HN

Comments (27)

• Menu

  ulimn
  I'll be sure to check this out but in the meantime, I'd like to ask: Isn't it generally a good practice to run coding agents in a VM? It provides a security boundary so that the agent is restricted to the VM.How does this compare? I see it's an "isolated sandbox", but what exactly does that mean?
• Menu

  embik
  Note: this does not appear to be a Kubernetes-based solution, the "pod" part just heavily sounds like it.
• Menu

  ineptech
  Hi, I think I might be your target audience, I currently run pi on the server in my basement, in a minimalist docker container that gives it access to my code workspace and a config dir. Give me an idea what benefit I get on top of that by using the self-hosted pi pod?
• fallinditch
  Interesting, thanks, will keep an eye on this
• Menu

  eranation
  Daily reminder that containers are not considered a safe security boundary, and never were. If you really need to run untrusted code, use a MicroVM.
• lowbloodsugar
  The barrier to create this myself is so low that 1: I can do it and 2: bad actors can do it. I’d like to use a shared tool that will get iterated on, but I just don’t want to risk it at this point given I can get “good enough” doing it myself.
• Bombthecat
  I did that with T3 code.
• Menu

  tamimio
  Is it different than running any harness in an lxc container or vm in your proxmox (or any) server?
• Menu

  karakanb
  Hi there, creator of Epho here (https://epho.io).This looks very interesting, letting people run these in any box they own. I very much agree with the sentiment that there are no proper tools that let you run any coding agent without being locked to a single provider. I just want to run opencode or pi somewhere in a box without having to spin up all of them in my machine, let alone being able to trigger them from within another prouduct as a background agent.Would pi-pod allow me to standardize pi config on a team/project level so that other people in my org can also use them on the same private infra?
• nezhar
  Hi, creator of VibePod here (https://github.com/VibePod/vibepod-cli)I spent lots of time on this topic, and had a similar path. Meanwhile the tool also supports a quick way to add custom or local providers to agents: https://vibepod.dev/news/vibepod-cli-0-24/
• shurshilov
  [flagged]
• jhlee525
  [flagged]
• IndiaInfraNotes
  [flagged]