agentkernel 0.1.0

Run AI coding agents in secure, isolated microVMs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

# Agentkernel Docker runner
# Runs agentkernel inside a Docker container with KVM support
#
# On macOS with Docker Desktop, this provides a Linux environment with KVM
# for running Firecracker microVMs.
#
# Build:
#   docker build -t agentkernel .
#
# Run (requires --privileged for KVM access):
#   docker run --privileged -it agentkernel

FROM rust:1.82-slim-bookworm AS builder

WORKDIR /build

# Install build dependencies
RUN apt-get update && apt-get install -y \
    pkg-config \
    libssl-dev \
    curl \
    && rm -rf /var/lib/apt/lists/*

# Copy source
COPY Cargo.toml Cargo.lock ./
COPY src ./src
COPY tests ./tests

# Build
RUN cargo build --release

# Runtime image
FROM debian:bookworm-slim

# Install runtime dependencies and Firecracker
RUN apt-get update && apt-get install -y \
    curl \
    ca-certificates \
    iproute2 \
    && rm -rf /var/lib/apt/lists/*

# Download Firecracker (latest release for amd64)
ARG FIRECRACKER_VERSION=v1.7.0
ARG ARCH=x86_64
RUN curl -fsSL "https://github.com/firecracker-microvm/firecracker/releases/download/${FIRECRACKER_VERSION}/firecracker-${FIRECRACKER_VERSION}-${ARCH}.tgz" \
    | tar -xz -C /usr/local/bin \
    && mv /usr/local/bin/release-${FIRECRACKER_VERSION}-${ARCH}/firecracker-${FIRECRACKER_VERSION}-${ARCH} /usr/local/bin/firecracker \
    && chmod +x /usr/local/bin/firecracker \
    && rm -rf /usr/local/bin/release-*

# Copy agentkernel binary
COPY --from=builder /build/target/release/agentkernel /usr/local/bin/

# Copy kernel and config
COPY images/kernel/microvm.config /images/kernel/
COPY images/build /images/build/

WORKDIR /workspace

# Default command shows help
CMD ["agentkernel", "--help"]