AI agents are increasingly deployed in multi-tenant cloud environments, where they execute diverse tool calls within sandboxed containers, each call with distinct resource demands and rapid fluctuations. We present a systematic characterization of OS-level resource dynamics in sandboxed AI coding agents, analyzing 144 software engineering tasks from the SWE-rebench benchmark across two LLM models. Our measurements reveal that (1) OS-level execution (tool calls, container and agent initialization) accounts for 56-74% of end-to-end task latency; (2) memory, not CPU, is the concurrency bottleneck; (3) memory spikes are tool-call-driven with a up to 15.4x peak-to-average ratio; and (4) resource demands are highly unpredictable across tasks, runs, and models. Comparing these characteristics against serverless, microservice, and batch workloads, we identify three mismatches in existing resource controls: a granularity mismatch (container-level policies vs. tool-call-level dynamics), a responsiveness mismatch (user-space reaction vs. sub-second unpredictable bursts), and an adaptability mismatch (history-based prediction vs. non-deterministic stateful execution). We propose AgentCgroup, an intent-driven eBPF-based resource controller that exploits agents ability to declare resource needs and reconstruct execution strategies, using hierarchical cgroup structures aligned with tool-call boundaries, in-kernel enforcement via sched_ext and memcg_bpf_ops, and runtime-adaptive policies. Preliminary evaluation demonstrates improved multi-tenant isolation and reduced resource waste. AgentCgroup is open-source at https://github.com/eunomia-bpf/agentcgroup

翻译：AI智能体正日益部署于多租户云环境中，其在沙盒容器内执行多样化的工具调用，每次调用均具有不同的资源需求且快速波动。本文对沙盒化AI编程智能体中操作系统级资源动态进行了系统性表征，分析了来自SWE-rebench基准测试的144个软件工程任务，涵盖两种大语言模型。测量结果表明：(1) 操作系统级执行（工具调用、容器与智能体初始化）占端到端任务延迟的56%-74%；(2) 内存而非CPU成为并发瓶颈；(3) 内存峰值由工具调用驱动，峰均比高达15.4倍；(4) 不同任务、运行轮次和模型间的资源需求高度不可预测。通过将这些特性与无服务器、微服务和批处理工作负载进行比较，我们识别出现有资源控制机制的三类不匹配：粒度不匹配（容器级策略与工具调用级动态）、响应性不匹配（用户空间响应与亚秒级不可预测突发）以及适应性不匹配（基于历史的预测与非确定性的有状态执行）。为此，我们提出AgentCgroup——一种基于意图驱动的eBPF资源控制器，该控制器利用智能体声明资源需求与重构执行策略的能力，采用与工具调用边界对齐的层级式cgroup结构，通过sched_ext和memcg_bpf_ops实现内核级强制，并配备运行时自适应策略。初步评估表明，该系统能提升多租户隔离性并减少资源浪费。AgentCgroup已在https://github.com/eunomia-bpf/agentcgroup开源。