benldrmn
Re:Self-hosted dev sandboxes with preview URLs (Docker, Go, no K8s)
on Thursday June 04, 2026 @04:32AM (#48395836)
I am working on https://github.com/isola-run/isola which uses gVisor (not firecracker) on k8s (or something like kind, locally). Includes snapshotting, network controls and everything. Hope you could find this useful
Re:Ask HN: What are you working on? (May 2026)
on Sunday May 10, 2026 @04:09PM (#48087413)
I'm working on Isola (https://github.com/isola-run/isola), a passion project of mine. It allows you to easily create and control sandboxes for executing untrusted code on any Kubernetes cluster (one helm install). To support some features I wanted (like on demand snapshotting of specific containers' filesystem in a sandbox pod or limiting egress rate from the sandbox I am working on now) I contributed some changes to gVisor. Happy to chat about the design and implementation of such a project if anyone interested!
Show HN: Isola – Open-source sandboxing on Kubernetes
https://github.com/isola-run/isola
Hi HN, I am excited to share with you something I have been working on for the past 6 months or so.Isola is an open-source sandbox platform for running untrusted code in your own Kubernetes cluster with gVisor.It took me quite a few iterations to get the api just right. Some design choices:* REST and streaming APIs (building SDKs on top) - executing commands, transferring files, etc* flexible...
Re:Ghostty's AI Policy
on Friday January 23, 2026 @09:31AM (#46732913)
Funny, I had a similar experience TAing “Intro to CS” (first semester C programming course). The student was certain he encountered a compiler bug (pushing back on my assumption there was something wrong with their code, since while compilers do have bugs, they are probably not in the code generation of a nested for loop). After spending a few minutes parsing their totally unindented code, the off-by-one error revealed itself