agentkernel 0.18.1

Run AI coding agents in secure, isolated microVMs
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

# Postgres sandbox template
# Postgres server image for local development and testing.

[sandbox]
name = "postgres"
base_image = "postgres:17-alpine"
init_script = """
set -e
secrets_path=${AGENTKERNEL_SECRETS_PATH:-/run/agentkernel/secrets}
postgres_user=$(cat "$secrets_path/POSTGRES_USER" 2>/dev/null || echo postgres)
postgres_password=$(cat "$secrets_path/POSTGRES_PASSWORD" 2>/dev/null || true)
postgres_db=$(cat "$secrets_path/POSTGRES_DB" 2>/dev/null || echo postgres)
export POSTGRES_USER="$postgres_user"
export POSTGRES_DB="$postgres_db"
if [ -n "$postgres_password" ]; then
  export POSTGRES_PASSWORD="$postgres_password"
else
  export POSTGRES_HOST_AUTH_METHOD=trust
fi

if ! pg_isready -h 127.0.0.1 -p 5432 >/dev/null 2>&1; then
  nohup docker-entrypoint.sh postgres >/tmp/postgres.log 2>&1 &
  for _ in $(seq 1 90); do
    if pg_isready -h 127.0.0.1 -p 5432 >/dev/null 2>&1; then
      break
    fi
    sleep 1
  done
  pg_isready -h 127.0.0.1 -p 5432 >/dev/null 2>&1 || {
    echo "postgres failed to start; check /tmp/postgres.log" >&2
    exit 1
  }
fi
"""

[resources]
vcpus = 2
memory_mb = 1024

[security]
profile = "moderate"
network = true

[ports]
5432 = 5432

[template]
description = "Postgres server image for local development"
category = "Datastores"
secret_files = ["POSTGRES_USER", "POSTGRES_PASSWORD", "POSTGRES_DB"]
help_text = """
How to use: PostgreSQL is started by the init script when the sandbox boots. Optional secret files POSTGRES_USER, POSTGRES_PASSWORD, POSTGRES_DB are read from /run/agentkernel/secrets.
Example command: sh -lc 'PGPASSWORD="$(cat /run/agentkernel/secrets/POSTGRES_PASSWORD 2>/dev/null || true)" psql -h 127.0.0.1 -U "$(cat /run/agentkernel/secrets/POSTGRES_USER 2>/dev/null || echo postgres)" -d "$(cat /run/agentkernel/secrets/POSTGRES_DB 2>/dev/null || echo postgres)" -c "SELECT version();"'
Binaries available: postgres, psql, pg_isready
Services and ports: PostgreSQL listens on 5432/tcp.
Secret file keys (optional): POSTGRES_USER, POSTGRES_PASSWORD, POSTGRES_DB
"""