agentvm

# Show HN: AgentVM – Safe, Sandboxed Linux VM for OpenClaw & AI Agents Hi HN, We built AgentVM (WASM + Alpine Linux) because Docker is too heavy for per-session AI agents, and `exec()` by an OpenClaw agent on the host is too dangerous. It runs a full Alpine Linux VM inside a Node.js Worker Thread. It boots in milliseconds, is completely isolated, and supports Python, networking, and standard Linux commands out of the box, perfect for local AI agents like OpenClaw and others. Website: [https://agentvm.deepclause.ai/] Repo: [https://github.com/deepclause/agentvm] Core Value * Instant Boot: No container orchestration delay. * Sandboxed: Runs in a worker thread. If it crashes or gets malicious, your host is safe. * Full Environment: Real Linux userspace. Install packages, run Python scripts, grep files. * Agent Ready: Drop-in integration for

Or try this: https://github.com/deepclause/agentvm, it's based on container2wasm, so the VM is fully defined by a Dockerfile.

From "Show HN: NPM install a WASM based Linux VM for your agents" re: https://github.com/deepclause/agentvm .. https://news.ycombinator.com/item?id=46686346 : >> How to run vscode-container-wasm-gcc-example with c2w, with joelseverin/linux-wasm? > linux-wasm is apparently faster than c2w. container2wasm issue #550: https://github.com/container2wasm/container2wasm/issues/550#... vscode-container-wasm-gcc-example : https://github.com/ktock/vscode-container-wasm-gcc-example Cloudflare Runners also run WASM; with workerd: cloudflare/workerd : https://github.com/cloudflare/workerd ... "Cage" implements ARM64 MTE Memory Tagging Extensions support for WASM with LLVM emscripten iirc: - "Cage: Hardware-Accelerated Safe WebAssembly" (2024) https://news.ycombinator.com/item?id=46151170 : > [ llvm-memsafe-wasm , wasmtime-mte , ]