#containers

Every guide to sandboxing AI agents compares Firecracker to gVisor to containers. Useful, and not where the one documented escape of 2026 happened. That agent was in an environment with no internet access. It got out through the thing the sandbox had to trust in order to install a dependency.

Everyone repeats that VMs virtualize hardware and containers virtualize the OS. True, but it hides the real thing. A container isn't a tiny VM. It's a normal process on the host with blinders on, fenced off by two Linux kernel features.

Hard-won lessons on running Kubernetes at scale, from cluster architecture and RBAC to cost optimization and real production pitfalls.