I Gave My Coding Agent a Server of Its Own. Here’s How to Do It Safely.

Описание и применение

Автор показал, как с помощью платформы agentic-hosting дать AI‑агенту собственный сервер для автономного развертывания и управления приложением, обеспечив безопасность через sandboxing и ограничители.

Задача

Agents can write code and tests but lack a safe, self‑hosted platform to deploy and manage their applications, leaving the final deployment step in human hands.

Результат

By deploying agentic‑hosting, the author enabled an AI coding agent to autonomously manage its own deployment lifecycle on a dedicated server, reducing human intervention and improving safety through sandboxing and guardrails.

Рабочий процесс

• Install Docker, gVisor, Go, and Nixpacks on a Linux server.
• Configure Docker to use gVisor runtime and create a Traefik network.
• Build the agentic‑hosting binary and generate secrets.
• Run the agentic‑hosting service and verify health.
• Register a tenant and obtain an API key for the agent.
• Use the API to create a service, start a build from a Git repo, and provision a database.
• Stream build and runtime logs to let the agent detect and fix failures.
• Deploy the updated app and monitor status via the API.
• Use guardrails such as sandboxing, circuit breakers, and rate limits to keep the environment safe.

Доказательства

agentic-hosting is a self-hosted PaaS whose main user is an agent talking to a REST API.

Источник

Every container runs under gVisor, a sandbox that intercepts system calls before they reach the host kernel.

Источник

A reconciler checks every 30 seconds that what the database thinks is running matches what Docker is actually running.

Источник