{"id":130290,"date":"2026-09-25T15:38:08","date_gmt":"2026-09-25T08:38:08","guid":{"rendered":"https:\/\/tino.vn\/blog\/?p=130290"},"modified":"2026-10-27T13:22:33","modified_gmt":"2026-10-27T06:22:33","slug":"thiet-lap-docker-sandbox-cho-hermes-agent","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/thiet-lap-docker-sandbox-cho-hermes-agent\/","title":{"rendered":"C\u00e1ch thi\u1ebft l\u1eadp Docker sandbox cho Hermes Agent an to\u00e0n A-Z"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>\u0110\u1ec3 ch\u1ea1y l\u1ec7nh c\u1ee7a Hermes Agent trong Docker sandbox, c\u00e0i Docker Engine tr\u00ean VPS, m\u1edf <code>~\/.hermes\/config.yaml<\/code>, \u0111\u1eb7t <code>terminal.backend: docker<\/code> k\u00e8m gi\u1edbi h\u1ea1n CPU, RAM, kh\u00f4ng chuy\u1ec3n bi\u1ebfn m\u00f4i tr\u01b0\u1eddng v\u00e0 kh\u00f4ng mount th\u01b0 m\u1ee5c host, r\u1ed3i kh\u1edfi \u0111\u1ed9ng l\u1ea1i Hermes.<\/strong> Ki\u1ec3m tra b\u1eb1ng <code>docker ps<\/code>: th\u1ea5y container t\u00ean <code>hermes-\u2026<\/code> l\u00e0 sandbox \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ed9t AI agent nh\u01b0 <a href=\"https:\/\/tino.vn\/blog\/hermes-agent-la-gi\/\">Hermes Agent<\/a> c\u00f3 kh\u1ea3 n\u0103ng t\u1ef1 ch\u1ea1y l\u1ec7nh, \u0111\u1ecdc file, g\u1ecdi API v\u00e0 c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m thay b\u1ea1n. Ch\u00ednh kh\u1ea3 n\u0103ng \u0111\u00f3 c\u0169ng l\u00e0 con dao hai l\u01b0\u1ee1i n\u1ebfu \u0111\u1ec3 agent thao t\u00e1c tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y ch\u1ee7 th\u1eadt. Docker Sandbox l\u00e0 l\u1edbp c\u00e1ch ly gi\u00fap l\u1ec7nh c\u1ee7a Hermes Agent ch\u1ea1y trong m\u1ed9t m\u00f4i tr\u01b0\u1eddng t\u00e1ch bi\u1ec7t, gi\u1edbi h\u1ea1n quy\u1ec1n v\u00e0 t\u00e0i nguy\u00ean, thay v\u00ec ch\u1ea1m tr\u1ef1c ti\u1ebfp v\u00e0o h\u1ec7 \u0111i\u1ec1u h\u00e0nh ch\u00ednh. B\u00e0i thu\u1ed9c nh\u00f3m <a href=\"https:\/\/tino.vn\/blog\/cai-dat-va-su-dung-hermes-agent-tren-vps\/\">h\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t v\u00e0 v\u1eadn h\u00e0nh Hermes Agent tr\u00ean VPS<\/a>.<\/p>\n\n\n\n<h2 id=\"Docker_Sandbox_trong_Hermes_Agent_l\u00e0_g\u00ec?\">Docker Sandbox trong Hermes Agent l\u00e0 g\u00ec?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Docker Sandbox trong Hermes Agent l\u00e0 c\u00e1ch d\u00f9ng Docker l\u00e0m terminal backend: l\u1ec7nh terminal, thao t\u00e1c file v\u00e0 <code>execute_code<\/code> c\u1ee7a agent ch\u1ea1y b\u00ean trong container thay v\u00ec tr\u00ean m\u00e1y ch\u1ea1y Hermes. Hermes Agent h\u1ed7 tr\u1ee3 nhi\u1ec1u terminal backend, t\u1ee9c m\u00f4i tr\u01b0\u1eddng m\u00e0 c\u00e1c c\u00e2u l\u1ec7nh do agent y\u00eau c\u1ea7u \u0111\u01b0\u1ee3c th\u1ef1c thi (<a href=\"https:\/\/hermes-agent.nousresearch.com\/docs\/user-guide\/configuration#terminal-backend-configuration\" target=\"_blank\" rel=\"noopener nofollow\">theo t\u00e0i li\u1ec7u Configuration<\/a>):<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Backend<\/th><th>L\u1ec7nh ch\u1ea1y \u1edf \u0111\u00e2u?<\/th><th>M\u1ee9c c\u00f4 l\u1eadp<\/th><\/tr><\/thead><tbody><tr><td><code>local<\/code><\/td><td>Tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y ch\u1ea1y Hermes<\/td><td>Kh\u00f4ng c\u00f4 l\u1eadp<\/td><\/tr><tr><td><code>docker<\/code><\/td><td>B\u00ean trong Docker container<\/td><td>Cao<\/td><\/tr><tr><td><code>ssh<\/code><\/td><td>M\u00e1y ch\u1ee7 t\u1eeb xa<\/td><td>T\u00e1ch kh\u1ecfi m\u00e1y ch\u1ea1y Agent<\/td><\/tr><tr><td><code>modal<\/code><\/td><td>Cloud sandbox<\/td><td>Cao<\/td><\/tr><tr><td><code>daytona<\/code><\/td><td>Cloud workspace<\/td><td>Cao<\/td><\/tr><tr><td><code>vercel_sandbox<\/code><\/td><td>Vercel Sandbox<\/td><td>Cao<\/td><\/tr><tr><td><code>singularity<\/code><\/td><td>Container Singularity\/Apptainer (c\u00e0i th\u00eam plugin)<\/td><td>Cao<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><em>C\u1eadp nh\u1eadt 10\/2026: t\u00e0i li\u1ec7u Hermes hi\u1ec7n li\u1ec7t k\u00ea s\u00e1u backend d\u1ef1ng s\u1eb5n, g\u1ed3m th\u00eam vercel_sandbox; Singularity\/Apptainer chuy\u1ec3n th\u00e0nh plugin ch\u00ednh th\u1ee9c.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Xem th\u00eam c\u00e1ch c\u00e1ch ly agent \u1edf m\u1ee9c VPS: <a href=\"https:\/\/tino.vn\/blog\/cach-ly-sandbox-cho-ai-agent-tren-vps\/\">H\u01b0\u1edbng d\u1eabn c\u00e1ch ly sandbox cho AI Agent tr\u00ean VPS<\/a>.<\/p>\n\n\n\n<h2 id=\"T\u1ea1i_sao_n\u00ean_ch\u1ea1y_Hermes_Agent_trong_Docker_Sandbox?\">T\u1ea1i sao n\u00ean ch\u1ea1y Hermes Agent trong Docker Sandbox?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y Hermes Agent trong Docker Sandbox gi\u1edbi h\u1ea1n ph\u1ea1m vi m\u1ed9t l\u1ec7nh sai c\u00f3 th\u1ec3 g\u00e2y h\u1ea1i: l\u1ec7nh ch\u1ec9 th\u1ea5y file trong container, kh\u00f4ng nh\u1eadn API key c\u1ee7a host n\u1ebfu b\u1ea1n kh\u00f4ng chuy\u1ec3n v\u00e0o, v\u00e0 b\u1ecb gi\u1edbi h\u1ea1n CPU, RAM, s\u1ed1 ti\u1ebfn tr\u00ecnh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ed9t Agent \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n Terminal c\u00f3 th\u1ec3 c\u00e0i package, t\u1ea1o file, s\u1eeda source code, ch\u1ea1y script ho\u1eb7c g\u1ecdi c\u00e1c c\u00f4ng c\u1ee5 d\u00f2ng l\u1ec7nh.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Docker Sandbox gi\u00fap gi\u1ea3m m\u1ed9t s\u1ed1 r\u1ee7i ro quan tr\u1ecdng:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>H\u1ea1n ch\u1ebf c\u00e2u l\u1ec7nh AI t\u00e1c \u0111\u1ed9ng tr\u1ef1c ti\u1ebfp l\u00ean h\u1ec7 \u0111i\u1ec1u h\u00e0nh host.<\/li>\n\n\n<li>H\u1ea1n ch\u1ebf ph\u1ea1m vi th\u01b0 m\u1ee5c Agent c\u00f3 th\u1ec3 truy c\u1eadp.<\/li>\n\n\n<li>Tr\u00e1nh \u0111\u01b0a to\u00e0n b\u1ed9 bi\u1ebfn m\u00f4i tr\u01b0\u1eddng v\u00e0 credential c\u1ee7a host v\u00e0o m\u00f4i tr\u01b0\u1eddng ch\u1ea1y l\u1ec7nh.<\/li>\n\n\n<li>Gi\u1edbi h\u1ea1n CPU, RAM, dung l\u01b0\u1ee3ng v\u00e0 s\u1ed1 ti\u1ebfn tr\u00ecnh.<\/li>\n\n\n<li>C\u00f3 th\u1ec3 t\u1ea1o m\u00f4i tr\u01b0\u1eddng ri\u00eang cho t\u1eebng phi\u00ean l\u00e0m vi\u1ec7c.<\/li>\n\n\n<li>C\u00f3 th\u1ec3 ng\u1eaft Internet \u0111\u1ed1i v\u1edbi nh\u1eefng t\u00e1c v\u1ee5 kh\u00f4ng c\u1ea7n truy c\u1eadp m\u1ea1ng.<\/li>\n\n\n<li>Gi\u1ea3m \u1ea3nh h\u01b0\u1edfng c\u1ee7a m\u1ed9t l\u1ec7nh sai ho\u1eb7c script kh\u00f4ng \u0111\u00e1ng tin c\u1eady.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-1.png\" alt=\"T\u1ea1i sao n\u00ean ch\u1ea1y Hermes Agent trong Docker Sandbox\" class=\"wp-image-130304\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-1.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-1-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Hermes Agent \u00e1p d\u1ee5ng nhi\u1ec1u l\u1edbp hardening khi s\u1eed d\u1ee5ng Docker backend: b\u1ecf to\u00e0n b\u1ed9 Linux capabilities r\u1ed3i ch\u1ec9 th\u00eam l\u1ea1i DAC_OVERRIDE, CHOWN, FOWNER, b\u1eadt <code>no-new-privileges<\/code>, gi\u1edbi h\u1ea1n 256 ti\u1ebfn tr\u00ecnh v\u00e0 d\u00f9ng tmpfs c\u00f3 gi\u1edbi h\u1ea1n dung l\u01b0\u1ee3ng cho \/tmp, \/var\/tmp, \/run (<a href=\"https:\/\/hermes-agent.nousresearch.com\/docs\/user-guide\/configuration#docker-backend\" target=\"_blank\" rel=\"noopener nofollow\">t\u00e0i li\u1ec7u Docker Backend<\/a>).<\/p>\n\n\n\n<h2 id=\"C\u1ea7n_chu\u1ea9n_b\u1ecb_g\u00ec_tr\u01b0\u1edbc_khi_thi\u1ebft_l\u1eadp?\">C\u1ea7n chu\u1ea9n b\u1ecb g\u00ec tr\u01b0\u1edbc khi thi\u1ebft l\u1eadp?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u01b0\u1edbc khi thi\u1ebft l\u1eadp Docker Sandbox, VPS c\u1ea7n c\u00f3 Hermes Agent \u0111\u00e3 c\u00e0i, Docker Engine \u0111ang ch\u1ea1y, t\u00e0i kho\u1ea3n ch\u1ea1y Hermes c\u00f3 quy\u1ec1n d\u00f9ng Docker v\u00e0 quy\u1ec1n s\u1eeda file c\u1ea5u h\u00ecnh <code>~\/.hermes\/config.yaml<\/code>. N\u1ebfu ch\u01b0a c\u00e0i Hermes, l\u00e0m theo <a href=\"https:\/\/tino.vn\/blog\/cai-dat-va-su-dung-hermes-agent-tren-vps\/\">h\u01b0\u1edbng d\u1eabn c\u00e0i Hermes Agent tr\u00ean VPS<\/a> tr\u01b0\u1edbc.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Hermes Agent \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t.<\/li>\n\n\n<li>Docker Engine ho\u1eb7c Docker Desktop \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/li>\n\n\n<li>Quy\u1ec1n s\u1eed d\u1ee5ng Docker.<\/li>\n\n\n<li>Quy\u1ec1n ch\u1ec9nh s\u1eeda ~\/.hermes\/config.yaml.<\/li>\n\n\n<li>N\u00ean c\u1eadp nh\u1eadt Hermes Agent l\u00ean phi\u00ean b\u1ea3n m\u1edbi tr\u01b0\u1edbc khi c\u1ea5u h\u00ecnh (<code>hermes update<\/code>; b\u1ea3n hi\u1ec7n h\u00e0nh v0.22.5 (23\/10\/2026)).<\/li>\n<\/ul>\n\n\n\n<h2 id=\"C\u00e1ch_thi\u1ebft_l\u1eadp_Docker_Sandbox_cho_Hermes_Agent\">C\u00e1ch thi\u1ebft l\u1eadp Docker Sandbox cho Hermes Agent<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Thi\u1ebft l\u1eadp Docker Sandbox cho Hermes Agent g\u1ed3m hai ph\u1ea7n: c\u00e0i Docker Engine tr\u00ean VPS (4 b\u01b0\u1edbc) v\u00e0 c\u1ea5u h\u00ecnh terminal backend trong Hermes (7 b\u01b0\u1edbc). Ph\u1ea7n c\u1ea5u h\u00ecnh ch\u1ec9 s\u1eeda file config.yaml, k\u00e9o image v\u00e0 kh\u1edfi \u0111\u1ed9ng l\u1ea1i Hermes; kh\u00f4ng c\u1ea7n c\u00e0i l\u1ea1i agent.<\/p>\n\n\n\n<h3 id=\"C\u00e0i_Docker_tr\u00ean_VPS\">C\u00e0i Docker tr\u00ean VPS<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Gi\u1ea3 s\u1eed VPS \u0111ang s\u1eed d\u1ee5ng Ubuntu v\u00e0 \u0111\u00e3 c\u00e0i Hermes Agent. C\u00e1c l\u1ec7nh d\u01b0\u1edbi \u0111\u00e2y theo <a href=\"https:\/\/docs.docker.com\/engine\/install\/ubuntu\/\" target=\"_blank\" rel=\"noopener nofollow\">h\u01b0\u1edbng d\u1eabn c\u00e0i Docker Engine tr\u00ean Ubuntu<\/a>.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_1:_C\u1eadp_nh\u1eadt_h\u1ec7_th\u1ed1ng\">B\u01b0\u1edbc 1: C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">SSH v\u00e0o VPS r\u1ed3i ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update\nsudo apt install -y ca-certificates curl<\/code><\/pre>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_2:_Th\u00eam_repository_Docker\">B\u01b0\u1edbc 2: Th\u00eam repository Docker<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">T\u1ea1o th\u01b0 m\u1ee5c l\u01b0u kh\u00f3a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo install -m 0755 -d \/etc\/apt\/keyrings<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"605\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11-1024x605.png\" alt=\"C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng v\u00e0 t\u1ea1o th\u01b0 m\u1ee5c \/etc\/apt\/keyrings \u0111\u1ec3 th\u00eam repository Docker\" class=\"wp-image-130292\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11-1024x605.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11-300x177.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11-768x453.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_1-11.png 1299w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">T\u1ea3i kh\u00f3a Docker:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo curl -fsSL https:\/\/download.docker.com\/linux\/ubuntu\/gpg -o \/etc\/apt\/keyrings\/docker.asc\nsudo chmod a+r \/etc\/apt\/keyrings\/docker.asc<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Th\u00eam repository:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo tee \/etc\/apt\/sources.list.d\/docker.sources &lt;&lt;EOF\nTypes: deb\nURIs: https:\/\/download.docker.com\/linux\/ubuntu\nSuites: $(. \/etc\/os-release &amp;&amp; echo \"${UBUNTU_CODENAME:-$VERSION_CODENAME}\")\nComponents: stable\nArchitectures: $(dpkg --print-architecture)\nSigned-By: \/etc\/apt\/keyrings\/docker.asc\nEOF<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><em>L\u1ec7nh tee c\u1ea7n sudo khi b\u1ea1n \u0111\u0103ng nh\u1eadp b\u1eb1ng t\u00e0i kho\u1ea3n th\u01b0\u1eddng; \u1ea3nh ch\u1ee5p ch\u1ea1y b\u1eb1ng root n\u00ean kh\u00f4ng c\u00f3 sudo.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1eadp nh\u1eadt l\u1ea1i:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"557\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8-1024x557.png\" alt=\"T\u1ea1o file docker.sources v\u00e0 ch\u1ea1y apt update th\u1ea5y repository download.docker.com\" class=\"wp-image-130294\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8-1024x557.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8-300x163.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8-768x417.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_2-8.png 1034w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_3:_C\u00e0i_Docker_Engine\">B\u01b0\u1edbc 3: C\u00e0i Docker Engine<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1eadt Docker t\u1ef1 kh\u1edfi \u0111\u1ed9ng c\u00f9ng VPS:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl enable --now docker<\/code><\/pre>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_4:_Ki\u1ec3m_tra_Docker\">B\u01b0\u1edbc 4: Ki\u1ec3m tra Docker<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra phi\u00ean b\u1ea3n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker --version<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"521\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10-1024x521.png\" alt=\"C\u00e0i xong Docker Engine, l\u1ec7nh docker --version b\u00e1o Docker version 29.8.1\" class=\"wp-image-130295\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10-1024x521.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10-300x153.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10-768x391.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_3-10.png 1360w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y th\u1eed container:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo docker run --rm hello-world<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu xu\u1ea5t hi\u1ec7n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Hello from Docker!<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Docker \u0111\u00e3 ho\u1ea1t \u0111\u1ed9ng b\u00ecnh th\u01b0\u1eddng.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"558\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10-1024x558.png\" alt=\"Container hello-world in Hello from Docker, Docker ho\u1ea1t \u0111\u1ed9ng b\u00ecnh th\u01b0\u1eddng\" class=\"wp-image-130296\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10-1024x558.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10-300x164.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10-768x419.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_4-10.png 1062w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu Hermes Agent ch\u1ea1y b\u1eb1ng t\u00e0i kho\u1ea3n Linux th\u00f4ng th\u01b0\u1eddng, th\u00eam t\u00e0i kho\u1ea3n hi\u1ec7n t\u1ea1i v\u00e0o nh\u00f3m Docker:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo usermod -aG docker $USER<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3 \u0111\u0103ng xu\u1ea5t SSH v\u00e0 \u0111\u0103ng nh\u1eadp l\u1ea1i.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u \u00fd an to\u00e0n:<\/strong> theo <a href=\"https:\/\/docs.docker.com\/engine\/install\/linux-postinstall\/\" target=\"_blank\" rel=\"noopener nofollow\">t\u00e0i li\u1ec7u Docker<\/a>, nh\u00f3m docker c\u00f3 quy\u1ec1n t\u01b0\u01a1ng \u0111\u01b0\u01a1ng root tr\u00ean m\u00e1y. T\u00e0i kho\u1ea3n ch\u1ea1y Hermes n\u1eb1m trong nh\u00f3m n\u00e0y ngh\u0129a l\u00e0 ch\u00ednh ti\u1ebfn tr\u00ecnh Hermes (kh\u00f4ng ph\u1ea3i l\u1ec7nh trong sandbox) c\u00f3 th\u1ec3 \u0111i\u1ec1u khi\u1ec3n Docker; \u0111\u00f3 l\u00e0 l\u00fd do kh\u00f4ng bao gi\u1edd mount Docker socket v\u00e0o container.<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker ps<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu l\u1ec7nh ch\u1ea1y m\u00e0 kh\u00f4ng b\u00e1o l\u1ed7i quy\u1ec1n truy c\u1eadp, b\u1ea1n c\u00f3 th\u1ec3 chuy\u1ec3n sang ph\u1ea7n c\u1ea5u h\u00ecnh Sandbox.<\/p>\n\n\n\n<h3 id=\"Thi\u1ebft_l\u1eadp_Docker_Sandbox_cho_Hermes_Agent\">Thi\u1ebft l\u1eadp Docker Sandbox cho Hermes Agent<\/h3>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_1:_M\u1edf_file_c\u1ea5u_h\u00ecnh_Hermes_Agent\">B\u01b0\u1edbc 1: M\u1edf file c\u1ea5u h\u00ecnh Hermes Agent<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nano ~\/.hermes\/config.yaml<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">T\u00ecm ph\u1ea7n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>terminal:<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu ch\u01b0a c\u00f3, th\u00eam ph\u1ea7n c\u1ea5u h\u00ecnh v\u00e0o cu\u1ed1i file (b\u01b0\u1edbc 2).<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_2:_Chuy\u1ec3n_Terminal_Backend_sang_Docker\">B\u01b0\u1edbc 2: Chuy\u1ec3n Terminal Backend sang Docker<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Th\u00eam ho\u1eb7c ch\u1ec9nh th\u00e0nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>terminal:\n  backend: docker\n  docker_image: \"nikolaik\/python-nodejs:python3.11-nodejs20\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Trong \u0111\u00f3: backend: docker gi\u00fap c\u00e1c c\u00f4ng c\u1ee5 th\u1ef1c thi c\u1ee7a Hermes Agent ch\u1ea1y b\u00ean trong Docker Sandbox thay v\u00ec ch\u1ea1y tr\u1ef1c ti\u1ebfp tr\u00ean VPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>C\u1eadp nh\u1eadt 10\/2026: n\u1ebfu b\u1ecf tr\u1ed1ng <code>docker_image<\/code>, Hermes d\u00f9ng image m\u1eb7c \u0111\u1ecbnh <code>nousresearch\/hermes-sandbox:desktop<\/code> (c\u00f3 s\u1eb5n m\u00f4i tr\u01b0\u1eddng m\u00e0n h\u00ecnh cho c\u00f4ng c\u1ee5 duy\u1ec7t web v\u00e0 computer use). Image nikolaik\/python-nodejs trong b\u00e0i v\u1eabn d\u00f9ng \u0111\u01b0\u1ee3c cho vi\u1ec7c ch\u1ea1y l\u1ec7nh shell. \u0110\u1ed5i image th\u00ec container c\u0169 s\u1ebd \u0111\u01b0\u1ee3c t\u1ea1o l\u1ea1i \u1edf l\u1ea7n g\u1ecdi l\u1ec7nh k\u1ebf ti\u1ebfp.<\/em><\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_3:_Th\u00eam_gi\u1edbi_h\u1ea1n_an_to\u00e0n\">B\u01b0\u1edbc 3: Th\u00eam gi\u1edbi h\u1ea1n an to\u00e0n<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">N\u00ean s\u1eed d\u1ee5ng c\u1ea5u h\u00ecnh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>terminal:\n  backend: docker\n  docker_image: \"nikolaik\/python-nodejs:python3.11-nodejs20\"\n  docker_forward_env: []\n  docker_mount_cwd_to_workspace: false\n  docker_network: true\n  container_cpu: 1\n  container_memory: 2048\n  container_disk: 10240\n  container_persistent: false<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u00dd ngh\u0129a ch\u00ednh:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>docker_forward_env: []: kh\u00f4ng chuy\u1ec3n API key t\u1eeb VPS v\u00e0o Sandbox.<\/li>\n\n\n<li>docker_mount_cwd_to_workspace: false: kh\u00f4ng t\u1ef1 chia s\u1ebb th\u01b0 m\u1ee5c hi\u1ec7n t\u1ea1i c\u1ee7a VPS.<\/li>\n\n\n<li>docker_network: true: container v\u1eabn c\u00f3 Internet; \u0111\u1eb7t false \u0111\u1ec3 ch\u1ea1y v\u1edbi <code>--network=none<\/code> khi t\u00e1c v\u1ee5 kh\u00f4ng c\u1ea7n m\u1ea1ng.<\/li>\n\n\n<li>container_cpu: 1: gi\u1edbi h\u1ea1n 1 CPU.<\/li>\n\n\n<li>container_memory: 2048: gi\u1edbi h\u1ea1n 2 GB RAM.<\/li>\n\n\n<li>container_disk: 10240: gi\u1edbi h\u1ea1n kho\u1ea3ng 10 GB dung l\u01b0\u1ee3ng; t\u00e0i li\u1ec7u ghi ch\u1ec9 c\u00f3 hi\u1ec7u l\u1ef1c khi Docker d\u00f9ng overlay2 tr\u00ean XFS c\u00f3 pquota.<\/li>\n\n\n<li>container_persistent: false: m\u1ed7i phi\u00ean chat c\u00f3 container ri\u00eang, xo\u00e1 khi phi\u00ean \u0111\u00f3ng ho\u1eb7c r\u1ea3nh qu\u00e1 lifetime_seconds; ph\u00f9 h\u1ee3p h\u01a1n cho Sandbox.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><em>N\u1ebfu kh\u00f4ng khai b\u00e1o, m\u1eb7c \u0111\u1ecbnh l\u00e0 1 CPU, 5120 MB RAM v\u00e0 51200 MB \u0111\u0129a (<a href=\"https:\/\/hermes-agent.nousresearch.com\/docs\/user-guide\/security\" target=\"_blank\" rel=\"noopener nofollow\">t\u00e0i li\u1ec7u Security<\/a>); kh\u1ed1i c\u1ea5u h\u00ecnh tr\u00ean h\u1ea1 RAM v\u00e0 \u0111\u0129a cho VPS nh\u1ecf.<\/em><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"969\" height=\"484\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-9.png\" alt=\"M\u1ee5c terminal trong ~\/.hermes\/config.yaml v\u1edbi backend docker, docker_image v\u00e0 c\u00e1c kho\u00e1 container_cpu, container_memory, container_disk, container_persistent\" class=\"wp-image-130298\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-9.png 969w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-9-300x150.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_5-9-768x384.png 768w\" sizes=\"(max-width: 969px) 100vw, 969px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u1ea2nh ch\u1ee5p kh\u1ed1i terminal trong config.yaml tr\u01b0\u1edbc khi ch\u1ec9nh, v\u1edbi container_memory 20480 v\u00e0 container_persistent true; sau khi s\u1eeda theo kh\u1ed1i l\u1ec7nh \u1edf tr\u00ean, c\u00e1c gi\u00e1 tr\u1ecb s\u1ebd l\u00e0 2048 v\u00e0 false.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00e1c bi\u1ec7t gi\u1eefa hai gi\u00e1 tr\u1ecb c\u1ee7a <code>container_persistent<\/code> theo <a href=\"https:\/\/hermes-agent.nousresearch.com\/docs\/user-guide\/configuration#docker-backend\" target=\"_blank\" rel=\"noopener nofollow\">t\u00e0i li\u1ec7u Docker Backend<\/a>:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1400\" height=\"750\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/thiet-lap-docker-sandbox-cho-hermes-agent-vong-doi-container.webp\" alt=\"container_persistent true: m\u1ed9t container hermes ch\u1ea1y l\u00e2u, m\u1ecdi phi\u00ean Telegram, CLI, \/new v\u00e0 subagent d\u00f9ng chung; false: m\u1ed7i phi\u00ean m\u1ed9t container ri\u00eang, subagent d\u00f9ng chung container c\u1ee7a phi\u00ean cha\" class=\"wp-image-132447\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/thiet-lap-docker-sandbox-cho-hermes-agent-vong-doi-container.webp 1400w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/thiet-lap-docker-sandbox-cho-hermes-agent-vong-doi-container-300x161.webp 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/thiet-lap-docker-sandbox-cho-hermes-agent-vong-doi-container-1024x549.webp 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/thiet-lap-docker-sandbox-cho-hermes-agent-vong-doi-container-768x411.webp 768w\" sizes=\"(max-width: 1400px) 100vw, 1400px\" \/><\/figure>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_4:_L\u01b0u_c\u1ea5u_h\u00ecnh\">B\u01b0\u1edbc 4: L\u01b0u c\u1ea5u h\u00ecnh<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Trong Nano, nh\u1ea5n Ctrl + O \u2192 Enter \u0111\u1ec3 l\u01b0u, sau \u0111\u00f3 nh\u1ea5n Ctrl + X \u0111\u1ec3 tho\u00e1t.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_5:_T\u1ea3i_Docker_image\">B\u01b0\u1edbc 5: T\u1ea3i Docker image<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker pull nikolaik\/python-nodejs:python3.11-nodejs20<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker images<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu image xu\u1ea5t hi\u1ec7n trong danh s\u00e1ch, Docker Sandbox \u0111\u00e3 c\u00f3 m\u00f4i tr\u01b0\u1eddng \u0111\u1ec3 kh\u1edfi ch\u1ea1y.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"269\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-1024x269.png\" alt=\"K\u00e9o image nikolaik\/python-nodejs:python3.11-nodejs20 v\u00e0 ki\u1ec3m tra b\u1eb1ng docker images\" class=\"wp-image-130299\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-1024x269.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-300x79.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-768x202.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7-1536x404.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_6-7.png 1890w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_6:_Kh\u1edfi_\u0111\u1ed9ng_l\u1ea1i_Hermes_Agent\">B\u01b0\u1edbc 6: Kh\u1edfi \u0111\u1ed9ng l\u1ea1i Hermes Agent<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi \u0111\u1ed5i c\u1ea5u h\u00ecnh, c\u1ea7n kh\u1edfi \u0111\u1ed9ng l\u1ea1i ti\u1ebfn tr\u00ecnh Hermes Agent \u0111ang ch\u1ea1y. C\u00e1ch restart ph\u1ee5 thu\u1ed9c v\u00e0o ph\u01b0\u01a1ng th\u1ee9c b\u1ea1n \u0111ang d\u00f9ng \u0111\u1ec3 v\u1eadn h\u00e0nh Hermes.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>N\u1ebfu \u0111ang ch\u1ea1y Hermes tr\u1ef1c ti\u1ebfp trong Terminal, h\u00e3y tho\u00e1t phi\u00ean hi\u1ec7n t\u1ea1i b\u1eb1ng \/quit r\u1ed3i ch\u1ea1y l\u1ea1i l\u1ec7nh hermes.<\/li>\n\n\n<li>N\u1ebfu gateway ch\u1ea1y n\u1ec1n (d\u1ecbch v\u1ee5 systemd), ch\u1ea1y <code>hermes gateway restart<\/code>.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi Hermes ch\u1ea1y l\u1ea1i, Docker backend s\u1ebd \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng cho c\u00e1c c\u00f4ng c\u1ee5 th\u1ef1c thi t\u01b0\u01a1ng th\u00edch. C\u00e1c c\u00e1ch kh\u1edfi \u0111\u1ed9ng l\u1ea1i kh\u00e1c: <a href=\"https:\/\/tino.vn\/blog\/khoi-dong-lai-hermes-agent\/\">c\u00e1ch kh\u1edfi \u0111\u1ed9ng l\u1ea1i Hermes Agent<\/a>.<\/p>\n\n\n\n<h4 id=\"B\u01b0\u1edbc_7:_Ki\u1ec3m_tra_Docker_Sandbox\">B\u01b0\u1edbc 7: Ki\u1ec3m tra Docker Sandbox<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Y\u00eau c\u1ea7u Hermes Agent ch\u1ea1y m\u1ed9t l\u1ec7nh Terminal \u0111\u01a1n gi\u1ea3n, ch\u1eb3ng h\u1ea1n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>H\u00e3y ch\u1ea1y l\u1ec7nh pwd v\u00e0 cho t\u00f4i bi\u1ebft th\u01b0 m\u1ee5c hi\u1ec7n t\u1ea1i.<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"561\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6-1024x561.png\" alt=\"Hermes Agent ch\u1ea1y l\u1ec7nh pwd trong sandbox v\u00e0 tr\u1ea3 l\u1eddi th\u01b0 m\u1ee5c hi\u1ec7n t\u1ea1i l\u00e0 \/root\" class=\"wp-image-130300\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6-1024x561.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6-300x164.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6-768x421.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_7-6.png 1402w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3 tho\u00e1t ra v\u00e0 ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>docker ps<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu container c\u1ee7a Hermes xu\u1ea5t hi\u1ec7n, Docker Sandbox \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"1024\" height=\"291\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6-1024x291.png\" alt=\"docker ps hi\u1ec7n container hermes ch\u1ea1y image nikolaik\/python-nodejs v\u1edbi l\u1ec7nh sleep infinity\" class=\"wp-image-130301\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6-1024x291.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6-300x85.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6-768x218.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/Screenshot_8-6.png 1315w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 y\u00eau c\u1ea7u Hermes ch\u1ea1y:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/os-release<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">ho\u1eb7c:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls \/<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">K\u1ebft qu\u1ea3 l\u00fac n\u00e0y \u0111\u1ebfn t\u1eeb m\u00f4i tr\u01b0\u1eddng container thay v\u00ec tr\u1ef1c ti\u1ebfp t\u1eeb h\u1ec7 \u0111i\u1ec1u h\u00e0nh VPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u01b0 v\u1eady, v\u1edbi c\u1ea5u h\u00ecnh tr\u00ean, Hermes Agent \u0111\u00e3 c\u00f3 m\u00f4i tr\u01b0\u1eddng th\u1ef1c thi ri\u00eang, \u0111\u1ed3ng th\u1eddi h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp file, API key v\u00e0 t\u00e0i nguy\u00ean c\u1ee7a VPS.<\/p>\n\n\n\n<h2 id=\"Docker_Sandbox_c\u00f3_\u0111\u1ee7_\u0111\u1ec3_b\u1ea3o_v\u1ec7_VPS_kh\u00f4ng?\">Docker Sandbox c\u00f3 \u0111\u1ee7 \u0111\u1ec3 b\u1ea3o v\u1ec7 VPS kh\u00f4ng?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng. Docker Sandbox l\u00e0 m\u1ed9t l\u1edbp b\u1ea3o v\u1ec7 quan tr\u1ecdng nh\u01b0ng kh\u00f4ng ph\u1ea3i l\u1edbp duy nh\u1ea5t: container v\u1eabn d\u00f9ng chung kernel v\u1edbi VPS, th\u01b0 m\u1ee5c b\u1ea1n mount v\u00e0o v\u1eabn ghi th\u1eb3ng xu\u1ed1ng host, v\u00e0 ti\u1ebfn tr\u00ecnh Hermes c\u00f9ng file .env v\u1eabn n\u1eb1m ngo\u00e0i container.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00f4 h\u00ecnh b\u1ea3o m\u1eadt c\u1ee7a Hermes Agent s\u1eed d\u1ee5ng nhi\u1ec1u l\u1edbp, bao g\u1ed3m ki\u1ec3m so\u00e1t ng\u01b0\u1eddi d\u00f9ng, ki\u1ec3m tra thao t\u00e1c nguy hi\u1ec3m, gi\u1edbi h\u1ea1n ghi file, container isolation, b\u1ea3o v\u1ec7 credential MCP v\u00e0 c\u00f4 l\u1eadp session.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ed9t \u0111i\u1ec3m c\u1ea7n bi\u1ebft: khi d\u00f9ng backend docker, Hermes b\u1ecf qua b\u01b0\u1edbc h\u1ecfi duy\u1ec7t l\u1ec7nh nguy hi\u1ec3m v\u00ec coi container l\u00e0 ranh gi\u1edbi an to\u00e0n (<a href=\"https:\/\/hermes-agent.nousresearch.com\/docs\/user-guide\/security\" target=\"_blank\" rel=\"noopener nofollow\">t\u00e0i li\u1ec7u Security<\/a>). L\u1ec7nh xo\u00e1 d\u1eef li\u1ec7u trong th\u01b0 m\u1ee5c b\u1ea1n mount v\u00e0o s\u1ebd ch\u1ea1y ngay m\u00e0 kh\u00f4ng h\u1ecfi, n\u00ean c\u00e0ng c\u1ea7n gi\u1eef docker_volumes t\u1ed1i thi\u1ec3u.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ed9t c\u1ea5u h\u00ecnh an to\u00e0n n\u00ean k\u1ebft h\u1ee3p:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Docker Sandbox + gi\u1edbi h\u1ea1n volume + h\u1ea1n ch\u1ebf credential + gi\u1edbi h\u1ea1n t\u00e0i nguy\u00ean + ki\u1ec3m so\u00e1t network + c\u1eadp nh\u1eadt Hermes Agent th\u01b0\u1eddng xuy\u00ean.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ngo\u00e0i ra, Docker Terminal Backend kh\u00f4ng \u0111\u1ed3ng ngh\u0129a to\u00e0n b\u1ed9 ti\u1ebfn tr\u00ecnh Hermes Agent \u0111\u1ec1u n\u1eb1m trong container. Mu\u1ed1n \u0111\u00f3ng g\u00f3i c\u1ea3 agent, xem c\u00e1ch ch\u1ea1y image ch\u00ednh th\u1ee9c trong b\u00e0i <a href=\"https:\/\/tino.vn\/blog\/cai-dat-hermes-agent-tren-docker\/\">c\u00e0i \u0111\u1eb7t Hermes Agent tr\u00ean Docker<\/a>. V\u1edbi m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p ho\u1eb7c d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m, n\u00ean k\u1ebft h\u1ee3p th\u00eam c\u00e1ch ly m\u1ea1ng nh\u01b0 <a href=\"https:\/\/tino.vn\/blog\/bao-mat-vps-chay-ai-agent-bang-tailscale\/\">b\u1ea3o m\u1eadt VPS ch\u1ea1y AI Agent b\u1eb1ng Tailscale<\/a> ho\u1eb7c sandbox chuy\u00ean d\u1ee5ng c\u00f3 ch\u00ednh s\u00e1ch filesystem, network v\u00e0 process ch\u1eb7t ch\u1ebd h\u01a1n.<\/p>\n\n\n\n<h2 id=\"M\u1ed9t_s\u1ed1_l\u01b0u_\u00fd_khi_s\u1eed_d\u1ee5ng_Docker_Sandbox_v\u1edbi_Hermes_Agent\">M\u1ed9t s\u1ed1 l\u01b0u \u00fd khi s\u1eed d\u1ee5ng Docker Sandbox v\u1edbi Hermes Agent<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Khi d\u00f9ng Docker Sandbox v\u1edbi Hermes Agent, ba nguy\u00ean t\u1eafc quan tr\u1ecdng l\u00e0 kh\u00f4ng mount nhi\u1ec1u h\u01a1n m\u1ee9c c\u1ea7n, kh\u00f4ng chuy\u1ec3n credential khi ch\u01b0a c\u1ea7n v\u00e0 kh\u00f4ng \u0111\u01b0a Docker socket v\u00e0o container. Danh s\u00e1ch d\u01b0\u1edbi \u0111\u00e2y gom c\u00e1c l\u01b0u \u00fd c\u1ee5 th\u1ec3.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Lu\u00f4n c\u1eadp nh\u1eadt Hermes Agent tr\u01b0\u1edbc khi tri\u1ec3n khai production.<\/li>\n\n\n<li>Kh\u00f4ng mount to\u00e0n b\u1ed9 VPS v\u00e0o container.<\/li>\n\n\n<li>\u01afu ti\u00ean volume read-only (th\u00eam :ro trong docker_volumes) n\u1ebfu Agent ch\u1ec9 c\u1ea7n \u0111\u1ecdc.<\/li>\n\n\n<li>Gi\u1eef docker_forward_env r\u1ed7ng n\u1ebfu ch\u01b0a c\u1ea7n credential.<\/li>\n\n\n<li>Kh\u00f4ng \u0111\u01b0a Docker socket v\u00e0o Sandbox.<\/li>\n\n\n<li>Gi\u1edbi h\u1ea1n CPU v\u00e0 RAM \u0111\u1ec3 tr\u00e1nh t\u00e1c v\u1ee5 Agent chi\u1ebfm to\u00e0n b\u1ed9 t\u00e0i nguy\u00ean VPS.<\/li>\n\n\n<li>D\u00f9ng container_persistent: false cho c\u00e1c t\u00e1c v\u1ee5 th\u1eed nghi\u1ec7m ho\u1eb7c code ch\u01b0a \u0111\u00e1ng tin c\u1eady.<\/li>\n\n\n<li>T\u1eaft network b\u1eb1ng docker_network: false khi workload kh\u00f4ng c\u1ea7n Internet.<\/li>\n\n\n<li>Kh\u00f4ng th\u00eam c\u1edd <code>--privileged<\/code>, <code>--network=host<\/code> qua docker_extra_args: t\u00e0i li\u1ec7u c\u1ea3nh b\u00e1o c\u00e1c c\u1edd xung \u0111\u1ed9t s\u1ebd l\u00e0m y\u1ebfu l\u1edbp c\u00e1ch ly.<\/li>\n\n\n<li>Kh\u00f4ng ch\u1ea1y gateway b\u1eb1ng t\u00e0i kho\u1ea3n root khi \u0111\u01b0a v\u00e0o s\u1eed d\u1ee5ng th\u1eadt (khuy\u1ebfn ngh\u1ecb trong t\u00e0i li\u1ec7u Security); \u1ea3nh ch\u1ee5p trong b\u00e0i d\u00f9ng root ch\u1ec9 \u0111\u1ec3 th\u1eed nghi\u1ec7m.<\/li>\n\n\n<li>T\u00e1ch m\u00f4i tr\u01b0\u1eddng production kh\u1ecfi m\u00f4i tr\u01b0\u1eddng th\u1eed nghi\u1ec7m.<\/li>\n\n\n<li>Kh\u00f4ng xem Docker l\u00e0 l\u1edbp b\u1ea3o m\u1eadt duy nh\u1ea5t.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"700\" height=\"375\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-3.png\" alt=\"M\u1ed9t s\u1ed1 l\u01b0u \u00fd khi s\u1eed d\u1ee5ng Docker Sandbox v\u1edbi Hermes Agent\" class=\"wp-image-130303\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-3.png 700w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/09\/thiet-lap-docker-sandbox-cho-hermes-agent-3-300x161.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/figure>\n\n\n\n<h2 id=\"Khi_n\u00e0o_ch\u01b0a_c\u1ea7n_Docker_Sandbox_cho_Hermes_Agent?\">Khi n\u00e0o ch\u01b0a c\u1ea7n Docker Sandbox cho Hermes Agent?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ch\u01b0a c\u1ea7n Docker Sandbox khi Hermes Agent ch\u1ec9 d\u00f9ng \u0111\u1ec3 tr\u00f2 chuy\u1ec7n, tra c\u1ee9u, kh\u00f4ng b\u1eadt c\u00f4ng c\u1ee5 terminal, ho\u1eb7c khi b\u1ea1n c\u1ea7n agent qu\u1ea3n tr\u1ecb ch\u00ednh VPS nh\u01b0 c\u00e0i g\u00f3i h\u1ec7 th\u1ed1ng, s\u1eeda c\u1ea5u h\u00ecnh d\u1ecbch v\u1ee5. Tr\u01b0\u1eddng h\u1ee3p sau, l\u1ec7nh trong container kh\u00f4ng th\u1ea5y d\u1ecbch v\u1ee5 c\u1ee7a host n\u00ean k\u1ebft qu\u1ea3 s\u1ebd sai l\u1ec7ch.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>VPS ch\u1ec9 1GB RAM: Docker daemon c\u1ed9ng container sandbox d\u1ec5 l\u00e0m h\u1ebft b\u1ed9 nh\u1edb.<\/li>\n\n\n<li>Agent ch\u1ec9 chat: t\u1eaft c\u00f4ng c\u1ee5 terminal b\u1eb1ng <code>hermes tools<\/code> \u0111\u01a1n gi\u1ea3n h\u01a1n d\u1ef1ng sandbox.<\/li>\n\n\n<li>C\u1ea7n qu\u1ea3n tr\u1ecb host: d\u00f9ng backend local k\u00e8m ph\u00ea duy\u1ec7t l\u1ec7nh nguy hi\u1ec3m, ho\u1eb7c backend ssh t\u1edbi m\u1ed9t m\u00e1y ri\u00eang.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"Ch\u1ea1y_Hermes_Agent_tr\u00ean_VPS_c\u00f3_quy\u1ec1n_root\">Ch\u1ea1y Hermes Agent tr\u00ean VPS c\u00f3 quy\u1ec1n root<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Docker Sandbox c\u1ea7n VPS c\u00f3 quy\u1ec1n root \u0111\u1ec3 c\u00e0i Docker Engine v\u00e0 ch\u1ec9nh c\u1ea5u h\u00ecnh. N\u1ebfu kh\u00f4ng mu\u1ed1n c\u00e0i Hermes t\u1eeb \u0111\u1ea7u, b\u1ea1n c\u00f3 th\u1ec3 d\u00f9ng VPS c\u00e0i s\u1eb5n Hermes Agent r\u1ed3i b\u1eadt Docker backend theo c\u00e1c b\u01b0\u1edbc tr\u00ean. C\u00e1c kho\u00e1 gi\u1edbi h\u1ea1n CPU, RAM, m\u1ea1ng trong config.yaml \u00e1p d\u1ee5ng nh\u01b0 nhau tr\u00ean VPS t\u1ef1 c\u00e0i v\u00e0 VPS c\u00e0i s\u1eb5n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mu\u1ed1n ch\u1ea1y Hermes Agent 24\/7 m\u00e0 kh\u00f4ng t\u1ef1 c\u00e0i? <a href=\"https:\/\/tino.vn\/vps-hermes\">VPS Hermes Agent c\u1ee7a Tino<\/a> c\u00e0i s\u1eb5n Hermes Agent tr\u00ean VPS NVMe \u0111\u1eb7t t\u1ea1i Vi\u1ec7t Nam; b\u1ea1n v\u1eabn c\u00f3 quy\u1ec1n root \u0111\u1ec3 c\u1ea5u h\u00ecnh. Xem c\u1ea5u h\u00ecnh v\u00e0 gi\u00e1 tr\u00ean trang s\u1ea3n ph\u1ea9m. N\u1ebfu d\u00f9ng trong 30 ng\u00e0y m\u00e0 kh\u00f4ng h\u00e0i l\u00f2ng, b\u1ea1n \u0111\u01b0\u1ee3c ho\u00e0n 100% (<a href=\"https:\/\/tino.vn\/chinh-sach-hoan-tien\">xem \u0111i\u1ec1u ki\u1ec7n<\/a>).<\/p>\n\n\n\n<h2 id=\"K\u1ebft_lu\u1eadn\">K\u1ebft lu\u1eadn<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Quy\u1ec1n ch\u1ea1y l\u1ec7nh l\u00e0m Hermes Agent linh ho\u1ea1t nh\u01b0ng c\u0169ng \u0111\u00f2i h\u1ecfi ki\u1ec3m so\u00e1t ch\u1eb7t. Docker Sandbox l\u00e0 c\u00e1ch t\u01b0\u01a1ng \u0111\u1ed1i \u0111\u01a1n gi\u1ea3n \u0111\u1ec3 t\u00e1ch l\u1ec7nh c\u1ee7a agent kh\u1ecfi h\u1ec7 \u0111i\u1ec1u h\u00e0nh host, gi\u1edbi h\u1ea1n t\u00e0i nguy\u00ean v\u00e0 ki\u1ec3m so\u00e1t d\u1eef li\u1ec7u m\u00e0 m\u00f4i tr\u01b0\u1eddng th\u1ef1c thi \u0111\u01b0\u1ee3c ti\u1ebfp c\u1eadn.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1ch tri\u1ec3n khai n\u00e0y gi\u00fap Hermes Agent gi\u1eef \u0111\u01b0\u1ee3c kh\u1ea3 n\u0103ng t\u1ef1 \u0111\u1ed9ng h\u00f3a, \u0111\u1ed3ng th\u1eddi gi\u1ea3m \u0111\u00e1ng k\u1ec3 r\u1ee7i ro khi AI ph\u1ea3i ch\u1ea1y code ho\u1eb7c th\u1ef1c hi\u1ec7n c\u00e1c t\u00e1c v\u1ee5 tr\u00ean VPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c b\u00e0i vi\u1ebft li\u00ean quan:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/tino.vn\/blog\/cai-dat-hermes-agent-tren-docker\/\">H\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t Hermes Agent tr\u00ean Docker<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/hermes-agent-desktop\/\">H\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t v\u00e0 s\u1eed d\u1ee5ng Hermes Agent Desktop<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/ket-noi-tai-khoan-zalo-ca-nhan-voi-hermes-agent\/\">H\u01b0\u1edbng d\u1eabn k\u1ebft n\u1ed1i t\u00e0i kho\u1ea3n Zalo c\u00e1 nh\u00e2n v\u1edbi Hermes Agent tr\u00ean VPS Hermes<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/cach-viet-skill-cho-hermes-agent\/\">C\u00e1ch vi\u1ebft Skill cho Hermes Agent: \u0110\u00fang chu\u1ea9n, d\u1ec5 k\u00edch ho\u1ea1t<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tino.vn\/blog\/hermes-agent-nen-chay-local-hay-vps\/\">Hermes Agent n\u00ean ch\u1ea1y Local hay VPS?<\/a><\/li>\n<\/ul>\n\n\n\n<h2 id=\"Nh\u1eefng_c\u00e2u_h\u1ecfi_th\u01b0\u1eddng_g\u1eb7p\">Nh\u1eefng c\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p<\/h2>\n\n\n\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Hermes_Agent_c\u00f3_b\u1eaft_bu\u1ed9c_ph\u1ea3i_d\u00f9ng_Docker_Sandbox_kh\u00f4ng?\">Hermes Agent c\u00f3 b\u1eaft bu\u1ed9c ph\u1ea3i d\u00f9ng Docker Sandbox kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng. Backend m\u1eb7c \u0111\u1ecbnh l\u00e0 local, ch\u1ea1y tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y c\u00e0i Hermes. Docker Sandbox ph\u00f9 h\u1ee3p h\u01a1n khi Agent \u0111\u01b0\u1ee3c ph\u00e9p ch\u1ea1y l\u1ec7nh, th\u1ef1c thi code ho\u1eb7c x\u1eed l\u00fd n\u1ed9i dung kh\u00f4ng ho\u00e0n to\u00e0n \u0111\u00e1ng tin c\u1eady, v\u00ed d\u1ee5 file ng\u01b0\u1eddi kh\u00e1c g\u1eedi qua Telegram.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Docker_Sandbox_c\u00f3_l\u00e0m_Hermes_Agent_ch\u1eadm_h\u01a1n_kh\u00f4ng?\">Docker Sandbox c\u00f3 l\u00e0m Hermes Agent ch\u1eadm h\u01a1n kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">C\u00f3 th\u00eam m\u1ed9t l\u01b0\u1ee3ng overhead nh\u1ecf, ch\u1ee7 y\u1ebfu \u1edf l\u1ea7n g\u1ecdi l\u1ec7nh \u0111\u1ea7u ti\u00ean khi Hermes kh\u1edfi t\u1ea1o container. C\u00e1c l\u1ec7nh sau ch\u1ea1y qua docker exec v\u00e0o container c\u00f3 s\u1eb5n n\u00ean ch\u00eanh l\u1ec7ch th\u01b0\u1eddng kh\u00f4ng \u0111\u00e1ng k\u1ec3. V\u1edbi container_persistent: false, m\u1ed7i phi\u00ean m\u1edbi l\u1ea1i m\u1ea5t th\u00eam th\u1eddi gian t\u1ea1o container.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\n<script type=\"application\/ld+json\">\n\t{\n\t\t\"@context\": \"https:\/\/schema.org\",\n\t\t\"@type\": \"FAQPage\",\n\t\t\"mainEntity\": [\n\t\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Hermes Agent c\u00f3 b\u1eaft bu\u1ed9c ph\u1ea3i d\u00f9ng Docker Sandbox kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Kh\u00f4ng. Backend m\u1eb7c \u0111\u1ecbnh l\u00e0 local, ch\u1ea1y tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y c\u00e0i Hermes. Docker Sandbox ph\u00f9 h\u1ee3p h\u01a1n khi Agent \u0111\u01b0\u1ee3c ph\u00e9p ch\u1ea1y l\u1ec7nh, th\u1ef1c thi code ho\u1eb7c x\u1eed l\u00fd n\u1ed9i dung kh\u00f4ng ho\u00e0n to\u00e0n \u0111\u00e1ng tin c\u1eady, v\u00ed d\u1ee5 file ng\u01b0\u1eddi kh\u00e1c g\u1eedi qua Telegram.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Docker Sandbox c\u00f3 l\u00e0m Hermes Agent ch\u1eadm h\u01a1n kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>C\u00f3 th\u00eam m\u1ed9t l\u01b0\u1ee3ng overhead nh\u1ecf, ch\u1ee7 y\u1ebfu \u1edf l\u1ea7n g\u1ecdi l\u1ec7nh \u0111\u1ea7u ti\u00ean khi Hermes kh\u1edfi t\u1ea1o container. C\u00e1c l\u1ec7nh sau ch\u1ea1y qua docker exec v\u00e0o container c\u00f3 s\u1eb5n n\u00ean ch\u00eanh l\u1ec7ch th\u01b0\u1eddng kh\u00f4ng \u0111\u00e1ng k\u1ec3. V\u1edbi container_persistent: false, m\u1ed7i phi\u00ean m\u1edbi l\u1ea1i m\u1ea5t th\u00eam th\u1eddi gian t\u1ea1o container.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t\t\t\t]\n\t}\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>\u0110\u1ec3 ch\u1ea1y l\u1ec7nh c\u1ee7a Hermes Agent trong Docker sandbox, c\u00e0i Docker Engine tr\u00ean VPS, m\u1edf ~\/.hermes\/config.yaml, \u0111\u1eb7t terminal.backend: docker k\u00e8m gi\u1edbi h\u1ea1n CPU, RAM, kh\u00f4ng chuy\u1ec3n bi\u1ebfn m\u00f4i tr\u01b0\u1eddng v\u00e0 kh\u00f4ng mount th\u01b0 m\u1ee5c host, r\u1ed3i kh\u1edfi \u0111\u1ed9ng l\u1ea1i Hermes. Ki\u1ec3m tra b\u1eb1ng docker ps: th\u1ea5y container t\u00ean hermes-\u2026 l\u00e0 sandbox \u0111ang ho\u1ea1t \u0111\u1ed9ng. M\u1ed9t [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":130307,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7592],"tags":[7593],"class_list":["post-130290","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hermes-agent","tag-hermes-agent"],"_links":{"self":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130290","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/comments?post=130290"}],"version-history":[{"count":4,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130290\/revisions"}],"predecessor-version":[{"id":132503,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/130290\/revisions\/132503"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media\/130307"}],"wp:attachment":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media?parent=130290"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/categories?post=130290"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/tags?post=130290"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}