Hacker News Reader

Comment by ushakov | Hacker News Reader

have you tried e2b.dev? it runs lightweight sandboxes using firecracker, python and third-party packages

disclaimer: i work there

Is that something I can run on my own laptop? It says it's "open source" but the docs seem to be for client libraries that need an API key.

everything, including the infra is open-source (below), but it currently requires more than just your laptop (gcp, nomad, firecracker, postgres, etc.)

this way, we're able to run millions secure sandbox environments

i appreciate asking though and will be forwarding to my team to see if we can come up with a way for users to emulate the execution locally

source code: https://github.com/e2b-dev/infra

My objectives here are pretty specific: I'm building open source Python tools for people to run on their own machines, and I want to add "execute untrusted code" features to those tools (mainly for code written by LLMs) such that people can use those features with a clean 'pip install x' of my software on Mac, Linux and hopefully also Windows.

As such you're probably not the right fit for me, I should be looking more at things like wasmer and wasmtime.

You are a big pyiodide user? Does it provide a trampoline to create another sibling instance?

I love Pyodide in the browser but I've had trouble running it not-in-the-browser, aside from this experiment with Deno: https://til.simonwillison.net/deno/pyodide-sandbox

Sorry for asking a possibly noob question. Doesn't firecracker vms requires bare metal instances? And does gcp support provisioning bare metal instances? Or is it that you are able to run firecracker on normal vm instances in gcp ?

GCP supports nested virtualisation

Reply on news.ycombinator.com