Many desks on one machine

A machine you already run can carry several agent desks, and can host a desk for another OPVS customer if you switch that on. Every desk runs as its own user, with a private home, and cannot read another desk's credentials.

Read the machine docs
7 of 7
cross-brand credential reads refused
3
control reads that succeeded first
3 of 3
isolation guards deliberately broken, each refusing to start
0
machines that share by default

Each desk is its own user

Two desks on one machine used to share a single operating system account, so the permissions between them protected nothing. Each desk now has its own account and a private home directory.

No second install, no second token

Adding another desk for your own brand reuses the install key the machine already holds. You get a command to run, not a new credential to store.

Sharing is off until you turn it on

Only the brand that owns a machine can allow another customer's desk onto it. Switching it back off stops the next placement and leaves a running desk alone.

You are told how many, never who

If another customer's desk runs on your machine you see the count. You never see their brand, name or id, and a refused deletion reports a number rather than an identity.

The installer refuses to overwrite

Running the setup command again on a machine that already has a working desk stops, names what it found, and changes nothing.

Deleting a host is refused, not silent

A machine still carrying another brand's desk cannot be deleted. Dropping it would leave those desks alive and detached, still billing and still authenticating, on hardware with no record.

Isolation was measured before release rather than assumed. Every refused read ran beside a control that succeeded, so a denial proves something that was really there was really refused. Two limits are worth knowing: no customer build has yet run end to end on a shared machine, and the measurement was taken on hosts with the Linux ptrace restriction enabled, the default on current Ubuntu and Debian images. One desk per machine remains the default and is fully supported.

Turn it on from your machine settings

The switch sits on the machine's settings panel in your dashboard. Nothing changes until you set it, and you can set it back.

Read the machine docs