Show HN: Kern Sandbox, a rootless container for LLM-generated code (getkern.dev)

I created this tool because i kept running code that LLm just wrote in my home folder. That felt risky. Every time you run a command it happens in its container. The container runs without network access by default. It's rootles. Once the command finishes the container gets deleted. Its cleans up after itself.

It uses Linux namespaces, cgroups and seccomp. Not microVM. It is lighweight and fast.