agentkernel 0.18.1

Run AI coding agents in secure, isolated microVMs
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

# Redis sandbox template
# Redis server image for local development and caching workloads.

[sandbox]
name = "redis"
base_image = "redis:7-alpine"
init_script = """
set -e
secrets_path=${AGENTKERNEL_SECRETS_PATH:-/run/agentkernel/secrets}
redis_password=$(cat "$secrets_path/REDIS_PASSWORD" 2>/dev/null || true)

if ! redis-cli -h 127.0.0.1 -p 6379 ping >/dev/null 2>&1; then
  if [ -n "$redis_password" ]; then
    redis-server --daemonize yes --requirepass "$redis_password"
    for _ in $(seq 1 30); do
      if redis-cli -h 127.0.0.1 -p 6379 -a "$redis_password" ping >/dev/null 2>&1; then
        break
      fi
      sleep 1
    done
    redis-cli -h 127.0.0.1 -p 6379 -a "$redis_password" ping >/dev/null 2>&1 || {
      echo "redis failed to start" >&2
      exit 1
    }
  else
    redis-server --daemonize yes
    for _ in $(seq 1 30); do
      if redis-cli -h 127.0.0.1 -p 6379 ping >/dev/null 2>&1; then
        break
      fi
      sleep 1
    done
    redis-cli -h 127.0.0.1 -p 6379 ping >/dev/null 2>&1 || {
      echo "redis failed to start" >&2
      exit 1
    }
  fi
fi
"""

[resources]
vcpus = 1
memory_mb = 512

[security]
profile = "moderate"
network = true

[ports]
6379 = 6379

[template]
description = "Redis server image for caching and queues"
category = "Datastores"
secret_files = ["REDIS_PASSWORD"]
help_text = """
How to use: Redis is started by the init script when the sandbox boots. Optional secret file REDIS_PASSWORD is read from /run/agentkernel/secrets.
Example command: sh -lc 'PW=$(cat /run/agentkernel/secrets/REDIS_PASSWORD 2>/dev/null || true); if [ -n "$PW" ]; then redis-cli -h 127.0.0.1 -p 6379 -a "$PW" ping; else redis-cli -h 127.0.0.1 -p 6379 ping; fi'
Binaries available: redis-server, redis-cli
Services and ports: Redis listens on 6379/tcp.
Secret file keys (optional): REDIS_PASSWORD
"""