Containers → New container
Containers
Pick a base image and a name. It is ready in seconds.
- Ubuntu 24.04
- Debian 12
- Alpine
You are root
apt install- Compile
- Run a database
- Start a service
Containers run under a sandbox (gVisor) with a restricted syscall profile, and that is what makes it safe to let an AI have root in one.
gVisor sandbox
It outlives the chat
Files persist across restarts and across chats. The container is the durable thing; a chat is not.
Attach a container to a chat so the AI works there. Attach the same container to several chats and they share one filesystem.
A sketch of the relationship, not a timeline.
Pause when idle
Pause a container while it is idle.
Snapshots
Save a known-good state before a risky change.
Known-good state
The risky change