gondolin
ActiveDescription
Experimental Linux microvm setup with a TypeScript Control Plane as Agent Sandbox.
Key Features
- Linux micro-VM based isolated agent sandbox with QEMU and krun backends
- Programmable HTTP/TLS egress policy with allowlists and request/response hooks
- Secret injection: guests see placeholders only — real secrets injected by host per policy
- Programmable VFS mounts for custom filesystem behavior in JavaScript
- SSH access, disk snapshots with resume, and ingress gateway for guest services
- Custom image builds and configurable DNS behavior (synthetic/trusted/open)
Use Cases
💡 Provide secure code execution sandboxes for AI agents
💡 Isolate untrusted generated code to prevent data exfiltration
💡 Control agent network and filesystem access via host-side policies
💡 Manage secret and credential injection for agent tasks
💡 Build long-running agent workflows with snapshot and resume capabilities
Tags
Categories
Quick Start
1. Install deps: macOS — brew install qemu node; Linux — apt install qemu-system-arm nodejs npm
2. Quick start CLI: npx @earendil-works/gondolin bash
3. Or use the SDK to create a VM with HTTP hooks configured
4. Execute commands in isolated environment via vm.exec()
5. Close the VM with vm.close()