Today, I'm excited to launch Arrakis: an open-source and self-hostable sandboxing service designed to let AI Agents execute code and operate a GUI securely. GitHub: Watch Claude code a live Google Docs clone using Arrakis. Having a VM sets it free -🧵

AI agents become incredibly capable when given access to a full Linux VM environment. They can debug problems independently and produce working results with minimal human intervention.

Key Features - Self-hostable: Run it on your own infra or Linux server. Secure by Design: Uses MicroVMs for strong isolation between sandbox instances. Snapshotting & Backtracking: First-class support allows AI agents to snapshot-and-restore a running sandbox.

Ready to Integrate: Comes with a Python SDK py-arrakis and an MCP server arrakis-mcp-server out of the box. Customizable: Docker-based tooling makes it easy to tailor sandboxes to your needs. If you're interested in Arrakis - do get in touch! DM or abshkbh AT gmail dot com

firecracker support when? Also, any guide on how to deploy it?

Hello, the project has prebuilt binaries, you can easily setup using them, follow the instructions here - And specifically for GCE VM, instructions are here - Arrakis uses cloud-hypervisor underneath. Both Firecracker and chv are based on crosvm

any reason why you chose hypervisor over firecracker?

When I started the project - 1. Chv had stable snapshot / restore support. Firecracker didn't 2. Hotplugging of memory that I thought would help with memory management 3. I didn't want to be at the mercy of Amazon close sourcing Firecracker

I wish it was in firecracker, doesn't really like gcp. but for this project might try it out.

You don't have to do anything with Firecracker. I abstract it away from you :)

yeah, I meant that I can't really deploy your project on aws because EC2 doesn't support virtualization

^Yes, exactly why I also went with GCP/GCE. AWS does have a bare metal offering, it's just expensive.

This could revolutionize secure code testing and aid local AI implementations.

That is the idea :)

@Scobleizer The spice must flow.

@CryptoSy2 @Scobleizer Always.

great name

Glad you got the reference :)

you should show the cool sand photo

Move over Ghibli! Source:

Gr8 stuff.. would work on aws ec2?

Any Linux machine with kvm access. That rules out EC2 but GCE VMs work!

Excellent 👏

Can’t wait to try it!

Finally, a sandbox where AI agents can break things without breaking prod 🏜️ Self-hostable is the move. Bookmarking this for our next build!

wdyt of

I think they provide a higher level API specifically for computer use. I provide general sandboxes with GUI use. Do whatever you want with them, customize what runs in them at boot and at runtime. Snapshot, restore etc.

great stuff man 👏

Wonderful👍

AGPL-3.0 is hard for companies to adopt.

It is just as a fail safe. Happy to work on extremely favorable terms if someone wants to adopt.