Show HN: Kern Sandbox, run LLM-generated code locally, no cloud, no daemon

Category: infrastructure

Tags: container-runtime, sandboxing, llm-agents, mcp, rootless, rust

Score: 8.0/10 (Innovation: 8, Technical: 9, Documentation: 8, Utility: 7)

Kern is a rootless, daemonless container runtime written in Rust that ships as a single static binary, designed to execute LLM-generated code and agent tool calls in kernel-enforced containers with minimal latency. It doubles as a Python/Node sandbox SDK and MCP server, giving agents a fast, local, cloud-free execution environment with strong security defaults (namespaces, seccomp allowlist, cgroup limits). The combination of OCI compatibility, no daemon, no root, and millisecond startup makes it a compelling primitive for agentic workflows.

Target audience: backend developers, AI/agent developers, DevOps, security engineers

Repository: https://getkern.dev/guide/sandbox.html · Rust · Apache-2.0 · 447 stars

View on Hacker News