logoalt Hacker News

binary132last Monday at 10:59 PM1 replyview on HN

He described a separate machine where the execution and context would be hosted, not local sandboxes. Did I misunderstand how Gondolin works?


Replies

jboss10yesterday at 8:45 AM

> Gondolin gives you that. Lightweight micro-VMs (QEMU by default, optional libkrun backend) boot in under a second on your Mac or Linux machine. The network stack and virtual filesystem are implemented entirely in JavaScript, giving you complete programmatic control over what the sandbox can access and what secrets it can use.