https://containarium.dev/blog/ Engineering notes on agent sandboxes, LXC internals, and container isolation from the team building Containarium. en © FootprintAI. Apache 2.0 for OSS components. Tue, 28 Jul 2026 12:00:00 +0000 https://containarium.dev/og.png https://containarium.dev/blog/ https://containarium.dev/blog/run-untrusted-agent-code https://containarium.dev/blog/run-untrusted-agent-code Tue, 28 Jul 2026 12:00:00 +0000 "Untrusted" is three different threats, and most teams defend the wrong one — shopping for isolation technology while running with unrestricted outbound network access. What a container boundary actually buys you, what it doesn't, and when a box is the wrong tool. https://containarium.dev/blog/scaling-coding-agents https://containarium.dev/blog/scaling-coding-agents Tue, 28 Jul 2026 00:00:00 +0000 Everyone uses a coding agent to write code; almost nobody talks about how to scale one up. Two things made it work for our team — a software quality process the agents actually follow, and one isolated Linux box per agent. Also available in Traditional Chinese: https://containarium.dev/zh-tw/blog/scaling-coding-agents https://containarium.dev/blog/best-ai-agent-sandboxes https://containarium.dev/blog/best-ai-agent-sandboxes Fri, 19 Jun 2026 00:00:00 +0000 Containarium, E2B, Modal, and Daytona side by side on the things that actually decide the choice: self-hosting, persistence, isolation technology, license, MCP support, and cost. Written by a vendor in the space, so it says plainly where each competitor wins.