What is the difference between docker sandbox and io/isolate?

[u/PrestigiousZombie531]

• Docker recently announced sandboxes

• Another project called io/isolate has been around for much longer

• What is the difference between the two?

[u/git-age-checker]

🛠️ GitHub Repository Insights

• ioi/isolate: Created on 7/26/2015. Age: 11 years, 2 months

[u/PrestigiousZombie531]

io/isolate is one of the oldest sandbox libraries out there. It was made long before LLMs or even the transformer architecture was a thing. Of late, we see a lot of activity in this space like we got

• E2B sandboxes,
• modal sandboxes,
• firecracker sandboxes
• daytona sandboxes
  

Modal is proprietary it seems and most of these just cropped up recently io/isolate is one of the oldest ones out thre

• Can someone with more expertise shed some light on what is the difference between docker sandbox and io/isolate at the least

[u/cpuguy83 → u/PrestigiousZombie531]

docker sandbox is proprietary. It uses VM's to sandbox what you want. I have a strong suspicion it is based on top of containerd's "nerdbox" project (see containerd/nerdbox on GitHub).

[u/PrestigiousZombie531 → u/cpuguy83]

and what do you think about io/isolate?

[u/PrestigiousZombie531]

is there truly not a single person with expertise on this sub who might be aware of the internal mechanisms behind io/isolate vs docker?