OkulandelayoUmhlahlandlela olandelayo
Amathuluzi Okudizayina Abenzeli be-LLM
Ubuchwepheshe
UMHLAHLANDLELA Wobuchwepheshe
I-sandbox yokusayinda ikhodi iyindawo engayodwa lapho umenzeli we-AI engakwazi ukusebenzisa ikhodi eyibhalayo ngaphandle kokukwazi ukulimaza umshini wokusingatha, ukufinyelela idatha okungafanele ayibone, noma asebenzise izinsiza ezingenamkhawulo.
Kubalulekile ngoba i-ejenti ekwazi ukwenza ikhodi inamandla kakhulu (ingakwazi ukubala, ihlaziye amafayela futhi ihlole umsebenzi wayo), kodwa ikhodi ebhalwe njengemodeli ayithenjwa ngokuzenzakalela futhi ingaba yiphutha, imoshe noma ikhohliswe ngomjovo osheshayo.
Uma i-ejenti ikhiqiza ikhodi, kufanele kube khona okuyiqhubayo. Ukusebenzisa leyo khodi ngokuqondile kukhompuyutha ephathwayo kanjiniyela noma iseva yokukhiqiza kuyingozi: ikhodi ingase isuse amafayela, ifunde imininingwane kokuhlukahluka kwendawo, ukufaka isofthiwe, imayini i-cryptocurrency, noma ivule uxhumano lwenethiwekhi. Ibhokisi lesihlabathi libeka umngcele phakathi kwekhodi nayo yonke enye into. Kunezingqimba ezimbalwa zokuzihlukanisa, ezinokuhwebelana okuhlukene. Iziqukathi ezijwayelekile (ngokwesibonelo i-Docker) zisebenzisa izikhala zamagama ze-Linux namaqoqo ukuze zinikeze ikhodi umbono wayo wezinqubo, amafayela nenethiwekhi, kanye nokukhawulela i-CPU nenkumbulo. Aqala ngokushesha, kodwa sonke isiqukathi sabelana nge-kernel yomsingathi, ngakho-ke ukuba sengozini kwe-kernel kungavumela ikhodi ukuthi ibaleke. I-gVisor, iphrojekthi yomthombo ovulekile evela ku-Google, ingeza i-kernel yendawo yomsebenzisi ebamba izingcingo zesistimu, inciphisa ukuthi iyiphi ikhodi engathenjiwe engathinta i-kernel yangempela. Ama-MicroVM afana ne-Firecracker, eyakhiwe ekuqaleni i-AWS ye-Lambda kanye ne-Fargate, anikeza umsebenzi ngamunye umshini wawo obonakalayo ongasindi kanye ne-kernel ngenkathi usaqala ngengxenyana yomzuzwana. Izinsizakalo ze-sandbox ezisingathwa zama-ejenti, njenge-E2B, zakhela kule ndlela ye-microVM. Ekugcineni okulula kakhulu, izikhathi zokugijima ze-WebAssembly namathuluzi afana ne-Pyodide angasebenzisa i-Python kusiphequluli noma i-Wasm sandbox ngaphandle kokufinyelela kwesistimu okuqondile. Ubuchwepheshe bokuzihlukanisa buyingxenye kuphela yomklamo. Ama-sandbox amahle aphinde akhawulele inethiwekhi (imvamisa ukuphika ngokuzenzakalelayo ngohlu lwabavunyelwe), khweza uhlelo lwefayela lokufunda kuphela ngaphandle kwenkomba yemibhalo, gcina izimfihlo kumvelo ngokuphelele, futhi usebenzise isikhathi, inkumbulo, isibalo senqubo kanye nemikhawulo yediski. Ngokuvamile ziyi-ephemeral: zidalwe ngomsebenzi ngamunye futhi zibhujiswe kamuva. Umbono oyiphutha ovamile ukuthi i-sandbox yenza i-ejenti iphephe. Ikhawulela umonakalo ovela kukhodi ngokwayo, kodwa ayivimbeli i-ejenti ekukhiqizeni izimpendulo ezingalungile, futhi noma iliphi ithuluzi noma imininingwane oyidlulisela ku-sandbox ifinyeleleka nganoma iyiphi ikhodi egijima lapho, okuhlanganisa nekhodi ebhalwe ngokuphendula imiyalelo ejovwe.
Izinqumo zezakhiwo ziqhuba ukusebenza kanye nezindleko zokusebenza iminyaka.
Imfundo yobuchwepheshe isiza amaqembu ukuthi akhethe isitaki esifanele, hhayi nje esisha.
Izinketho ezingcono zobunjiniyela zinciphisa izehlakalo ezinokwethenjelwa ekukhiqizeni.
Ukusetshenziswa kwekhodi sekuba amandla ajwayelekile kubasizi be-AI nama-ejenti, ngakho-ke i-sandboxing ingase ibe isevisi yempahla enezinto ezimisiwe ezinengqondo kunokuthi ithimba ngalinye liyakha kusukela ekuqaleni. Lindela ukuqhubeka komsebenzi ekuqaliseni okusheshayo, isifinyezo kanye nokuqalisa kabusha, kanye nezinqubomgomo ezihlaziywe kangconywana zenethiwekhi nokufinyelela kwefayela okungalungiswa ngomsebenzi ngamunye. Inkinga evuleke kakhulu inqubomgomo esikhundleni sokuzihlukanisa: ukunquma ukuthi i-ejenti kufanele ivunyelwe ukufinyelela ini, nokugcina abasebenzisi bazi, lapho ama-ejenti ethatha izinyathelo ezinde ezizimele. Ukuhlukaniswa kuzohlala kusendlalelo esisodwa phakathi kwezimbalwa, eceleni kwezimvume, ukugawulwa kwemithi nokubuyekezwa komuntu.
Umsizi wokuhlaziya idatha uthola i-CSV elayishiwe, ubhala ikhodi ye-pandas ukuze ayihlanze futhi ahlele amathrendi, futhi asebenzise leyo khodi kubhokisi lesihlabathi elilahlwayo elisuswa lapho isikhathi siphela.
I-ejenti yekhodi iqhuba uhlelo lokuhlola lwenqolobane ngaphakathi kwesiqukathi esingenakho ukufinyelela kwenethiwekhi okuphumayo, ngakho-ke iskripthi sokwencika esinonya asikwazi ukuthumela ikhodi yomthombo noma izimfihlo kuseva yangaphandle.
Inkundla yezemfundo ivumela abafundi ukuthi bacele umfundisi we-AI ukuthi asebenzise izibonelo ze-Python, ukugijima ngakunye kufakwe kumasekhondi ambalwa e-CPU kanye nomkhawulo wenkumbulo ogxilile ukuze iluphu engapheli yephutha ingakwazi ukumisa isevisi.
Ithimba labacwaningi linikeza umenzeli i-microVM enekhophi efundwayo kuphela yedathasethi kanye nefolda yokuphumayo eyodwa ebhalekayo, ukuze umenzeli akwazi ukukhiqiza imiphumela ngaphandle kokulungisa noma ukususa idatha yoqobo.
Ukuthuthukisa ibhentshimakhi eyodwa kungafihla ubuthakathaka obubanzi besistimu.
Izindleko zengqalasizinda nezokulungisa zivame ukubukelwa phansi.
Izikhala zokuphepha nokubonakala zingakhula njengoba izinhlelo ziba nzima kakhulu.
Chaza ukubambezeleka, ikhwalithi, nezindleko ezihlosiwe ngaphambi kokuqaliswa.
Ibhentshimakhi ngaphansi komthwalo wangempela nezimo zedatha.
Ukuqapha amathuluzi amaphutha, ukukhukhuleka, nomthelela wabasebenzisi.
Lungiselela izindlela zokuhlehlisa nezigameko ngaphambi kokukala.
Free newsletter
Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
I-sandbox yokusayinda ikhodi iyindawo engayodwa lapho umenzeli we-AI engakwazi ukusebenzisa ikhodi eyibhalayo ngaphandle kokukwazi ukulimaza umshini wokusingatha, ukufinyelela idatha okungafanele ayibone, noma asebenzise izinsiza ezingenamkhawulo. Kubalulekile ngoba i-ejenti ekwazi ukwenza ikhodi inamandla kakhulu (ingakwazi ukubala, ihlaziye amafayela futhi ihlole umsebenzi wayo), kodwa ikhodi ebhalwe njengemodeli ayithenjwa ngokuzenzakalela futhi ingaba yiphutha, imoshe noma ikhohliswe ngomjovo osheshayo.
Umhlahlandlela uchaza ukuthi ikhodi ebhaliwe yemodeli ingase iqukathe iziphazamisi, isebenzise izinsiza ezeqile, noma ilandele imiyalelo ejovwe, ngakho kufanele isebenze ngaphakathi komngcele kunokuba isebenze ngokuqondile kumsingathi.
Iziqukathi zisebenzisa izikhala zamagama namaqoqo kodwa zonke zabelana nge-kernel yomsingathi, ukuze ukuba sengozini kwe-kernel kungavumela ukubaleka. Ama-MicroVM anikeza umsebenzi ngamunye i-kernel yawo.
I-gVisor, evela ku-Google, isebenzisa i-kernel yesikhala somsebenzisi ephatha amakholi wesistimu, inciphisa ukuthi ingakanani ikhodi yomphathi wangempela engafinyelelwa.
I-Firecracker yadalelwa i-AWS imithwalo yokusebenza engenasiphakeli efana ne-Lambda ne-Fargate, lapho imithwalo yemisebenzi eminingi engayodwa kufanele iqale ngokushesha.
Uma imiyalelo ejovwe ibangela umenzeli ukuthi abhale ikhodi enonya, inethiwekhi yokuphika ngokuzenzakalelayo imisa leyo khodi ukuthi ingachithi idatha.
Qhubeka ufunda
Imihlahlandlela eyengeziwe yalesi sihloko
OkulandelayoUmhlahlandlela olandelayo
Amathuluzi Okudizayina Abenzeli be-LLM
Ubuchwepheshe