AI agent sandbox — root inside disposable, real-boot Linux VMs on self-hosted KVM. The rig grants no host sudo, /dev/kvm or libvirt access. Deny-by-default egress (package cache + configured mock ports; anything more needs operator approval); recreate restores a pinned golden or snapshot.
linux devops systemd integration-testing self-hosted kvm qemu libvirt virtual-machines selinux infrastructure-testing golden-image ai-agent agent-sandbox coding-agents network-egress root-environment destructive-testing distro-testing
-
Updated
Aug 29, 2026 - Shell