There were not the solution for a while now, that is why Kata containers came to be in first place.

> Docker containers are not enough isolation for anyone that cares about jailbreak scenarios.

For the vast majority of developers, containers are enough, which is why they are ubiquitous while vms are less common. Ofc that ubiquity has led to lazy configuration, which is how the jailbreaking can occur. Knowing what you are doing with containers is a requirement to use containers as an AI sandbox.

> Only real alternative is to use microvms. My goto solution for this are apple/containers.

Why microVMs? I never ever run a container, AI harness or other, in something else than a full on VM. I could use a microVM but in any case I really don't see why I'd run a container on one of my bare metal OS: the place of a container is inside a VM (or microVM).

Especially for AI harnesses where the threat of an escape is very real: the more defense in depth, the better.

And If I can use rootless Podman instead of "rootfull" Docker, the better. Most of my containers are Podman btw.

> My goto solution for this are apple/containers.

To each his own: my goto solution is an actual server on my LAN with shitload of cores and memory and plenty of scripts to provision VMs etc.

I really don't understand why people are YOLO'ing containers on their bare metal OS.