Thread

Show HN: Drop – A rootless Linux sandbox with gVisor support

193 points · 63 comments · mixedbit

gregwebs · 1790096079 · focus · HN ↗
Glad to see this coming with gVisor support to help secure the Kernel- IMHO we should expect frontier models to find Kernel exploits.
I am working on a project similar in spirit that uses microsandbox (libkrun) to run inside a tiny and fast VM. It includes other security properties that are needed for some workloads.
```
  * network allow lists
  * credential masking
  * github allow list
```
<a href="https://github.com/gregwebs/agent-vm/#agent-vm" rel="nofollow">https://github.com/gregwebs/agent-vm/#agent-vm
1. NewJazz · 1790096480 · focus · HN ↗
  Couldn't you use fine grained github tokens for some of what you're accomplishing with the github/network filtering?
  1. asb · 1790097151 · focus · HN ↗
    The fine-grained tokens have some surprising permissions for "read only" <a href="https://github.com/orgs/community/discussions/180063" rel="nofollow">https://github.com/orgs/community/discussions/180063
  2. gregwebs · 1790105417 · focus · HN ↗
    You definitely want to do that. I have a Github App that I use for my AI agents, and that has its own associated restricted credential.
    There are going to be cases where you want to white list an org or a repo for read access that is not under your control and Github filtering will be a simple way to do that.
    Github can be a source of hostile code, prompt injections, and exfiltration- you may want to lock down using repos that aren't yours.
    The tool inherited this feature from the prior implementation and its something I am still exploring.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.