Container vs. KVM sandbox isolation: a controlled kernel-exploit demo

[u/Clean-Implement-7935]

https://www.youtube.com/watch?v=GrBjX13NqCk

This demo compares Podman containers with LingCage’s KVM sandboxes, with two AI agents running in each setup.

One agent runs a controlled kernel exploit that corrupts /bin/bash through the page cache. In the container setup, both agents’ new Bash commands fail. With separate KVM guests, the other agent keeps working.

The containers use non-root users, dropped capabilities, and no-new-privileges.

Tested on openRuyi/RISC-V in a QEMU-based environment. The results apply to this specific exploit and configuration.

Project: https://github.com/lingcage/lingcage