[{"data":1,"prerenderedAt":180},["ShallowReactive",2],{"project-47125966":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":34,"aspects":35,"strip":38,"post_text":40,"what":41,"said":79,"maker_in_thread":109,"shape":119,"grid":122,"attempts":142,"same_week":143,"maker_shows":172,"maker_hidden":173,"reader_version":174,"card":175},"47125966","BVisor","An Embedded Bash Sandbox, 2ms Boot, Written in Zig","title","Show HN: BVisor – An Embedded Bash Sandbox, 2ms Boot, Written in Zig","https:\u002F\u002Fgithub.com\u002Fbutter-dot-dev\u002FbVisor","github.com","edunteman",1771869412,2026,24,9,1827,4366,42,"shown","dev_tools","sandbox runtime","library",[24,25,26,27],"bash sandbox","seccomp","syscall virtualization","zig sandbox","quiet",null,{"positive":31,"neutral":32,"mixed":33,"critical":33},2,1,0,3,{"performance":36,"idea":37},{"positive":32,"critical":33},{"positive":32,"critical":33},[39,33,33,33,33,34,33,39,33],5,"bVisor is an SDK and runtime for safely executing bash commands directly on your host machine. We built it on the belief that \"sandbox\" doesn't need to mean shipping off to remote sandbox products, or spinning up local VMs \u002F containers. Sometimes, you just want to run that bash command locally.\n\nbVisor boots a sandbox from user-space without special permissions, powered by seccomp user notifier. This allows us to intercept syscalls from guest processes and selectively virtualize them to block privilege escalation, isolate process visibility, and keep filesystem changes isolated per sandbox (co",{"problem":42,"audience":48,"pricing":29,"motivation":57,"time_to_build":29,"stack":61,"openness":76,"stage":77,"team_size":78},{"value":43,"source":44,"evidence":45},"Safely running bash commands on the host without remote sandboxes or local VMs\u002Fcontainers","maker",[46],{"id":47},"post",{"value":49,"source":50,"evidence":51},"Developers who want to run bash commands locally in a sandbox","inferred",[52,53],{"id":47},{"id":54,"by":55,"text":56},"47134073","vrn21","from a utilitarian perspective, can we swap this instead of a e2b or some other provider? since this doesnt require n number of micrvovm kernals and rootfs hanging round?",{"value":58,"source":44,"evidence":59},"Belief that sandboxes need not mean remote products or local VMs; sometimes you just want to run bash locally",[60],{"id":47},[62,66,70],{"value":63,"source":44,"evidence":64},"Zig",[65],{"id":47},{"value":67,"source":44,"evidence":68},"TypeScript SDK",[69],{"id":47},{"value":71,"source":44,"evidence":72},"Node N-API bridging",[73],{"id":74,"by":11,"text":75},"47152965","Your repo was actually a major point of reference! Thank you for open sourcing it. Ironically when I first got into zig I built a similar generator for python bridging which your…","open_source","beta","unknown",{"praise":80,"objections":89,"requests":90,"questions":95,"alternatives":100},[81],{"value":82,"source":83,"evidence":84},"Good performance in dev testing","commenter",[85],{"id":86,"by":87,"text":88},"47127268","JoshPurtell","Have been testing this in dev and really like the performance so far",[],[91],{"value":92,"source":44,"evidence":93},"Outbound network access to support curl",[94],{"id":47},[96],{"value":97,"source":83,"evidence":98},"Can it replace cloud sandbox providers like E2B for quick jobs?",[99],{"id":54,"by":55,"text":56},[101,105],{"value":102,"source":83,"evidence":103},"E2B",[104],{"id":54,"by":55,"text":56},{"value":106,"source":44,"evidence":107},"gVisor",[108],{"id":47},{"comments":110,"answered":31,"key":111},4,[112,115,116],{"id":113,"text":114},"47128235","Hell yeah, love to hear it! Happy to answer any questions or issues you run into",{"id":74,"text":75},{"id":117,"text":118},"47128533","Correct, your PATH resolves to your local tools as if it was unprotected bash, but syscalls are filtered\u002Fvirtualized",{"commenters":110,"max_depth":110,"maker_replies":110,"first_comment_mins":120,"lifespan_hours":121},78,164,[123,125,127,131,132,134,137,138,140],[86,33,39,124,87,33],"project\u002Fpositive\u002Fperformance",[113,33,33,126,11,32],"maker\u002Fpositive\u002Fnone",[128,32,33,129,130,33],"47149689","commenter\u002Fneutral\u002Fnone","cztomsik",[74,32,33,129,11,32],[133,32,33,129,130,33],"47217832",[135,31,34,136,55,33],"47128434","project\u002Fneutral\u002Fidea",[117,31,33,136,11,32],[54,31,39,139,55,33],"project\u002Fpositive\u002Fidea",[141,31,33,136,11,32],"47140202",[],[144,149,154,159,163,168],{"id":145,"name":146,"points":147,"category":148},"47075124","Micasa",657,"productivity",{"id":150,"name":151,"points":152,"category":153},"47114530","CIA World Factbook Archive",496,"learning_science",{"id":155,"name":156,"points":157,"category":158},"47104667","ntransformer",395,"ai",{"id":160,"name":161,"points":162,"category":158},"47131225","Steerling-8B",328,{"id":164,"name":165,"points":166,"category":167},"47123631","PgDog",326,"infrastructure",{"id":169,"name":170,"points":171,"category":158},"47143755","Moonshine Open-Weights STT models",316,8,false,"v2",{"id":176,"name":5,"line":6,"ai":173,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":29,"top":18,"kw":177,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":178,"url":9,"mix":179,"praise":82,"objection":-1,"sub":21},47125966,[24,25,26,27],"500003050",[31,32,33,33],1793991145257]