Flake Pilot Logo
  • 1. Introduction
    • 1.1. What Is Flake Pilot
    • 1.2. Components
      • 1.2.1. The Launchers
      • 1.2.2. The Flake Registration Tool
    • 1.3. Use Cases
    • 1.4. Choosing an Engine
  • 2. Installation
    • 2.1. Installing the Packages
    • 2.2. Building From Source
    • 2.3. Privileges
    • 2.4. Next Steps
  • 3. Privileges and Trust
    • 3.1. How Flake Pilot Gets Its Privileges
    • 3.2. What the Helper Checks
    • 3.3. What Each Feature Needs
    • 3.4. What This Means in Practice
    • 3.5. The Reference Policy
  • 4. Getting Started
    • 4.1. System Wide and Rootless Registration
    • 4.2. Preparing the Environment
    • 4.3. Creating the User Setup
    • 4.4. Your First Flake
    • 4.5. Where to Continue
  • 5. Applications From a Container
    • 5.1. Amazon’s SDK Utility as a Container App
    • 5.2. An Editor as a Delta Container
    • 5.3. Claude AI as a Container App
    • 5.4. Engine Options
    • 5.5. Deeper Isolation With krun
    • 5.6. Calling a Registered Container App
    • 5.7. Pilot Options as Part of the Registration
    • 5.8. Updating the Container Image
  • 6. Applications From a Virtual Machine
    • 6.1. Pulling an Image
    • 6.2. A Shell as a Firecracker VM App
    • 6.3. Claude AI as a Firecracker VM App
    • 6.4. Registration Options in Short
  • 7. Firecracker Networking
    • 7.1. The Concept
      • 7.1.1. The Firewall Setup
    • 7.2. The Commands
      • 7.2.1. Prepare the Host
      • 7.2.2. Connect an Application
      • 7.2.3. Disconnect an Application
      • 7.2.4. Delete the Host Setup
    • 7.3. The Result in the Flake Configuration
  • 8. Firecracker Volumes
    • 8.1. Export a Local Path
    • 8.2. Release a Local Path
    • 8.3. Add a Volume to an Application
    • 8.4. Remove a Volume From an Application
    • 8.5. The Result in the Flake Configuration
  • 9. Applications From a Sandbox
    • 9.1. Providing a Root Filesystem Tree
      • 9.1.1. The Host Root as the Tree
    • 9.2. A Shell as a Sandbox App
    • 9.3. Adding Paths from the Host
    • 9.4. Where Written Data Is Kept
    • 9.5. Registration Options in Short
    • 9.6. Calling a Registered Sandbox App
  • 10. Application Setup
    • 10.1. Listing Applications
    • 10.2. The Flake Registry
    • 10.3. Removing an Application
    • 10.4. Reference Documentation
  • 11. How To Build Your Own App Images
    • 11.1. Build Commands
      • 11.1.1. How the Build Works
      • 11.1.2. Building Container Images
      • 11.1.3. Building VM Images
    • 11.2. Delta Containers
  • 12. Best Practices
    • 12.1. AI Workloads
      • 12.1.1. The Pre-Built Images
      • 12.1.2. Pull the Image
      • 12.1.3. Register the Application
      • 12.1.4. Connect the Network
      • 12.1.5. Share One Directory With the Host
      • 12.1.6. Log in With an API Key
      • 12.1.7. Working With AI Instances
      • 12.1.8. The Instance Is Disposable
      • 12.1.9. What Remains Reachable
  • 13. Troubleshooting and Known Issues
    • 13.1. Debugging a Flake
    • 13.2. Known Issues
      • 13.2.1. selinux
      • 13.2.2. firewalld
      • 13.2.3. User and Group ID of an NFS Volume
    • 13.3. Feedback
Flake Pilot
  • Search

© Copyright 2023, Marcus Schäfer. Last updated on November 2026.

Built with Sphinx using a theme provided by Read the Docs.