# substrate | Agent Substrate | Knowledge Base | Instagit

Agent Substrate: the core system

GitHub Stars: 1.6k

Repository: https://github.com/agent-substrate/substrate

---

## Articles

### [How to Adjust Linux Capabilities for Containers in Agent Substrate](/agent-substrate/substrate/how-to-adjust-linux-capabilities)

Learn how to adjust Linux capabilities for containers in Agent Substrate by specifying add and drop lists in your ActorTemplate. Control container permissions effectively.

- Tags: how-to-guide
- Published: 2026-08-22

### [How to Deliver Actor Identity Information Using SystemInfo Volumes in Agent Substrate](/agent-substrate/substrate/how-to-deliver-actor-identity-systeminfo-volumes)

Learn how to deliver actor identity information using SystemInfo volumes in Agent Substrate. Securely project identity fields into actor filesystems without sidecars or environment variables.

- Tags: how-to-guide
- Published: 2026-08-22

### [How Sandbox Resource Right-Sizing Works for Actors in Agent Substrate](/agent-substrate/substrate/how-sandbox-resource-right-sizing-handled)

Agent Substrate right-sizes sandbox resources by converting actor CPU and memory declarations into SandboxSize struct, translating millicores to vCPUs, and embedding constraints into OCI spec for gVisor or micro-VM runtimes.

- Tags: internals
- Published: 2026-08-22

### [How to Define an ActorTemplate with Specific Container Configurations in Agent Substrate](/agent-substrate/substrate/how-to-define-actortemplate-container-config)

Learn to define an ActorTemplate with specific container configurations using YAML manifests. Pin OCI images, mount volumes, and set security contexts for reproducible snapshots.

- Tags: how-to-guide
- Published: 2026-08-22

### [Requirements for GPU Pools in Agent Substrate: Architecture, Configuration, and Limitations](/agent-substrate/substrate/requirements-for-gpu-pools)

Configure GPU pools in Agent Substrate by meeting requirements for gvisor, ateom-gvisor binary, nvidia.com/gpu limits, and host node NVIDIA toolkit setup for actor workloads.

- Tags: architecture
- Published: 2026-08-22

### [How to Configure WorkerPool for GPU Passthrough in Agent Substrate](/agent-substrate/substrate/how-to-configure-workerpool-for-gpu)

Learn to configure WorkerPool for GPU passthrough in Agent Substrate. Set nvidia.com/gpu in resourceRequests, ensure the NVIDIA device plugin is running, and optionally set runtimeClassName: nvidia for direct CUDA access.

- Tags: how-to-guide
- Published: 2026-08-22

### [How Micro-VM Sandboxing Works in Agent Substrate: Architecture and Implementation](/agent-substrate/substrate/how-micro-vm-works-for-sandboxing)

Discover how Micro VM sandboxing in Agent Substrate provides VM-level security and container-like latency with minimal kernel images and on-demand boot.

- Tags: architecture
- Published: 2026-08-22

### [How gVisor Provides Sandbox Isolation in Agent Substrate](/agent-substrate/substrate/how-gvisor-provides-sandboxing)

Agent Substrate leverages gVisor's runsc userspace kernel for robust sandbox isolation, enhancing actor security within your WorkerPool.

- Tags: internals
- Published: 2026-08-22

### [Agent Substrate Sandbox Runtimes: gVisor and MicroVM Configuration Guide](/agent-substrate/substrate/what-sandbox-runtimes-supported)

Explore Agent Substrate's gVisor and MicroVM sandbox runtimes for configurable isolation. Learn how to set up these secure environments for actor execution.

- Tags: how-to-guide
- Published: 2026-08-22

### [How Agent Substrate Handles Actor Isolation with Atespace: A Technical Deep Dive](/agent-substrate/substrate/how-agent-substrate-handles-actor-isolation)

Agent Substrate ensures actor isolation via Atespaces, creating secure perimeters for resource ownership and preventing tenant interference. Learn the technical details.

- Tags: deep-dive
- Published: 2026-08-22

### [Where Is Dynamic Instance State Stored in Agent Substrate?](/agent-substrate/substrate/where-is-dynamic-instance-state-stored)

Discover where dynamic instance state resides in Agent Substrate. Learn how Kubernetes Custom Resources and etcd ensure persistent storage while in-memory caches provide fast access.

- Tags: internals
- Published: 2026-08-22

### [What Is an ActorTemplate in Agent Substrate? The Complete CRD Guide](/agent-substrate/substrate/what-is-actortemplate)

Learn what an ActorTemplate is in Agent Substrate a Kubernetes CRD that blueprints runnable actors defining containers volumes sandbox runtimes and snapshot configurations

- Tags: deep-dive
- Published: 2026-08-22

### [How Agent Substrate Manages WorkerPool CRDs: Controller Architecture and Lifecycle](/agent-substrate/substrate/how-are-workerpool-crds-managed)

Learn how Agent Substrate manages WorkerPool CRDs with its controller architecture. Discover how it translates specs, syncs status, and exports metrics for Kubernetes Deployments.

- Tags: architecture
- Published: 2026-08-22

### [How to Use the kubectl-ate Plugin to Manage Agent Substrate Resources](/agent-substrate/substrate/how-to-use-kubectl-ate-plugin)

Learn to use the kubectl-ate plugin for Agent Substrate to manage atespaces, actors, and workers via CLI. Simplify your cluster resource management today.

- Tags: how-to-guide
- Published: 2026-08-22

### [How the Pod Certificate Controller Manages mTLS Certificates in Agent Substrate](/agent-substrate/substrate/how-podcertcontroller-manages-mtls)

Discover how the Pod Certificate Controller automates mTLS certificate management in Agent Substrate by watching requests, assigning them to replicas, and signing short-lived X.509 certificates with SPIFFE identities.

- Tags: internals
- Published: 2026-08-22

### [What Is the Role of atenet in Agent Substrate Networking?](/agent-substrate/substrate/role-of-atenet-in-networking)

Discover atenet, Agent Substrate's networking layer. It manages actor traffic with an ingress router and egress gateway, secured by mutual TLS and dynamic configuration.

- Tags: deep-dive
- Published: 2026-08-22

### [How the Ateom Sidecar Works with Sandbox Runtimes in Agent Substrate](/agent-substrate/substrate/how-ateom-sidecar-works-with-runtimes)

Learn how the ateom sidecar orchestrates gVisor containers and micro-VMs in Agent Substrate worker pods abstracting runtime differences and managing image caching resource isolation and coordination.

- Tags: how-to-guide
- Published: 2026-08-22

### [What Is the Purpose of the Atelet Component in Agent Substrate?](/agent-substrate/substrate/purpose-of-atelet-component)

Discover the purpose of the atelet component in Agent Substrate. Learn how this node-level supervisor manages worker pods, OCI bundles, and sandboxes for efficient agent operations.

- Tags: deep-dive
- Published: 2026-08-22

### [How the Control Plane Is Implemented in Agent Substrate: A Deep Dive into the Three-Tier Architecture](/agent-substrate/substrate/how-is-control-plane-implemented)

Explore the three-tier architecture of Agent Substrate's control plane. Learn how ateapi, atecontroller, and atelet manage millions of actor sandboxes with CRDs and reconcile loops.

- Tags: deep-dive
- Published: 2026-08-22

### [What Are the Main Components of Agent Substrate?](/agent-substrate/substrate/what-are-agent-substrate-components)

Explore the main components of Agent Substrate: Control Plane, Node Supervisor, and Data Plane. Understand how these layers facilitate rapid actor activation on Kubernetes.

- Tags: getting-started
- Published: 2026-08-22

### [What Is Agent Substrate? A Deep Dive into the High-Density Actor Runtime](/agent-substrate/substrate/what-is-agent-substrate)

Discover Agent Substrate, a high-density runtime enabling millions of concurrent agents with sub-second latency. Learn how it maps workloads efficiently onto worker pools for optimal performance.

- Tags: deep-dive
- Published: 2026-08-22