> Only real alternative is to use microvms. My goto solution for this are apple/containers.

Why microVMs? I never ever run a container, AI harness or other, in something else than a full on VM. I could use a microVM but in any case I really don't see why I'd run a container on one of my bare metal OS: the place of a container is inside a VM (or microVM).

Especially for AI harnesses where the threat of an escape is very real: the more defense in depth, the better.

And If I can use rootless Podman instead of "rootfull" Docker, the better. Most of my containers are Podman btw.

> My goto solution for this are apple/containers.

To each his own: my goto solution is an actual server on my LAN with shitload of cores and memory and plenty of scripts to provision VMs etc.

I really don't understand why people are YOLO'ing containers on their bare metal OS.