Limitations
agentOS is a Linux-like environment with a POSIX-compliant virtual kernel. It handles most agent workloads (coding, scripting, file I/O, networking) with near-zero overhead.
Sandbox mounting
Section titled “Sandbox mounting”When a workload needs a full Linux OS, agents can escalate to a full sandbox on demand without changing code. The sandbox mounting extension mounts the sandbox as a filesystem and lets you execute commands on it, like mounting a hard drive on your own machine. Files written in the VM are available in the sandbox and vice versa.
See agentOS vs Sandbox for a detailed comparison.
Limitations
Section titled “Limitations”Software registry
Section titled “Software registry”agentOS uses its own software registry of popular tools cross-compiled for the runtime. You cannot download and install arbitrary binaries (for example via curl or apt), and standard Linux package managers (apt, yum) are not available since agentOS is not a full Linux OS. Native binaries that are not yet available in the registry (such as Go, Rust, or C++ toolchains) require a full sandbox.
See Software for how to install and configure available packages.
POSIX-compliant, not full Linux
Section titled “POSIX-compliant, not full Linux”agentOS provides a POSIX-compliant virtual kernel with full filesystem operations, networking, and process management. It is not a full Linux kernel, so some Linux-specific features are not available:
- Kernel modules and eBPF
- Container runtimes (e.g. Docker)
- File watching (
inotify,fs.watch)
No hardware access
Section titled “No hardware access”The VM has no access to GPUs, USB devices, or other hardware.