Kern
1 commentThe first launch from Kern
Kern
A rootless container that starts in about 3.5ms
DevOps & hostingDeveloper tools
#3 of the day · 9 Sep 2026
Kern is a sandbox and resource runtime for code you do not necessarily trust, including the code an agent just wrote. It takes an OCI image and gives you a kernel-enforced container in a few milliseconds, with no daemon and no root, from a binary of about a megabyte and a half.
Meet the team
What people who use it say
Nobody has reviewed Kern yet. If you have used it, you are the one who can say whether it holds up.
Write the first review
Sign in to comment
Everybody running agents locally has the same unspoken arrangement with themselves: the model writes a shell command, and you read it quickly and press enter. Sandboxing it properly has always cost either a daemon or a second of startup, and a second is enough to make you stop bothering.
This is the first one I have seen where the startup cost is small enough that you would leave it on. Daemonless matters as much as the speed — nothing to install on a colleague's machine before they can run your thing.