Hacker News

points by photonios 1 day ago | 0 comments

I keep seeing projects like this pop up and they never nail it.

I need isolation, but I also need to give my agents secure access to internal package registries, logs, internal infra, designs, emulators, browsers, docs etc. At a large company, work can span dozens of repositories. And on top of that, I need dozens of these.

I built this at work. Engineers use krunkit VMs with proper memory ballooning, GPU acceleration. Retina RDP, credential injecting proxy for etc.

This seems like a fun toy for single project development, but nothing close to what you need as an engineer in a corporate environment.

[–] nilleb 1 day ago

Hello! I am really interested in your advice on https://GitHub.com/nillebco/varda

Because it's not just VMs, but a lot more around credentials injection, egress, volumes, agents selection policies. I am quite sure also the memory ballooning and GPU acceleration can be fine tuned.

In advance, thank you very much for your feedback!

[–] photonios 18 hours ago

You got the right base, but it seems centered around single project/ticket work.

A lot of work me and my fellow engineers do spans weeks if not months, tens of code bases, tickets etc. Having longer lived sandboxes that cover N repos in which you can just let experiments exist, together with plans etc is a superpower.

[–] toyg 1 day ago

I think this sort of thing can still be useful to smaller shops. I have a hobby project in this vein, and I know it will never make it big, but it's still a fun hamster wheel.

[–] wcoenen 21 hours ago

What is "Retina RDP"?

[–] jonathanlydall 20 hours ago

It’s an option on the Windows app (Microsoft’s own RDP client), connects at full retina resolution but while having the host being set to 200% UI scale, so that you get the crisp text and UI.

[–] photonios 19 hours ago

Yeap. That's it.

[–] appstorelottery 18 hours ago

I'm constantly blown away by the power that LLM's are giving us. I've been working on a self-improving agent for around six months - and over the past few weeks I used VM's to isolate the governance layer. Virtualization is - to me - a completely black art, and yet with the deepseek flash 4.1 model the agent itself has built it's own virtual machine launcher/manager on OSX and even managed to port it to windows (windows Home has very limited VM support). For all the negative excitement about LLM's, I'm just amazed how our capabilities are being extended as engineers and what's possible.