https://www.pimwiddershoven.nl/tags/kata-containers/Recent content in Kata-Containers on Pim WiddershovenHugoenFri, 16 Oct 2026 00:00:00 +0000https://www.pimwiddershoven.nl/entry/kata-containers-sandboxing-ai-agents-and-ci-pipelines/Fri, 16 Oct 2026 00:00:00 +0000https://www.pimwiddershoven.nl/entry/kata-containers-sandboxing-ai-agents-and-ci-pipelines/Standard containers share one kernel with everything else on the node, which is a risk for code that can’t be trusted. This post explains how Kata Containers gives each pod its own kernel, what that costs, and how I use it to run CI pipelines and AI agents in it, sandboxed.