Show HN: Davit, a Apple Containers UI(davit.app)
364 points by xinit | 93 comments
Landing page for Davit, a free, MIT-licensed native macOS app providing a UI for Apple's container platform to run Linux containers on Apple silicon.
First screen, captured .
Looks similar
Docker Agent(github.com)
290 points by saikatsg | 132 comments
GitHub repository for docker-agent, an Apache-2.0 licensed AI agent builder and runtime from Docker Engineering.
Show HN: #!/usr/bin/env docker run(gist.github.com)
427 points by adtac | 139 comments
A GitHub Gist showing a Dockerfile with a shebang line that lets it be executed directly to build and run the container.
Capsem – a Rust hypervisor sandboxing AI agents in air-gapped Linux VMs(capsem.org)
5 points by madars | 2 comments
Landing page for Capsem, a Rust-powered hypervisor that sandboxes each AI coding agent in its own air-gapped Linux VM for visibility and control.
Show HN: OSS Agent I built topped the TerminalBench on Gemini-3-flash-preview(github.com)
333 points by GodelNumbering | 124 comments
GitHub repository for Dirac, an open-source coding agent focused on efficiency and context curation, using hash-anchored edits, parallel operations and AST manipulation.
Related stories
Agent Safehouse – macOS-native sandboxing for local agents(agent-safehouse.dev)
762 points by atombender | 172 comments
Landing page for Agent Safehouse, a macOS-native sandboxing tool that restricts local AI coding agents' write access to a chosen working directory.
Exploring Podman: A More Secure Docker Alternative(betterstack.com)
346 points by sacrosanct | 110 comments
A Better Stack community guide comparing Podman with Docker and presenting Podman as a more secure container engine alternative.
Bocker: Docker implemented in around 100 lines of Bash (2015)(github.com)
351 points by emersonrsantos | 95 comments
GitHub repository for Bocker, a minimal reimplementation of Docker written in about 100 lines of Bash.
Show HN: Drop – A rootless Linux sandbox with gVisor support(droprun.sh)
139 points by mixedbit | 48 comments
Project homepage for Drop, a rootless Linux sandbox using namespaces and optional gVisor to isolate programs and coding agents in a familiar environment.
Landrun: Sandbox any Linux process using Landlock, no root or containers(github.com)
460 points by Zoup | 155 comments
GitHub repository for landrun, a Go tool that runs Linux processes in an unprivileged sandbox using the Landlock LSM, with filesystem and network restrictions.
DeepSeek Elastic Compute (DSec)(arxiv.org)
308 points by shenli3514 | 99 comments
arXiv paper from DeepSeek describing DSec, an elastic sandbox compute infrastructure for training AI agents at scale.