News for hackers. Stuff that matters.

tastyeffectco

Thanx, if you find it useful please leave a feedback
can be used as an alternative to Replit/Lovable, can also be used as plaint dev environnements... I use it now for my messy ai life when i was struggling to keep track on my apps, repos, env variables. this started before as the infrastructure behind my commercial product upilote.com

Show HN: Sandboxd – Self-Hosted Lovable (agents, sandboxes, preview url)

https://github.com/tastyeffectco/sandboxd

Hello HN,Last month I open-sourced the infrastructure behind my commercial app builder startup, I got some feedback related to various concerns about the repo, but mostly about isolation boundaries and K8s,Now the repo comes with a SPA Console UI, think of it like a home for the apps and agents, Replit/Lovable-like or any coding factory. It uses directly the Sandboxd Core (its fully a v1 client...

( Read More... | 3 comments | 2 points | on HN )
in so many cases, docker is more than sufficient for major agent workloads... with no hostile users of course
Would love to see sandboxd added — it's the self-hosted open-source option with Docker hardening, built-in coding agents (Claude Code, OpenCode), and live preview URLs. https://github.com/tastyeffectco/sandboxd
There are plenty of OSS solutions available for your needs. Do you need real isolation, or is Docker hardening sufficient? If hardening is suddicient check out https://github.com/tastyeffectco/sandboxd/ which i'm using internaly for so many use cases
As a Moroccan who recently moved to the Zurich area of Switzerland with my Swiss wife and kids, we found ourselves settling here for medical reasons and rediscovering a new way of life. When I see this debate, I mostly feel confused. I keep thinking about us as human beings and what drives us, what makes us fear others, or simply makes us uncomfortable. I think this is, and always will be, a human trait: fear of losing what we believe we deserve more than others, fear of change, and fear of competition (even when there isn't any). And I agree—Switzerland is one of the most beautiful countries in the world, with some of the kindest individuals I've ever met.
Re:Cleaning up after AI rockstar developers on Tuesday June 09, 2026 @10:57AM (#48462008)
We are always the rockstar of someone else
one question i have about the project? what is the main need to be scoped to python only ? it is for perf ? infrastructure stack ? or something else ?
you may checkout sandboxd project, it allow you ti run on your own vps plenty of sandboxes for differents usages : https://github.com/tastyeffectco/sandboxd
Yes, but not fully! each sandbox have all linux capabilities! runs with no-new-privileges, a read-only rootfs! capped limits on PID and Memory, network isolated per design! all that said! this is not a VM isolation level like Firecracker for example, but quit enough for most use cases for early stage products or entreprise internal products
For a 8 CPU, 12GB Ram you can run app to 10 concurrents sandboxes that do heavy builds! the project itself is not ram/cpu heavy at all! depending on what you will run inside ! that was one of the main points why i didnt chose to go for real kvm isolation.

i would just say if its for an early stage product got for it! at scale reconsider security and isolation layers

upilote (mellosouls): your second reading is correct.

This is not a Lovable competitor, and it's not all of upilote.

upilote is the product: chat → agent builds → live preview.

This repo is just the infrastructure layer underneath it that we extracted and open-sourced under MIT. It handles one container per project, preview URLs, running agents, sleeping when idle, waking on request, persistence, and recovery after reboots.

For us, it simplified a lot of things. Instead of managing all that logic ourselves, it became: submit a task and stream events back.