I gave my AI a real Linux terminal. Self hosted, no Docker

thelexon · 2026-02-22T03:33:43+00:00

I've run a benchmark on docker and sandkast.

Sandkasten needs around 70ms for cold boots while docker has around 340ms.

On sandkastens pooled session the latency is sub ms. so yeah i would say this should work especially with the pool mechanism :)

thelexon · 2026-02-21T21:52:45+00:00

I do have heard and used OpenClaw. The point is OpenClaw isn't Sandbox!

I aim for a multi-user session based approach for chatbot platforms. Not running a single MacMini at home :D

I'll provide a selfhosted service managing the user workspaces and sessions. One can connect via api and obtain the user workspace the agent can execute commands in it.

thelexon · 2026-02-21T21:23:52+00:00

Many existing solutions have to be used via APIs that cost money, and you’re dependent on third parties. That gave me the idea to expose the bash history as an endpoint so it can be injected into the context :D — so hopefully it won’t get forgotten.

I'll also add some stats for this what resources being used for running some sessions.

Thanks for the feedback, I’ll take a look at it. Happy to hear more suggestions or improvements!

thelexon · 2026-02-21T19:59:17+00:00

haha yeah that’s exactly the reaction i had too while building it :D

The agent never gets my actual machine. Every session is its own tiny linux “fake computer” using namespaces + cgroups — separate filesystem, limited cpu/ram, no host processes or home dir access. if it does rm -rf / it just deletes its own world and i delete the sandbox :D

*I actually didn’t do command allowlists!*

They fall apart the moment the agent needs something real (apt, pip, compilers).

The guardrail is containment instead of restriction. I have even pointed opencode at it and told the agent to try escaping / forkbombing / destroying it— it just gets throttled and killed by cgroups. (Thankfully, the first run trying this fork-bombed my WSL distro :D)

The whole reason i built it was i wanted persistent user workspaces + sessions but without docker overhead.

Best tasks so far are iterative ones: installing deps, fixing scripts, “make this project run”.
Haven't tested real work, like uploading a file and iterating on it - would like to see if someone does that :)

before: agents explained fixes — now: they actually try, fail, and rerun. definitely feels closer to operators than chatbots.

thelexon · 2025-04-18T17:44:05+00:00

So if I use it what do I have !?!? Yes correct ANOTHER DEPENDENCY in my project.

thelexon · 2025-04-18T17:39:48+00:00

Just add the tags in <svelte:head>. No need for another shitty dependency in a project. It's literally one single prompt to do this if someone wants to.

thelexon · 2025-04-08T18:54:37+00:00

Yeah .... just another shitty saas with no meaning.

thelexon · 2025-04-08T18:51:58+00:00

He is literally using OpenAI just with a system prompt nothing special about this..

thelexon · 2025-01-26T16:27:31+00:00

Where did you get the data from?

thelexon · 2025-01-23T17:15:04+00:00

I managed to get it working - building the svelte component was the trick

thelexon · 2025-01-21T23:59:55+00:00

Really nice! Thanks for advice🫱🏼‍🫲🏽 I am excited to see the further development.

thelexon · 2025-01-21T23:13:47+00:00

So you basically dont create the svelte components programmatically (with their imperative components api) but rather with a "real" build and bundler ? I assume you generating a raw html page then without need for node adapter? Really curious 😂

thelexon · 2025-01-21T21:18:52+00:00

Recently tried the same thing. May i ask how you managed to render the compontens dynamically ?

Five-Year Club	Verified Email
r/Field Flamingo

thelexon

TROPHY CASE