{"id":130290,"date":"2026-09-25T15:38:08","date_gmt":"2026-09-25T08:38:08","guid":{"rendered":"https:\/\/tino.vn\/blog\/?p=130290"},"modified":"2026-09-25T15:41:10","modified_gmt":"2026-09-25T08:41:10","slug":"thiet-lap-docker-sandbox-cho-hermes-agent","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/thiet-lap-docker-sandbox-cho-hermes-agent\/","title":{"rendered":"C\u00e1ch thi\u1ebft l\u1eadp Docker sandbox cho Hermes Agent an to\u00e0n A-Z"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>M\u1ed9t AI agent nh\u01b0 Hermes Agent c\u00f3 kh\u1ea3 n\u0103ng t\u1ef1 ch\u1ea1y l\u1ec7nh, \u0111\u1ecdc file, g\u1ecdi API v\u00e0 th\u1eadm ch\u00ed c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m thay b\u1ea1n. Nh\u01b0ng ch\u00ednh kh\u1ea3 n\u0103ng \u0111\u00f3 c\u0169ng l\u00e0 con dao hai l\u01b0\u1ee1i n\u1ebfu \u0111\u1ec3 agent thao t\u00e1c tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y ch\u1ee7 th\u1eadt. Docker Sandbox ch\u00ednh l\u00e0 l\u1edbp c\u00e1ch ly gi\u00fap m\u1ecdi l\u1ec7nh c\u1ee7a Hermes Agent ch\u1ea1y trong m\u1ed9t m\u00f4i tr\u01b0\u1eddng t\u00e1ch bi\u1ec7t, gi\u1edbi h\u1ea1n quy\u1ec1n v\u00e0 t\u00e0i nguy\u00ean, thay v\u00ec ch\u1ea1m tr\u1ef1c ti\u1ebfp v\u00e0o h\u1ec7 \u0111i\u1ec1u h\u00e0nh ch\u00ednh. C\u00f9ng Tino t\u00ecm hi\u1ec3u c\u00e1ch thi\u1ebft l\u1eadp Docker Sandbox cho Hermes Agent an to\u00e0n qua b\u00e0i vi\u1ebft d\u01b0\u1edbi \u0111\u00e2y nh\u00e9!<\/strong><\/p>\n\n\n\n<h2 id=\"Docker_Sandbox_trong_Hermes_Agent_l\u00e0_g\u00ec?\"><strong>Docker Sandbox trong Hermes Agent l\u00e0 g\u00ec?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hermes Agent h\u1ed7 tr\u1ee3 nhi\u1ec1u <strong>Terminal Backend<\/strong>, t\u1ee9c m\u00f4i tr\u01b0\u1eddng m\u00e0 c\u00e1c c\u00e2u l\u1ec7nh do Agent y\u00eau c\u1ea7u s\u1ebd \u0111\u01b0\u1ee3c th\u1ef1c thi. M\u1ed9t s\u1ed1 l\u1ef1a ch\u1ecdn ph\u1ed5 bi\u1ebfn g\u1ed3m:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><th>Backend<\/th><th>L\u1ec7nh ch\u1ea1y \u1edf \u0111\u00e2u?<\/th><th>M\u1ee9c c\u00f4 l\u1eadp<\/th><\/tr><tr><td><code>local<\/code><\/td><td>Tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y ch\u1ea1y Hermes<\/td><td>Kh\u00f4ng c\u00f4 l\u1eadp<\/td><\/tr><tr><td><code>docker<\/code><\/td><td>B\u00ean trong Docker container<\/td><td>Cao<\/td><\/tr><tr><td><code>ssh<\/code><\/td><td>M\u00e1y ch\u1ee7 t\u1eeb xa<\/td><td>T\u00e1ch kh\u1ecfi m\u00e1y ch\u1ea1y Agent<\/td><\/tr><tr><td><code>singularity<\/code><\/td><td>Container Singularity\/Apptainer<\/td><td>Cao<\/td><\/tr><tr><td><code>modal<\/code><\/td><td>Cloud sandbox<\/td><td>Cao<\/td><\/tr><tr><td><code>daytona<\/code><\/td><td>Cloud workspace<\/td><td>Cao<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Xem th\u00eam:<\/strong> <a href=\"https:\/\/tino.vn\/blog\/cach-ly-sandbox-cho-ai-agent-tren-vps\/\" target=\"_blank\" rel=\"noreferrer noopener\">H\u01b0\u1edbng d\u1eabn c\u00e1ch ly Sandbox cho AI Agent tr\u00ean VPS&nbsp;<\/a><\/p>\n\n\n\n<h2 id=\"T\u1ea1i_sao_n\u00ean_ch\u1ea1y_Hermes_Agent_trong_Docker_Sandbox?\"><strong>T\u1ea1i sao n\u00ean ch\u1ea1y Hermes Agent trong Docker Sandbox?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Hermes Agent c\u00f3 kh\u1ea3 n\u0103ng th\u1ef1c hi\u1ec7n nhi\u1ec1u h\u00e0nh \u0111\u1ed9ng t\u1ef1 \u0111\u1ed9ng. M\u1ed9t Agent \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n Terminal c\u00f3 th\u1ec3 c\u00e0i package, t\u1ea1o file, s\u1eeda source code, ch\u1ea1y script ho\u1eb7c g\u1ecdi c\u00e1c c\u00f4ng c\u1ee5 d\u00f2ng l\u1ec7nh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Docker Sandbox gi\u00fap gi\u1ea3m m\u1ed9t s\u1ed1 r\u1ee7i ro quan tr\u1ecdng:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>H\u1ea1n ch\u1ebf c\u00e2u l\u1ec7nh AI t\u00e1c \u0111\u1ed9ng tr\u1ef1c ti\u1ebfp l\u00ean h\u1ec7 \u0111i\u1ec1u h\u00e0nh host.<\/li>\n\n\n\n<li>H\u1ea1n ch\u1ebf ph\u1ea1m vi th\u01b0 m\u1ee5c Agent c\u00f3 th\u1ec3 truy c\u1eadp.<\/li>\n\n\n\n<li>Tr\u00e1nh \u0111\u01b0a to\u00e0n b\u1ed9 bi\u1ebfn m\u00f4i tr\u01b0\u1eddng v\u00e0 credential c\u1ee7a host v\u00e0o m\u00f4i tr\u01b0\u1eddng ch\u1ea1y l\u1ec7nh.<\/li>\n\n\n\n<li>Gi\u1edbi h\u1ea1n CPU, RAM, dung l\u01b0\u1ee3ng v\u00e0 s\u1ed1 ti\u1ebfn tr\u00ecnh.<\/li>\n\n\n\n<li>C\u00f3 th\u1ec3 t\u1ea1o m\u00f4i tr\u01b0\u1eddng ri\u00eang cho t\u1eebng phi\u00ean l\u00e0m vi\u1ec7c.<\/li>\n\n\n\n<li>C\u00f3 th\u1ec3 ng\u1eaft Internet \u0111\u1ed1i v\u1edbi nh\u1eefng t\u00e1c v\u1ee5 kh\u00f4ng c\u1ea7n truy c\u1eadp m\u1ea1ng.<\/li>\n\n\n\n<li>Gi\u1ea3m \u1ea3nh h\u01b0\u1edfng c\u1ee7a m\u1ed9t l\u1ec7nh sai ho\u1eb7c script kh\u00f4ng \u0111\u00e1ng tin c\u1eady.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-1.png\" alt=\"T\u1ea1i sao n\u00ean ch\u1ea1y Hermes Agent trong Docker Sandbox?\" class=\"wp-image-130304\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-1.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-1-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><figcaption class=\"wp-element-caption\"><strong>T\u1ea1i sao n\u00ean ch\u1ea1y Hermes Agent trong Docker Sandbox?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Hermes Agent hi\u1ec7n \u00e1p d\u1ee5ng nhi\u1ec1u l\u1edbp hardening khi s\u1eed d\u1ee5ng Docker backend, bao g\u1ed3m gi\u1ea3m Linux capabilities, b\u1eadt <code>no-new-privileges<\/code>, gi\u1edbi h\u1ea1n s\u1ed1 ti\u1ebfn tr\u00ecnh v\u00e0 s\u1eed d\u1ee5ng c\u00e1c tmpfs c\u00f3 gi\u1edbi h\u1ea1n dung l\u01b0\u1ee3ng.<\/p>\n\n\n\n<h2 id=\"C\u1ea7n_chu\u1ea9n_b\u1ecb_g\u00ec_tr\u01b0\u1edbc_khi_thi\u1ebft_l\u1eadp?\"><strong>C\u1ea7n chu\u1ea9n b\u1ecb g\u00ec tr\u01b0\u1edbc khi thi\u1ebft l\u1eadp?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u1ea7n:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Hermes Agent \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t.<\/li>\n\n\n\n<li>Docker Engine ho\u1eb7c Docker Desktop \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/li>\n\n\n\n<li>Quy\u1ec1n s\u1eed d\u1ee5ng Docker.<\/li>\n\n\n\n<li>Quy\u1ec1n ch\u1ec9nh s\u1eeda<strong> ~\/.hermes\/config.yaml<\/strong>.<\/li>\n\n\n\n<li>N\u00ean c\u1eadp nh\u1eadt Hermes Agent l\u00ean phi\u00ean b\u1ea3n m\u1edbi tr\u01b0\u1edbc khi c\u1ea5u h\u00ecnh.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"C\u00e1ch_thi\u1ebft_l\u1eadp_Docker_Sandbox_cho_Hermes_Agent\"><strong>C\u00e1ch thi\u1ebft l\u1eadp Docker Sandbox cho Hermes Agent<\/strong><\/h2>\n\n\n\n<h3 id=\"C\u00e0i_Docker_tr\u00ean_VPS\"><strong>C\u00e0i Docker tr\u00ean VPS<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Gi\u1ea3 s\u1eed VPS \u0111ang s\u1eed d\u1ee5ng Ubuntu v\u00e0 \u0111\u00e3 c\u00e0i Hermes Agent.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_1:_C\u1eadp_nh\u1eadt_h\u1ec7_th\u1ed1ng\"><strong>B\u01b0\u1edbc 1: C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SSH v\u00e0o VPS r\u1ed3i ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update\n\nsudo apt install -y ca-certificates curl<\/code><\/pre>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_2:_Th\u00eam_repository_Docker\"><strong>B\u01b0\u1edbc 2: Th\u00eam repository Docker<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">T\u1ea1o th\u01b0 m\u1ee5c l\u01b0u kh\u00f3a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo install -m 0755 -d \/etc\/apt\/keyrings<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"605\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11-1024x605.png\" alt=\"Th\u00eam repository Docker\" class=\"wp-image-130292\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11-1024x605.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11-300x177.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11-768x453.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11.png 1299w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong><strong>Th\u00eam repository Docker<\/strong><\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">T\u1ea3i kh\u00f3a Docker:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo curl -fsSL https:\/\/download.docker.com\/linux\/ubuntu\/gpg -o \/etc\/apt\/keyrings\/docker.asc\n\nsudo chmod a+r \/etc\/apt\/keyrings\/docker.asc<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Th\u00eam repository:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>tee \/etc\/apt\/sources.list.d\/docker.sources &lt;&lt;EOF\nTypes: deb\nURIs: https:\/\/download.docker.com\/linux\/ubuntu\nSuites: $(. \/etc\/os-release &amp;&amp; echo \"${UBUNTU_CODENAME:-$VERSION_CODENAME}\")\nComponents: stable\nArchitectures: $(dpkg --print-architecture)\nSigned-By: \/etc\/apt\/keyrings\/docker.asc\nEOF<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1eadp nh\u1eadt l\u1ea1i:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"557\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8-1024x557.png\" alt=\"Th\u00eam repository Docker\" class=\"wp-image-130294\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8-1024x557.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8-300x163.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8-768x417.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8.png 1034w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong><strong>Th\u00eam repository Docker<\/strong><\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h4 id=\"B\u01b0\u1edbc_3:_C\u00e0i_Docker_Engine\"><strong>B\u01b0\u1edbc 3: C\u00e0i Docker Engine<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1eadt Docker t\u1ef1 kh\u1edfi \u0111\u1ed9ng c\u00f9ng VPS:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl enable --now docker<\/code><\/pre>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_4:_Ki\u1ec3m_tra_Docker\"><strong>B\u01b0\u1edbc 4: Ki\u1ec3m tra Docker<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra phi\u00ean b\u1ea3n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker --version<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"521\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10-1024x521.png\" alt=\"Ki\u1ec3m tra Docker\" class=\"wp-image-130295\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10-1024x521.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10-300x153.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10-768x391.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10.png 1360w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Docker<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y th\u1eed container:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo docker run --rm hello-world<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu xu\u1ea5t hi\u1ec7n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Hello from Docker!<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Docker \u0111\u00e3 ho\u1ea1t \u0111\u1ed9ng b\u00ecnh th\u01b0\u1eddng.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"558\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10-1024x558.png\" alt=\"Ki\u1ec3m tra Docker\" class=\"wp-image-130296\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10-1024x558.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10-300x164.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10-768x419.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10.png 1062w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Docker<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu Hermes Agent ch\u1ea1y b\u1eb1ng t\u00e0i kho\u1ea3n Linux th\u00f4ng th\u01b0\u1eddng, th\u00eam t\u00e0i kho\u1ea3n hi\u1ec7n t\u1ea1i v\u00e0o nh\u00f3m Docker:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo usermod -aG docker $USER<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3 \u0111\u0103ng xu\u1ea5t SSH v\u00e0 \u0111\u0103ng nh\u1eadp l\u1ea1i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker ps<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu l\u1ec7nh ch\u1ea1y m\u00e0 kh\u00f4ng b\u00e1o l\u1ed7i quy\u1ec1n truy c\u1eadp, b\u1ea1n c\u00f3 th\u1ec3 chuy\u1ec3n sang ph\u1ea7n c\u1ea5u h\u00ecnh Sandbox.<\/p>\n\n\n\n<h3 id=\"Thi\u1ebft_l\u1eadp_Docker_Sandbox_cho_Hermes_Agent\"><strong>Thi\u1ebft l\u1eadp Docker Sandbox cho Hermes Agent<\/strong><\/h3>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_1:_M\u1edf_file_c\u1ea5u_h\u00ecnh_Hermes_Agent\"><strong>B\u01b0\u1edbc 1: M\u1edf file c\u1ea5u h\u00ecnh Hermes Agent<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nano ~\/.hermes\/config.yaml<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">T\u00ecm ph\u1ea7n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>terminal:<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu ch\u01b0a c\u00f3, th\u00eam ph\u1ea7n c\u1ea5u h\u00ecnh v\u00e0o cu\u1ed1i file (b\u01b0\u1edbc 2).<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_2:_Chuy\u1ec3n_Terminal_Backend_sang_Docker\"><strong>B\u01b0\u1edbc 2: Chuy\u1ec3n Terminal Backend sang Docker<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Th\u00eam ho\u1eb7c ch\u1ec9nh th\u00e0nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>terminal:\n\n&nbsp;&nbsp;backend: docker\n\n&nbsp;&nbsp;docker_image: \"nikolaik\/python-nodejs:python3.11-nodejs20\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Trong \u0111\u00f3: <strong>backend: docker<\/strong> s\u1ebd gi\u00fap c\u00e1c c\u00f4ng c\u1ee5 th\u1ef1c thi c\u1ee7a Hermes Agent ch\u1ea1y b\u00ean trong Docker Sandbox thay v\u00ec ch\u1ea1y tr\u1ef1c ti\u1ebfp tr\u00ean VPS.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_3:_Th\u00eam_gi\u1edbi_h\u1ea1n_an_to\u00e0n\"><strong>B\u01b0\u1edbc 3: Th\u00eam gi\u1edbi h\u1ea1n an to\u00e0n<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u00ean s\u1eed d\u1ee5ng c\u1ea5u h\u00ecnh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>terminal:\n\n&nbsp;&nbsp;backend: docker\n\n&nbsp;&nbsp;docker_image: \"nikolaik\/python-nodejs:python3.11-nodejs20\"\n\n&nbsp;&nbsp;docker_forward_env: &#91;]\n\n&nbsp;&nbsp;docker_mount_cwd_to_workspace: false\n\n&nbsp;&nbsp;container_cpu: 1\n\n&nbsp;&nbsp;container_memory: 2048\n\n&nbsp;&nbsp;container_disk: 10240\n\n&nbsp;&nbsp;container_persistent: false<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u00dd ngh\u0129a ch\u00ednh:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>docker_forward_env: []<\/strong><strong>:<\/strong> kh\u00f4ng chuy\u1ec3n API key t\u1eeb VPS v\u00e0o Sandbox.<\/li>\n\n\n\n<li><strong>docker_mount_cwd_to_workspace: false<\/strong><strong>:<\/strong> kh\u00f4ng t\u1ef1 chia s\u1ebb th\u01b0 m\u1ee5c hi\u1ec7n t\u1ea1i c\u1ee7a VPS.<\/li>\n\n\n\n<li><strong>container_cpu: 1<\/strong><strong>:<\/strong> gi\u1edbi h\u1ea1n 1 CPU.<\/li>\n\n\n\n<li><strong>container_memory: 2048<\/strong><strong>:<\/strong> gi\u1edbi h\u1ea1n 2 GB RAM.<\/li>\n\n\n\n<li><strong>container_disk: 10240<\/strong>: gi\u1edbi h\u1ea1n kho\u1ea3ng 10 GB dung l\u01b0\u1ee3ng khi Docker storage h\u1ed7 tr\u1ee3.<\/li>\n\n\n\n<li><strong>container_persistent: false<\/strong><strong>:<\/strong> s\u1eed d\u1ee5ng m\u00f4i tr\u01b0\u1eddng t\u1ea1m th\u1eddi, ph\u00f9 h\u1ee3p h\u01a1n cho Sandbox.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"969\" height=\"484\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-9.png\" alt=\"Chuy\u1ec3n Terminal Backend sang Docker\" class=\"wp-image-130298\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-9.png 969w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-9-300x150.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-9-768x384.png 768w\" sizes=\"(max-width: 969px) 100vw, 969px\" \/><figcaption class=\"wp-element-caption\"><strong>Chuy\u1ec3n Terminal Backend sang Docker<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h4 id=\"B\u01b0\u1edbc_4:_L\u01b0u_c\u1ea5u_h\u00ecnh\"><strong>B\u01b0\u1edbc 4: L\u01b0u c\u1ea5u h\u00ecnh<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trong Nano, nh\u1ea5n <strong>Ctrl + O<\/strong> -&gt; <strong>Enter<\/strong> \u0111\u1ec3 l\u01b0u, sau \u0111\u00f3 nh\u1ea5n <strong>Ctrl + X<\/strong> \u0111\u1ec3 tho\u00e1t<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_5:_T\u1ea3i_Docker_image\"><strong>B\u01b0\u1edbc 5: T\u1ea3i Docker image<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker pull nikolaik\/python-nodejs:python3.11-nodejs20<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker images<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu image xu\u1ea5t hi\u1ec7n trong danh s\u00e1ch, Docker Sandbox \u0111\u00e3 c\u00f3 m\u00f4i tr\u01b0\u1eddng \u0111\u1ec3 kh\u1edfi ch\u1ea1y.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"269\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-1024x269.png\" alt=\"T\u1ea3i Docker image\" class=\"wp-image-130299\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-1024x269.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-300x79.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-768x202.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-1536x404.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7.png 1890w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>T\u1ea3i Docker image<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h4 id=\"B\u01b0\u1edbc_6:_Kh\u1edfi_\u0111\u1ed9ng_l\u1ea1i_Hermes_Agent\"><strong>B\u01b0\u1edbc 6: Kh\u1edfi \u0111\u1ed9ng l\u1ea1i Hermes Agent<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi \u0111\u1ed5i c\u1ea5u h\u00ecnh, c\u1ea7n kh\u1edfi \u0111\u1ed9ng l\u1ea1i ti\u1ebfn tr\u00ecnh Hermes Agent \u0111ang ch\u1ea1y. C\u00e1ch restart ph\u1ee5 thu\u1ed9c v\u00e0o ph\u01b0\u01a1ng th\u1ee9c b\u1ea1n \u0111ang d\u00f9ng \u0111\u1ec3 v\u1eadn h\u00e0nh Hermes.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>N\u1ebfu \u0111ang ch\u1ea1y Hermes tr\u1ef1c ti\u1ebfp trong Terminal, h\u00e3y d\u1eebng phi\u00ean hi\u1ec7n t\u1ea1i r\u1ed3i ch\u1ea1y l\u1ea1i Hermes.<\/li>\n\n\n\n<li>N\u1ebfu Hermes \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd b\u1eb1ng systemd, c\u1ea7n restart service t\u01b0\u01a1ng \u1ee9ng.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi Hermes ch\u1ea1y l\u1ea1i, Docker backend s\u1ebd \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng cho c\u00e1c c\u00f4ng c\u1ee5 th\u1ef1c thi t\u01b0\u01a1ng th\u00edch.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_7:_Ki\u1ec3m_tra_Docker_Sandbox\"><strong>B\u01b0\u1edbc 7: Ki\u1ec3m tra Docker Sandbox<\/strong><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Y\u00eau c\u1ea7u Hermes Agent ch\u1ea1y m\u1ed9t l\u1ec7nh Terminal \u0111\u01a1n gi\u1ea3n, ch\u1eb3ng h\u1ea1n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>H\u00e3y ch\u1ea1y l\u1ec7nh pwd v\u00e0 cho t\u00f4i bi\u1ebft th\u01b0 m\u1ee5c hi\u1ec7n t\u1ea1i.<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"561\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6-1024x561.png\" alt=\"Ki\u1ec3m tra Docker Sandbox\" class=\"wp-image-130300\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6-1024x561.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6-300x164.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6-768x421.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6.png 1402w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Docker Sandbox<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3 tho\u00e1t ra v\u00e0 ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker ps<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu container c\u1ee7a Hermes xu\u1ea5t hi\u1ec7n, Docker Sandbox \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"291\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6-1024x291.png\" alt=\"Ki\u1ec3m tra Docker Sandbox\" class=\"wp-image-130301\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6-1024x291.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6-300x85.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6-768x218.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6.png 1315w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra Docker Sandbox<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 y\u00eau c\u1ea7u Hermes ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/os-release<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">ho\u1eb7c:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls \/<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">K\u1ebft qu\u1ea3 l\u00fac n\u00e0y \u0111\u1ebfn t\u1eeb m\u00f4i tr\u01b0\u1eddng container thay v\u00ec tr\u1ef1c ti\u1ebfp t\u1eeb h\u1ec7 \u0111i\u1ec1u h\u00e0nh VPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u01b0 v\u1eady, v\u1edbi c\u1ea5u h\u00ecnh tr\u00ean, Hermes Agent \u0111\u00e3 c\u00f3 m\u00f4i tr\u01b0\u1eddng th\u1ef1c thi ri\u00eang, \u0111\u1ed3ng th\u1eddi h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp file, API key v\u00e0 t\u00e0i nguy\u00ean c\u1ee7a VPS.<\/p>\n\n\n\n<h2 id=\"Docker_Sandbox_c\u00f3_ph\u1ea3i_l\u1edbp_b\u1ea3o_m\u1eadt_tuy\u1ec7t_\u0111\u1ed1i?\"><strong>Docker Sandbox c\u00f3 ph\u1ea3i l\u1edbp b\u1ea3o m\u1eadt tuy\u1ec7t \u0111\u1ed1i?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng. Docker Sandbox l\u00e0 m\u1ed9t l\u1edbp b\u1ea3o v\u1ec7 quan tr\u1ecdng nh\u01b0ng kh\u00f4ng n\u00ean \u0111\u01b0\u1ee3c xem l\u00e0 c\u01a1 ch\u1ebf an to\u00e0n tuy\u1ec7t \u0111\u1ed1i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00f4 h\u00ecnh b\u1ea3o m\u1eadt c\u1ee7a Hermes Agent s\u1eed d\u1ee5ng nhi\u1ec1u l\u1edbp, bao g\u1ed3m ki\u1ec3m so\u00e1t ng\u01b0\u1eddi d\u00f9ng, ki\u1ec3m tra thao t\u00e1c nguy hi\u1ec3m, gi\u1edbi h\u1ea1n ghi file, container isolation, b\u1ea3o v\u1ec7 credential MCP v\u00e0 c\u00f4 l\u1eadp session.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-2.png\" alt=\"Docker Sandbox c\u00f3 ph\u1ea3i l\u1edbp b\u1ea3o m\u1eadt tuy\u1ec7t \u0111\u1ed1i?\" class=\"wp-image-130302\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-2.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-2-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><figcaption class=\"wp-element-caption\"><strong>Docker Sandbox c\u00f3 ph\u1ea3i l\u1edbp b\u1ea3o m\u1eadt tuy\u1ec7t \u0111\u1ed1i?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">M\u1ed9t c\u1ea5u h\u00ecnh an to\u00e0n n\u00ean k\u1ebft h\u1ee3p:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Docker Sandbox + gi\u1edbi h\u1ea1n volume + h\u1ea1n ch\u1ebf credential + gi\u1edbi h\u1ea1n t\u00e0i nguy\u00ean + ki\u1ec3m so\u00e1t network + c\u1eadp nh\u1eadt Hermes Agent th\u01b0\u1eddng xuy\u00ean.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ngo\u00e0i ra, Docker Terminal Backend kh\u00f4ng \u0111\u1ed3ng ngh\u0129a to\u00e0n b\u1ed9 ti\u1ebfn tr\u00ecnh Hermes Agent \u0111\u1ec1u n\u1eb1m trong container. V\u1edbi m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p ho\u1eb7c d\u1eef li\u1ec7u \u0111\u1eb7c bi\u1ec7t nh\u1ea1y c\u1ea3m, n\u00ean c\u00e2n nh\u1eafc whole-process containerization ho\u1eb7c sandbox chuy\u00ean d\u1ee5ng c\u00f3 ch\u00ednh s\u00e1ch filesystem, network v\u00e0 process ch\u1eb7t ch\u1ebd h\u01a1n.<\/p>\n\n\n\n<h2 id=\"M\u1ed9t_s\u1ed1_l\u01b0u_\u00fd_khi_s\u1eed_d\u1ee5ng_Docker_Sandbox_v\u1edbi_Hermes_Agent\"><strong>M\u1ed9t s\u1ed1 l\u01b0u \u00fd khi s\u1eed d\u1ee5ng Docker Sandbox v\u1edbi Hermes Agent<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Lu\u00f4n c\u1eadp nh\u1eadt Hermes Agent tr\u01b0\u1edbc khi tri\u1ec3n khai production.<\/li>\n\n\n\n<li>Kh\u00f4ng mount to\u00e0n b\u1ed9 VPS v\u00e0o container.<\/li>\n\n\n\n<li>\u01afu ti\u00ean volume read-only n\u1ebfu Agent ch\u1ec9 c\u1ea7n \u0111\u1ecdc.<\/li>\n\n\n\n<li>Gi\u1eef docker_forward_env r\u1ed7ng n\u1ebfu ch\u01b0a c\u1ea7n credential.<\/li>\n\n\n\n<li>Kh\u00f4ng \u0111\u01b0a Docker socket v\u00e0o Sandbox.<\/li>\n\n\n\n<li>Gi\u1edbi h\u1ea1n CPU v\u00e0 RAM \u0111\u1ec3 tr\u00e1nh t\u00e1c v\u1ee5 Agent chi\u1ebfm to\u00e0n b\u1ed9 t\u00e0i nguy\u00ean VPS.<\/li>\n\n\n\n<li>D\u00f9ng container_persistent: false cho c\u00e1c t\u00e1c v\u1ee5 th\u1eed nghi\u1ec7m ho\u1eb7c code ch\u01b0a \u0111\u00e1ng tin c\u1eady.<\/li>\n\n\n\n<li>T\u1eaft network khi workload kh\u00f4ng c\u1ea7n Internet.<\/li>\n\n\n\n<li>T\u00e1ch m\u00f4i tr\u01b0\u1eddng production kh\u1ecfi m\u00f4i tr\u01b0\u1eddng th\u1eed nghi\u1ec7m.<\/li>\n\n\n\n<li>Kh\u00f4ng xem Docker l\u00e0 l\u1edbp b\u1ea3o m\u1eadt duy nh\u1ea5t.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-3.png\" alt=\"M\u1ed9t s\u1ed1 l\u01b0u \u00fd khi s\u1eed d\u1ee5ng Docker Sandbox v\u1edbi Hermes Agent\" class=\"wp-image-130303\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-3.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-3-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><figcaption class=\"wp-element-caption\"><strong>M\u1ed9t s\u1ed1 l\u01b0u \u00fd khi s\u1eed d\u1ee5ng Docker Sandbox v\u1edbi Hermes Agent<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h2 id=\"K\u1ebft_lu\u1eadn\">K\u1ebft lu\u1eadn<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u1ea3 n\u0103ng ch\u1ea1y l\u1ec7nh v\u00e0 thao t\u00e1c tr\u1ef1c ti\u1ebfp v\u1edbi h\u1ec7 th\u1ed1ng gi\u00fap Hermes Agent tr\u1edf th\u00e0nh m\u1ed9t AI Agent r\u1ea5t linh ho\u1ea1t, nh\u01b0ng quy\u1ec1n th\u1ef1c thi c\u00e0ng l\u1edbn th\u00ec y\u00eau c\u1ea7u ki\u1ec3m so\u00e1t b\u1ea3o m\u1eadt c\u00e0ng cao. <strong>Thi\u1ebft l\u1eadp Docker Sandbox cho Hermes Agent<\/strong> l\u00e0 m\u1ed9t c\u00e1ch t\u01b0\u01a1ng \u0111\u1ed1i \u0111\u01a1n gi\u1ea3n \u0111\u1ec3 t\u00e1ch ho\u1ea1t \u0111\u1ed9ng c\u1ee7a Agent kh\u1ecfi h\u1ec7 \u0111i\u1ec1u h\u00e0nh host, gi\u1edbi h\u1ea1n t\u00e0i nguy\u00ean v\u00e0 ki\u1ec3m so\u00e1t nh\u1eefng d\u1eef li\u1ec7u m\u00e0 m\u00f4i tr\u01b0\u1eddng th\u1ef1c thi \u0111\u01b0\u1ee3c ph\u00e9p ti\u1ebfp c\u1eadn.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1ch tri\u1ec3n khai n\u00e0y v\u1eeba gi\u00fap Hermes Agent gi\u1eef \u0111\u01b0\u1ee3c kh\u1ea3 n\u0103ng t\u1ef1 \u0111\u1ed9ng h\u00f3a m\u1ea1nh m\u1ebd, v\u1eeba gi\u1ea3m \u0111\u00e1ng k\u1ec3 r\u1ee7i ro khi AI ph\u1ea3i ch\u1ea1y code ho\u1eb7c th\u1ef1c hi\u1ec7n c\u00e1c t\u00e1c v\u1ee5 tr\u1ef1c ti\u1ebfp tr\u00ean VPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>C\u00e1c b\u00e0i vi\u1ebft li\u00ean quan:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/tino.vn\/blog\/hermes-agent-desktop\/\" target=\"_blank\" rel=\"noopener\">H\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t v\u00e0 s\u1eed d\u1ee5ng Hermes Agent Desktop<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/ket-noi-google-workspace-voi-hermes-agent\/\" target=\"_blank\" rel=\"noopener\">H\u01b0\u1edbng d\u1eabn k\u1ebft n\u1ed1i Google Workspace v\u1edbi Hermes Agent&nbsp;<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/ket-noi-google-chat-voi-hermes-agent\/\" target=\"_blank\" rel=\"noopener\">H\u01b0\u1edbng d\u1eabn k\u1ebft n\u1ed1i Google Chat v\u1edbi Hermes Agent A-Z<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/docs\/ket-noi-slack-voi-hermes-agent\/\" target=\"_blank\" rel=\"noopener\">H\u01b0\u1edbng d\u1eabn k\u1ebft n\u1ed1i Slack v\u1edbi Hermes Agent tr\u00ean VPS Hermes<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/ket-noi-kilo-code-voi-hermes-agent\/\" target=\"_blank\" rel=\"noopener\">H\u01b0\u1edbng d\u1eabn k\u1ebft n\u1ed1i Kilo Code v\u1edbi Hermes Agent<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/docs\/ket-noi-telegram-voi-hermes-agent\/\" target=\"_blank\" rel=\"noopener\">H\u01b0\u1edbng d\u1eabn k\u1ebft n\u1ed1i Telegram v\u1edbi Hermes Agent tr\u00ean VPS Hermes<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/ket-noi-tai-khoan-zalo-ca-nhan-voi-hermes-agent\/\">H\u01b0\u1edbng d\u1eabn k\u1ebft n\u1ed1i t\u00e0i kho\u1ea3n Zalo c\u00e1 nh\u00e2n v\u1edbi Hermes Agent tr\u00ean VPS Hermes<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/docs\/ket-noi-discord-voi-hermes-agent\/\" target=\"_blank\" rel=\"noopener\">H\u01b0\u1edbng d\u1eabn k\u1ebft n\u1ed1i Discord v\u1edbi Hermes Agent tr\u00ean VPS Hermes<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/cach-lay-api-key-tren-nous-portal\/\" target=\"_blank\" rel=\"noopener\"><\/a><a href=\"https:\/\/tino.vn\/blog\/cach-viet-skill-cho-hermes-agent\/\" target=\"_blank\" rel=\"noopener\">C\u00e1ch vi\u1ebft Skill cho Hermes Agent: \u0110\u00fang chu\u1ea9n, d\u1ec5 k\u00edch ho\u1ea1t&nbsp;<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/hermes-agent-nen-chay-local-hay-vps\/\" target=\"_blank\" rel=\"noopener\">Hermes Agent n\u00ean ch\u1ea1y Local hay VPS?<\/a><\/li>\n<\/ul>\n\n\n\n<h2 id=\"Nh\u1eefng_c\u00e2u_h\u1ecfi_th\u01b0\u1eddng_g\u1eb7p\"><strong>Nh\u1eefng c\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p<\/strong><\/h2>\n\n\n\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Hermes_Agent_c\u00f3_b\u1eaft_bu\u1ed9c_ph\u1ea3i_d\u00f9ng_Docker_Sandbox_kh\u00f4ng?\">Hermes Agent c\u00f3 b\u1eaft bu\u1ed9c ph\u1ea3i d\u00f9ng Docker Sandbox kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng. Backend m\u1eb7c \u0111\u1ecbnh c\u00f3 th\u1ec3 ch\u1ea1y tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y b\u1eb1ng local. Tuy nhi\u00ean, Docker Sandbox ph\u00f9 h\u1ee3p h\u01a1n khi Agent \u0111\u01b0\u1ee3c ph\u00e9p ch\u1ea1y l\u1ec7nh, th\u1ef1c thi code ho\u1eb7c x\u1eed l\u00fd n\u1ed9i dung kh\u00f4ng ho\u00e0n to\u00e0n \u0111\u00e1ng tin c\u1eady.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Docker_Sandbox_c\u00f3_l\u00e0m_Hermes_Agent_ch\u1eadm_h\u01a1n_kh\u00f4ng?\">Docker Sandbox c\u00f3 l\u00e0m Hermes Agent ch\u1eadm h\u01a1n kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">C\u00f3 th\u00eam m\u1ed9t l\u01b0\u1ee3ng overhead nh\u1ecf do containerization, nh\u01b0ng v\u1edbi h\u1ea7u h\u1ebft t\u00e1c v\u1ee5 AI Agent th\u00f4ng th\u01b0\u1eddng, ch\u00eanh l\u1ec7ch th\u01b0\u1eddng kh\u00f4ng ph\u1ea3i v\u1ea5n \u0111\u1ec1 l\u1edbn. L\u1ee3i \u00edch v\u1ec1 kh\u1ea3 n\u0103ng c\u00f4 l\u1eadp th\u01b0\u1eddng quan tr\u1ecdng h\u01a1n m\u1ee9c overhead n\u00e0y.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Hermes_Agent_trong_Docker_c\u00f3_truy_c\u1eadp_\u0111\u01b0\u1ee3c_file_tr\u00ean_VPS_kh\u00f4ng?\">Hermes Agent trong Docker c\u00f3 truy c\u1eadp \u0111\u01b0\u1ee3c file tr\u00ean VPS kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Ch\u1ec9 nh\u1eefng th\u01b0 m\u1ee5c \u0111\u01b0\u1ee3c chia s\u1ebb qua volume ho\u1eb7c c\u01a1 ch\u1ebf mount t\u01b0\u01a1ng \u1ee9ng m\u1edbi n\u00ean \u0111\u01b0\u1ee3c c\u1ea5p cho container. Kh\u00f4ng n\u00ean mount to\u00e0n b\u1ed9 filesystem c\u1ee7a VPS.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"C\u00f3_n\u00ean_cho_Docker_Sandbox_truy_c\u1eadp_Internet_kh\u00f4ng?\">C\u00f3 n\u00ean cho Docker Sandbox truy c\u1eadp Internet kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">T\u00f9y t\u00e1c v\u1ee5. N\u1ebfu Agent c\u1ea7n t\u1ea3i package, truy c\u1eadp API ho\u1eb7c s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 online, network ph\u1ea3i ho\u1ea1t \u0111\u1ed9ng. N\u1ebfu ch\u1ec9 ki\u1ec3m tra code ho\u1eb7c x\u1eed l\u00fd d\u1eef li\u1ec7u c\u1ee5c b\u1ed9, t\u1eaft network s\u1ebd t\u0103ng kh\u1ea3 n\u0103ng c\u00f4 l\u1eadp.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\n<script type=\"application\/ld+json\">\n\t{\n\t\t\"@context\": \"https:\/\/schema.org\",\n\t\t\"@type\": \"FAQPage\",\n\t\t\"mainEntity\": [\n\t\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Hermes Agent c\u00f3 b\u1eaft bu\u1ed9c ph\u1ea3i d\u00f9ng Docker Sandbox kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Kh\u00f4ng. Backend m\u1eb7c \u0111\u1ecbnh c\u00f3 th\u1ec3 ch\u1ea1y tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y b\u1eb1ng local. Tuy nhi\u00ean, Docker Sandbox ph\u00f9 h\u1ee3p h\u01a1n khi Agent \u0111\u01b0\u1ee3c ph\u00e9p ch\u1ea1y l\u1ec7nh, th\u1ef1c thi code ho\u1eb7c x\u1eed l\u00fd n\u1ed9i dung kh\u00f4ng ho\u00e0n to\u00e0n \u0111\u00e1ng tin c\u1eady.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Docker Sandbox c\u00f3 l\u00e0m Hermes Agent ch\u1eadm h\u01a1n kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>C\u00f3 th\u00eam m\u1ed9t l\u01b0\u1ee3ng overhead nh\u1ecf do containerization, nh\u01b0ng v\u1edbi h\u1ea7u h\u1ebft t\u00e1c v\u1ee5 AI Agent th\u00f4ng th\u01b0\u1eddng, ch\u00eanh l\u1ec7ch th\u01b0\u1eddng kh\u00f4ng ph\u1ea3i v\u1ea5n \u0111\u1ec1 l\u1edbn. L\u1ee3i \u00edch v\u1ec1 kh\u1ea3 n\u0103ng c\u00f4 l\u1eadp th\u01b0\u1eddng quan tr\u1ecdng h\u01a1n m\u1ee9c overhead n\u00e0y.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Hermes Agent trong Docker c\u00f3 truy c\u1eadp \u0111\u01b0\u1ee3c file tr\u00ean VPS kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Ch\u1ec9 nh\u1eefng th\u01b0 m\u1ee5c \u0111\u01b0\u1ee3c chia s\u1ebb qua volume ho\u1eb7c c\u01a1 ch\u1ebf mount t\u01b0\u01a1ng \u1ee9ng m\u1edbi n\u00ean \u0111\u01b0\u1ee3c c\u1ea5p cho container. Kh\u00f4ng n\u00ean mount to\u00e0n b\u1ed9 filesystem c\u1ee7a VPS.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"C\u00f3 n\u00ean cho Docker Sandbox truy c\u1eadp Internet kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>T\u00f9y t\u00e1c v\u1ee5. N\u1ebfu Agent c\u1ea7n t\u1ea3i package, truy c\u1eadp API ho\u1eb7c s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 online, network ph\u1ea3i ho\u1ea1t \u0111\u1ed9ng. N\u1ebfu ch\u1ec9 ki\u1ec3m tra code ho\u1eb7c x\u1eed l\u00fd d\u1eef li\u1ec7u c\u1ee5c b\u1ed9, t\u1eaft network s\u1ebd t\u0103ng kh\u1ea3 n\u0103ng c\u00f4 l\u1eadp.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t\t\t\t]\n\t}\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t AI agent nh\u01b0 Hermes Agent c\u00f3 kh\u1ea3 n\u0103ng t\u1ef1 ch\u1ea1y l\u1ec7nh, \u0111\u1ecdc file, g\u1ecdi API v\u00e0 th\u1eadm ch\u00ed c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m thay b\u1ea1n. Nh\u01b0ng ch\u00ednh kh\u1ea3 n\u0103ng \u0111\u00f3 c\u0169ng l\u00e0 con dao hai l\u01b0\u1ee1i n\u1ebfu \u0111\u1ec3 agent thao t\u00e1c tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y ch\u1ee7 th\u1eadt. Docker Sandbox ch\u00ednh l\u00e0 l\u1edbp c\u00e1ch ly gi\u00fap [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":130307,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7592],"tags":[7593],"class_list":["post-130290","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hermes-agent","tag-hermes-agent"],"_links":{"self":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130290","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/comments?post=130290"}],"version-history":[{"count":3,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130290\/revisions"}],"predecessor-version":[{"id":130306,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130290\/revisions\/130306"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media\/130307"}],"wp:attachment":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media?parent=130290"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/categories?post=130290"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/tags?post=130290"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}