Article Summary:
Describe how to run microVMs using only packages from Fedora official repositories. The purpose is to isolate AI agents from the host system.
Article Description:
Given the amount of recent kernel bugs resulting in permission escalations, I decided that containers are no longer enough to isolate AI Agents such as Claude code from my host system. The article describes:
- How to run podman with krun backend
- Pitfalls on the way:
- CPU/RAM resources
- outdated libkrun version in Fedora 44
Sources:
I have read and understand the Ai-Assisted Contributions Policy
For Editor Use Only
Editor: rlengland
Image Editor:
Publication Date:
Preview Link: https://fedoramagazine.org/?p=43429&preview=true