substrate
Agent Substrate: the core system
Learn how to adjust Linux capabilities for containers in Agent Substrate by specifying add and drop lists in your ActorTemplate. Control container permissions effectively.
How to Deliver Actor Identity Information Using SystemInfo Volumes in Agent SubstrateLearn how to deliver actor identity information using SystemInfo volumes in Agent Substrate. Securely project identity fields into actor filesystems without sidecars or environment variables.
How Sandbox Resource Right-Sizing Works for Actors in Agent SubstrateAgent Substrate right-sizes sandbox resources by converting actor CPU and memory declarations into SandboxSize struct, translating millicores to vCPUs, and embedding constraints into OCI spec for gVisor or micro-VM runtimes.
How to Define an ActorTemplate with Specific Container Configurations in Agent SubstrateLearn to define an ActorTemplate with specific container configurations using YAML manifests. Pin OCI images, mount volumes, and set security contexts for reproducible snapshots.
Requirements for GPU Pools in Agent Substrate: Architecture, Configuration, and LimitationsConfigure GPU pools in Agent Substrate by meeting requirements for gvisor, ateom-gvisor binary, nvidia.com/gpu limits, and host node NVIDIA toolkit setup for actor workloads.
How to Configure WorkerPool for GPU Passthrough in Agent SubstrateLearn to configure WorkerPool for GPU passthrough in Agent Substrate. Set nvidia.com/gpu in resourceRequests, ensure the NVIDIA device plugin is running, and optionally set runtimeClassName: nvidia for direct CUDA access.
How Micro-VM Sandboxing Works in Agent Substrate: Architecture and ImplementationDiscover how Micro VM sandboxing in Agent Substrate provides VM-level security and container-like latency with minimal kernel images and on-demand boot.
How gVisor Provides Sandbox Isolation in Agent SubstrateAgent Substrate leverages gVisor's runsc userspace kernel for robust sandbox isolation, enhancing actor security within your WorkerPool.
Agent Substrate Sandbox Runtimes: gVisor and MicroVM Configuration GuideExplore Agent Substrate's gVisor and MicroVM sandbox runtimes for configurable isolation. Learn how to set up these secure environments for actor execution.
How Agent Substrate Handles Actor Isolation with Atespace: A Technical Deep DiveAgent Substrate ensures actor isolation via Atespaces, creating secure perimeters for resource ownership and preventing tenant interference. Learn the technical details.
Where Is Dynamic Instance State Stored in Agent Substrate?Discover where dynamic instance state resides in Agent Substrate. Learn how Kubernetes Custom Resources and etcd ensure persistent storage while in-memory caches provide fast access.
What Is an ActorTemplate in Agent Substrate? The Complete CRD GuideLearn what an ActorTemplate is in Agent Substrate a Kubernetes CRD that blueprints runnable actors defining containers volumes sandbox runtimes and snapshot configurations
Have a question about this repo?
These articles cover the highlights, but your codebase questions are specific. Give your agent direct access to the source. Share this with your agent to get started:
curl -s "https://instagit.com/install.md" 
Maintain an open-source project? Get it listed too →