Hacker News: benldrmn

New comment by benldrmn in "Self-hosted dev sandboxes with preview URLs (Docker, Go, no K8s)"

benldrmn — Thu, 04 Jun 2026 08:32:15 +0000

I am working on https://github.com/isola-run/isola which uses gVisor (not firecracker) on k8s (or something like kind, locally). Includes snapshotting, network controls and everything. Hope you could find this useful

New comment by benldrmn in "Ask HN: What are you working on? (May 2026)"

benldrmn — Sun, 10 May 2026 20:09:35 +0000

I'm working on Isola (https://github.com/isola-run/isola), a passion project of mine. It allows you to easily create and control sandboxes for executing untrusted code on any Kubernetes cluster (one helm install). To support some features I wanted (like on demand snapshotting of specific containers' filesystem in a sandbox pod or limiting egress rate from the sandbox I am working on now) I contributed some changes to gVisor. Happy to chat about the design and implementation of such a project if anyone interested!

Show HN: Isola – Open-source sandboxing on Kubernetes

benldrmn — Tue, 21 Apr 2026 13:21:02 +0000

Hi HN, I am excited to share with you something I have been working on for the past 6 months or so.

Isola is an open-source sandbox platform for running untrusted code in your own Kubernetes cluster with gVisor.

It took me quite a few iterations to get the api just right. Some design choices:

* REST and streaming APIs (building SDKs on top) - executing commands, transferring files, etc

* flexible network policies, tailored for untrusted workloads

* operational simplicity: one Helm install, no external database / Redis / queues etc

One example of a feature I like is the ability to snapshot the root filesystem, storing it in some bucket for later restore (exposing the snapshots via a NFS on each cluster node). Useful for initializing a sandbox once and reusing many times, or checkpointing between interactions.

It strives to give you a strong platform to develop on, while keeping your data within your network, with your existing observability tools, cloud resources and in-cluster latency.

Happy to get your thoughts, answer questions or talk more about the design and implementation of Isola.

Comments URL: https://news.ycombinator.com/item?id=47848439

Points: 2

# Comments: 0

New comment by benldrmn in "AI Usage Policy"

benldrmn — Fri, 23 Jan 2026 14:31:15 +0000

Funny, I had a similar experience TAing “Intro to CS” (first semester C programming course). The student was certain he encountered a compiler bug (pushing back on my assumption there was something wrong with their code, since while compilers do have bugs, they are probably not in the code generation of a nested for loop). After spending a few minutes parsing their totally unindented code, the off-by-one error revealed itself

Verify enclave counterparties with reproducible builds and remote attestation

benldrmn — Thu, 16 Oct 2025 15:12:01 +0000

Article URL: https://aws.amazon.com/blogs/web3/verify-enclave-counterparties-with-reproducible-builds-and-cryptographic-attestation-using-aws-nitro-enclaves/

Comments URL: https://news.ycombinator.com/item?id=45606390

Points: 2

# Comments: 0

Establishing verifiable security: Reproducible builds and AWS Nitro Enclaves

benldrmn — Sun, 10 Aug 2025 21:39:58 +0000

Article URL: https://aws.amazon.com/blogs/web3/establishing-verifiable-security-reproducible-builds-and-aws-nitro-enclaves/

Comments URL: https://news.ycombinator.com/item?id=44858546

Points: 2

# Comments: 0

Build secure multi-party computation (MPC) wallets using AWS Nitro Enclaves

benldrmn — Mon, 17 Feb 2025 19:28:01 +0000

Article URL: https://aws.amazon.com/blogs/web3/build-secure-multi-party-computation-mpc-wallets-using-aws-nitro-enclaves/

Comments URL: https://news.ycombinator.com/item?id=43082457

Points: 2

# Comments: 0