agentkernel 0.18.1

Run AI coding agents in secure, isolated microVMs
Documentation
# Gemini CLI sandbox template
# Pre-configured for running Gemini CLI inside an isolated sandbox

[sandbox]
name = "gemini-sandbox"
base_image = "node:22-alpine"
init_script = """
set -e
npm install -g @google/gemini-cli
"""

[agent]
preferred = "gemini"
compatibility_mode = "gemini"

[resources]
vcpus = 2
memory_mb = 1024

[secrets]
GOOGLE_API_KEY = "generativelanguage.googleapis.com"
GEMINI_API_KEY = "generativelanguage.googleapis.com"

[security]
profile = "moderate"

[security.domains]
allow = ["generativelanguage.googleapis.com"]

[template]
description = "Gemini CLI agent sandbox"
category = "Agent Sandboxes"
help_text = """
How to use: Start the sandbox and run your workflow inside /workspace.
Example command: ls -la /workspace
Binaries available: node, npm, npx, gemini
Services and ports: No long-running service is configured by default; only explicitly mapped ports are exposed.
"""