K8E
A single binary under 100 MB that turns a Linux host into a self-hosted sandbox platform for running secure, isolated AI-agent workloads at scale, with gVisor, Kata or Firecracker isolation and an E2B-compatible API.
K8E gives each agent session hardware isolation through a pluggable runtime, gVisor by default, Kata Containers or Firecracker microVMs, and Cilium eBPF network policies that restrict egress to allowed hosts per session with no separate proxy process. Resource quotas cap CPU and memory per agent session, and workspaces are ephemeral, cleaned up automatically once a session ends, including per-session isolation for sub-agents.
A warm pool of pre-booted sandbox pods gives sub-500ms session claim latency, and content-addressed snapshots use a SHA-256 store with zstd compression, chunked multi-layer manifests and incremental restore from a base image. Exec transcripts are file-backed, windowed and resumable from an offset, and Prometheus metrics plus a disk-only NDJSON event stream cover observability.
It installs with a single shell script and is designed to bring up a production-grade cluster in under 60 seconds.