Reading up on WSL2
2 deep · digging since feb 20
- kern: fast rootless container sandbox and virtual resource runtime
Kern is a 1.52 MB, daemonless, rootless container runtime that starts kernel-enforced sandboxes from OCI images in ~3.5 ms, with Python/Node SDKs and MCP server for AI-generated code.
- Implementing a secure sandbox for local agents
Cursor built OS-level sandboxes for coding agents, reducing approval prompts by 40% via Seatbelt on macOS, Landlock+seccomp on Linux, and WSL2 on Windows.