Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

  • Hacker News
  • Agent runtime - actually a good name for what is called today coding agent or agent harness.
  • If you haven’t already been running your agents in containers, you’re crazy. That said, this looks like a great way to manage those containers.
    by mfro
  • Nvidia Openshell is absolutely awesome, great bundle of features in one spot. Im happy to see Nvidia seems to have accelerated on support here, I was kinda worried that as competing projects have popped up in the last 6mo that openshell would get google'd
  • Taking default telemetry is insane.

    That aside, the level of control is cool, almost too pedantic. It likely is only particularly useful for very nuanced enterprise requirements (probably what it's targeting). Most companies can be much more coarse with their permissions, and I think the agentic industry is moving away from k8s as a deployment platform.

  • In this vein, Anthropic's sandbox-runtime [0] has struck a good balance between security and convenience. Simple config, filesystem and network restrictions, and credential masking make me comfortable running Pi in YOLO mode.

    Though I'm often running into frustrating (albeit intentional) sandbox restrictions with common workflows e.g. xcode/swift and Docker access.

    Would love suggestions for how to give agents access to those kinds of tooling inside the sandbox, either with srt or an alternative (with similar convenience characteristics).

    [0] https://github.com/anthropics/sandbox-runtime

  • right now i am experimenting on an agent in a browser as a single.html file running a virtual filesystem and using python in WASM to do the heavy lifting. its really useful and funny to watch how it works.

    it is quite useful and solves / addresses quite a lot of privacy and security issues but it is more limited of course. i really like the results if you want you can try it out with an inference endpoint you want its live/downloadable at

    https://moooff.github.io/HermitUI/hermit-agent/dist/hermit-a...

    iam always open to discussion ad feedback of course

  • >OpenShell collects anonymous telemetry, limited to operational categories and counts, to help improve the project.

    >To disable it, set OPENSHELL_TELEMETRY_ENABLED=false on the gateway, or server.telemetryEnabled=false for Helm installs.

  • Looks neat. I’ll give Claude root access so it can set it up.

Explore Birbla archives