider with GPU support. I haven't played around with Blaxel personally yet. E2B/Vercel are both great hard", "context": "", "use_case": "", "switched_from": "", "story": "Launch HN: Freestyle: Sandboxes for AI Coding Agents"}]}], "who": [], "tags": [], "use_cases": ["nested docker in containers", "sandboxing claude code sessions", "self-hosted sandboxes"], "compared": [{"slug": "kata-containers", "name": "Kata Containers", "co": 1, "switched_from": 1, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=47663147", "title": "Launch HN: Freestyle: Sandboxes for AI Coding Agents", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48892512", "title": "Grok uploaded my user directory to xAI's servers", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48267432", "title": "Why Ctrl+V won't paste images in Claude Code on WSL, with a fix", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {"warn": 1}, "2026-05": {"recommend": 1}, "2026-06": {}, "2026-07": {"recommend": 1}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 782343393, "item_id": 48896462, "url": "https://news.ycombinator.com/item?id=48896462", "by": "mbid", "date": "2026-07-13", "stance": "recommend", "quote": "I found sysbox to work very well", "excerpt": "That's pretty much the flow I formalized here: https://github.com/nvidia/rumpelpod Instead of generating patches, this exposes the agent's checkout as a git remote though. Most similar tools (and I believe your tooling as well?) bind-mount the repository checkout from the host into the container. This was always a source of user and permission errors for me, since you have to align the user ids inside and outside the", "context": "", "use_case": "Nested Docker in containers", "switched_from": "", "story": "Grok uploaded my user directory to xAI's servers"}, {"id": 772883488, "item_id": 48305218, "url": "https://news.ycombinator.com/item?id=48305218", "by": "benjamincburns", "date": "2026-05-27", "stance": "recommend", "quote": "I recently moved to sysbox and it's a bit quicker.", "excerpt": "I suspect the first case worked as intended, and VS Code is greasing the wheels. I'm sure there's a way to get it working in iTerm 2, though I wouldn't be surprised if the solution was some Goldbergian chain of forwarded unix sockets and a helper daemon living inside the sandbox. Thanks for mentioning yoloAI, though. I started off sandboxing via devcontainers using kata & cloud hypervisor set up as a custom docker ru", "context": "", "use_case": "sandboxing Claude Code sessions", "switched_from": "Kata Containers", "story": "Why Ctrl+V won't paste images in Claude Code on WSL, with a fix"}, {"id": 762627264, "item_id": 47664204, "url": "https://news.ycombinator.com/item?id=47664204", "by": "benswerd", "date": "2026-04-06", "stance": "recommend", "quote": "You can handroll a lot with:", "excerpt": "Self hosting can be doable for constant small/medium size workloads You can handroll a lot with: https://github.com/nestybox/sysbox?tab=readme-ov-file https://gvisor.dev https://github.com/containers/bubblewrap?tab=readme-ov-file For hardware virtualized machines it much harder but you can do it via: https://github.com/firecracker-microvm/firecracker/ https://github.com/cloud-hypervisor/cloud-hypervisor Freestyle/oth", "context": "", "use_case": "self-hosted sandboxes", "switched_from": "", "story": "Launch HN: Freestyle: Sandboxes for AI Coding Agents"}, {"id": 762621939, "item_id": 47663871, "url": "https://news.ycombinator.com/item?id=47663871", "by": "benswerd", "date": "2026-04-06", "stance": "warn", "quote": "which is VM-like but when you run low level things it has issues.", "excerpt": "I'm working on an article deep diving into the differences between all of us. I think the goal of Freestyle is to be the most powerful and most EC2 like of the bunch. Daytona runs on Sysbox (https://github.com/nestybox/sysbox) which is VM-like but when you run low level things it has issues. Modal is the only provider with GPU support. I haven't played around with Blaxel personally yet. E2B/Vercel are both great hard", "context": "", "use_case": "", "switched_from": "", "story": "Launch HN: Freestyle: Sandboxes for AI Coding Agents"}]}