FourSigma

I am pretty sure Apple containers on MacOS Tahoe are Kata containers

That is a great idea. Have you looked into Docker's Sandbox feature?

I've been exploring this space. There are some use cases where I'd love to run an isolated Claude agent asynchronously. I think running Docker in rootless mode might solve some of the OP's concerns—I believe Podman does this implicitly. Also, there are tools like Kaniko that does not need Docker to create container images. You can also try changing the underlying container runtime to something like gVisor if you want more security.

Does anybody have experience using microVMs (Firecracker, Kata Containers, etc.) for this use case? Would love to hear your thoughts.

Thank you! Great details. Definitely want convenient.

Could someone please rundown the pros and cons of using third party cost management software (ex. Ternary)? Are the tools in this space specifically designed for enterprise level cloud cost management?

There seem to be a lot of options out there. Would love a critical overview and recommendations for SaaS in this space.

This is something that boggles my mind. Why would not lead with compensation range so we don't waste each others time? Moreover, it some state it is law to reveal the comp range in the job post.

Would like to recommend reading the book `Range by David Epstein`. It has some interesting thoughts about being a generalist vs specialist in our complex world.

Any idea what the Hetzner equivalent in the US would be?