Nvidia's OpenShell Releases v0.0.33 with libkrun MicroVM Driver for AI Agent Sandboxing

Gate News message, April 21 — Nvidia's open-source AI Agent sandbox runtime OpenShell released version v0.0.33 recently, according to monitoring by Beating. The update introduces libkrun, a lightweight microVM driver based on KVM, alongside enhanced security features including strengthened seccomp filtering, improved inference routing, and stricter process limits. OpenShell uses YAML-based policies to manage file access, data exfiltration prevention, and network requests within the sandbox, providing secure code execution isolation for autonomous agents.

Previously, OpenShell relied on Kubernetes as its compute backend, running a K3s cluster within a single Docker container. libkrun offers near-container startup speed while providing VM-level isolation, adding a kernel-level boundary for untrusted code execution compared to traditional containerization.

The project has accumulated 5.2k stars on GitHub and operates under the Apache 2.0 license. According to the official README, OpenShell remains in alpha stage and currently supports only single-player mode with single developer, single environment, and single gateway configurations.