microsoft/mxc
View on GitHub ↗ ★ 3,073 Rust
Policy-driven, layered isolation and containment
10 mentions on Hacker News by 10 people: 3 stories, 7 comments · first 2026-06-02 · latest 2026-10-22
20082026
-
…"bwrap: Add the option to skip the procfs mount · Pull Request #1508 · microsoft/mxc" https://github.com/microsoft/mxc/pull/1508 "Manage Sandboxes | NVIDIA OpenShell" https://docs.nvidia.com/openshell/latest/how-it-works/sandbo... To…
comment by westurner · 2026-10-22 · in OpenShell – A safe, private runtime for fleets of autonomous AI agents -
…has mxc which I think is neat — not sure if it’s the right level of abstraction for your needs https://github.com/microsoft/mxc
comment by eyeris · 2026-10-15 · in OpenCode 2.0 -
…just silently add the whole C drive with read-only permissions. Circumventing all other policies. https://github.com/microsoft/mxc/issues/1455 A lot of common error cases regularly happen and don't provide reasonable error messages. No…
comment by andix · 2026-10-11 · in Mxc: Microsoft Execution Containers version 1.0.0 -
…have this for Windows and Linux, but it's sadly missing for macOS - see the support table here: https://github.com/microsoft/mxc/blob/main/docs/backends/sea... Things macOS is missing include "Allow/deny by hostname" and "Allow/deny by IP,…
comment by simonw · 2026-10-09 · in MXC - a sandboxed code execution system -
…alone aren't enough. Windows is also having a similar feature on top of WSL, announced at BUILD. https://github.com/microsoft/mxc
comment by pjmlp · 2026-06-10 · in macOS Container Machines -
Microsoft is working on this with their new execution containers ( https://github.com/microsoft/mxc )
comment by thewebguyd · 2026-06-06 · in Nvidia is proposing a beast of a CPU system for Windows PCs