hn.today

Nvidia OpenShell

github.com307 points162 comments
Screenshot of Nvidia OpenShell

OpenShell is a safe, private runtime for fleets of autonomous AI agents that lets agents read files, install packages, call APIs, and use credentials without granting unrestricted host access. It enforces fine‑grained policies at kernel level: each agent runs in an isolated sandbox where kernel controls restrict file access and allowed system calls, and every outbound network connection is checked against policy. Real credentials are never exposed to agents; OpenShell injects credentials only into requests bound to approved endpoints. Policy changes are analyzed with formal verification so risky new access - such as reaching new hosts with credentials or calling new API methods - is flagged for human review. The architecture is built around sandboxes, a supervisor, and a gateway that manage policy and access.

Practical features include a CLI installer and quickstart for Linux, macOS on Apple Silicon, and experimental Windows WSL2, with Docker/Podman or host virtualization support and a minimal Ubuntu sandbox image. SDKs are available for Python, TypeScript, Go, and Rust; a public skills package teaches agents to drive the CLI and write policies. The project is extensible (middleware, interceptors, compute drivers), supports Kubernetes deployments via Helm (requires CNI NetworkPolicy), and provides an advisor and prover for policy reviews. Telemetry is anonymous and opt‑out, and the project is open source under Apache 2.0, with active community discussion, issues, and an explicit roadmap.

Read on github.com162 comments on Hacker News

Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.

More in AI

The daily digest

Today's best Hacker News stories, summarized and screenshotted, one email a day.