AI Agent Sandboxes: Why a Single Container Isn't Enough
How to isolate code written by AI agents: comparing containers, gVisor, and KVM, examining the threat model, and running virtual sandboxes in seconds.
Run Linux VMs, OCI containers, and databases in an isolated private network. SSH with no public IP, HTTPS with auto-TLS, and WireGuard are ready on boot. Instances sleep without traffic and wake on the first packet.
Linux VM · 4 vCPU · 8 GB RAM · 10.42.0.12
Compute billing
$0.00/secPer second
pausedCPU 24% · RAM 1.8 GB
First-packet response
~185 ms185 ms → 200 OK
ready for TCP/HTTPSsnapshot restored from NVMe
GET https://vm-app.msrv.spaceHTTP/2 200 OK · TLS Let's Encrypt
> how it works
No manual firewall setup, port forwarding, or certificate issuance.
ssh user@my-app.msrv.spaceAccess a private machine with no public IPv4. Port 22 is closed to internet scanners.
curl -I https://my-app.msrv.spaceEvery service automatically gets a *.msrv.space domain and a valid TLS certificate.
psql postgres://app@10.42.0.21:5432/productionSecure access from your laptop to databases and internal services over private IPs.
> what you can run
Honest KVM isolation for full operating systems and fast OCI containers for microservices.
A personal machine for coding: IDE over SSH, your own tools, a persistent disk, and a stable HTTPS address. ssh devbox@msrv.space
Linux VPS with SSH access, a permanent subdomain, and TLS. Built for internal services, test environments, and demos. curl https://app.msrv.space
Durable Linux VMs for agents and workers: root access, persistent storage, and outbound API access. ssh agent@msrv.space
Standard OCI images from Docker Hub and GHCR with persistent storage on replicated NVMe. Run web APIs, bots, and background tasks in an isolated VPC.
Containers →> platform architecture
All network plumbing runs in the Linux kernel via eBPF and is included in the base rate.
> transparent economics
In standby, vCPU and RAM stop and are not billed. No more paying for idle nights on dev machines, staging, and side projects.
Create a VM, container, or database in an isolated VPC — gateways and TLS are already on.
> reliability
Disks replicate across storage nodes to safeguard data against hardware failures.
If a host fails, the platform relaunches the instance with its original disk, IP addresses, and state.
Subdomains, TLS certificates, and SSH identities persist across the full lifecycle of your instance.
> roadmap
Capabilities currently under active development:
> blog
Articles on cloud architecture, eBPF networking, serverless virtualization, and developer workflows.
How to isolate code written by AI agents: comparing containers, gVisor, and KVM, examining the threat model, and running virtual sandboxes in seconds.
In scale-to-zero mode the VM sleeps without traffic and wakes in 100-250 ms on the first request.
What Hermes Agent from Nous Research can do and how to run it in a container on microsrv: official image pinned by digest, gateway mode, dashboard with basic auth, and publishing via an HTTPS gateway.
> stats
A live snapshot of the resources running on microsrv right now.