Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • Apple Container is an interesting work in progress: https://github.com/apple/container
    by benguild
  • I got excited for this not because this didn't exist before, but because Docker putting their weight on this would imply a broader adoption and better integration in the industry. I am sad that they are asking for a login here though, which doesn't make any sense to me.
    by karakanb
  • Wow, I hope one day Linux will be able to support the exclusive MacOs/Windows technology of Docker Sandboxes.

    (it's in the doc, but kinda strange to not see some instructions on the main page, probably distro related)

    by hokkos
  • What is the main benefit over doing something like:

        docker run --runtime krun --rm -it -v $(pwd):/workspace/$(basename $(pwd)) -w /workspace/$(basename $(pwd)) --network restricted-net ghcr.io/openai/codex-universal:latest sh
    That runs the codex OCI in a qemu microvm. From what I can see, more fine grained network and filesystem access control as well as convenience?
    by sureglymop
  • How about implementing proper permissions on the tool use or if you need more flexibility a dedicated model to analyse potential impact? (Like Claude Code's Autopilot but more configurable)?

    I find solutions like this to be a like trying to patch a leaking boat on a lake with duct tape. It will help, but it's not a proper solution.

    Also, often the tasks you want the AI to perform are in the outside world. Like "connect to my servers, and figure out X and Y".

    The proper way is permission isolation. I run a small k8 cluster in the homelab and I have 3 types of pod/agent combinations for my AI agents. Read only, one that can change my gitops but it needs to create PRs that admin approves, and admin.

    Likewise with code. I have a forgejo git instance where agents have ability to create feature branches and so on, but merging is gated.

    Those things require "GH enterprise features".

    In fact more and more things we do at home will require "enterprise features". Why? Because a person with AI is basically a small team, but some of team members behave like Chimps on crack... So security must be top notch.

    by Roark66
  • > Each agent runs inside a dedicated microVM with your dev environment

    What's a "microVM" and what's the security model here compared to using real virtual machines with actual constraints on breakouts?

    Is it marketing fluff?

    Incus/LXD has had VM's for a long time now.

        incus launch images:ubuntu/26.04 my-ubuntu-vm --vm
    incus exec my-ubuntu-vm -- bash
    by Grimburger
  • The login is annoying but, lacking an open source alternative, this has been my daily driver for a while now because it works great out of the box with two key features: outbound firewall and secret injection with placeholders.

    I run it with superset and then each git worktree is mounted in a sandbox that is configured for each repo i work in.

    Closest open source I have seen is https://earendil-works.github.io/gondolin but the DX is not as polished. https://exe.dev/ would be perfect but it does not come with outbound firewall.

    Does anyone have a better alternative?

    by rusch
  • I work at Docker. Lot of valid and useful feedback here that we're looking closely at.

    One correction: this isn't containers. Each session is a microVM with its own kernel on the platform's native hypervisor: Hypervisor.framework, WHP, KVM. We wrote a new VMM (not Firecracker) to make it more effective across platforms.

    Explained a bit more here about the architecture and why those choices were made: https://www.docker.com/blog/why-microvms-the-architecture-be...

    by srini-docker

Explore Birbla archives