HN Explorer

Ask HN: VMs or containers for secure AI/Agent code execution?

4 points by ATechGuy ↗ HN
Do you use Docker containers or VMs to securely execute code generated by AI agent? What are pros/cons of your setup? Appreciate your insights.

3 comments

[ 5.3 ms ] story [ 16.3 ms ] thread
pancsta
Why not WASM?
ATechGuy
Can you execute Python code under WASM? If so, how stable is that?
pancsta
You can compile python to WASM, yes. Once you have a *.wasm you can run it anywhere, although the interop with the environment depends on source/destination.

You probably want to run a sandbox for that generated code, eg mocked data, which is bound to your external python calls. WASI is the unified env for real-world APIs.