How to sandbox AI agents with OpenShell | AgentOps Unlocked

Publicado em

Publicação: IA Dots · Fontes e correções

-

Vídeo em Inglês, publicado pelo canal Red Hat.

Assistir ao vídeo original no YouTube

Assuntos: Agentes de IA, Assistente pessoal. Publicado no YouTube em 2026-10-20.

Seleção automática por assunto e idioma. O vídeo pertence ao canal de origem.

About OpenShell

OpenShell is an open source runtime from NVIDIA that runs AI agents in isolated sandboxes. What each sandbox can do is set in a YAML policy: which files processes can read or write, which user they run as, and which network destinations each program can reach. Anything the policy does not allow is denied. File and process rules are fixed when the sandbox starts, while network rules can be changed while it runs, according to NVIDIA's documentation.

According to Red Hat, credentials are never stored inside the sandbox: OpenShell injects them at the network boundary, so a compromised agent has nothing to steal. Its OpenShift driver runs each agent as a Kubernetes pod, and OpenShell is planned for integration into Red Hat AI. The video's description adds that the demo uses the OpenCode coding agent and Kata Containers on Red Hat OpenShift.

Fact sheet

  • Project: OpenShell
  • Developer: NVIDIA (open source)
  • Policy format: YAML, deny by default
  • File system enforcement: Landlock (Linux kernel)
  • Red Hat integration: OpenShift driver; planned for Red Hat AI
  • Presenter (per the description): Legare Kerrison, Red Hat Developer Advocate

Read also

Sources and references: NVIDIA OpenShell – Sandbox Policies · Red Hat Blog – Red Hat AI and OpenShell · YouTube description of the video by the Red Hat channel.

Comentários

Postar um comentário

Postagens mais visitadas deste blog

How to build a JARVIS AI Voice Agent for FREE | Full Livekit Tutorial (2026)

-
Imagem
Vídeo em Inglês, publicado pelo canal Thanh-y David Nguyen . About this content: The summary, key points and topics below are generated automatically from the video transcript. They reflect the content, opinions, claims and predictions presented in the video and do not represent a position, validation or fact-check by IA Dots. Video summary O vídeo apresenta um tutorial passo a passo sobre como criar um assistente de voz com inteligência artificial chamado Jarvis, utilizando Python, o framework de código aberto LiveKit e modelos de linguagem como o Gemini. O autor demonstra a configuração do ambiente, a personalização do comportamento do agente através de prompts, a integração de ferramentas como busca na web e controle do navegador via Playwright, além da criação de uma interface web e a implantação do aplicativo em dispositivos Android e iOS. Key points Explicação sobre o uso do LiveKit, um framework de código aberto em Python para a construção de agentes de voz, utilizando a versão...
Leia mais

How Does AI Actually Work? 🤖 | AI, Machine Learning & Generative AI Explained

-
Imagem
Vídeo em Inglês, publicado pelo canal UpskillNexus . Video transcript Transcript from available captions; it may contain errors. Hi everyone. Welcome to Upskill Nexus channel, and today we're going to understand the foundations of AI. So, we're going to understand what exactly is AI, how does AI function, what are the different subtypes of AI, how is AI classified, what are the technical aspects, and as a practitioner, uh what are the applications of AI? Just a quick check, this is part of our AI foundation series where we're trying to unpack and make AI easier and simpler for people to understand. So, don't forget to subscribe to the channel, like this video so that you keep getting our videos in the suggestions, and start getting more and more information about the AI ecosystem. Now, let's get on to it. Okay, let's start with understanding the definitions of what exactly is artificial intelligence. Now, if you think about artificial intelligence, right? In ter...
Leia mais