einhard

4 godziny temudiscuss

I restrict networking via my pfSense router, using VLANs. I also don't include any credentials in the container; the agents there can't push, pull, or really access anything else beyond the standard tools without any authentication.

I don't use Claude or any other paid agent at the moment, so if that were to change I'd probably modify the way I run this, but with this simple set up I'm not too worried about credentials leaking.

einhard

8 godzin temudiscuss

Ah, that makes sense. I've only recently started playing with this stuff, and I've been focusing a lot of just getting somewhat good at using LLMs for projects while developing my own intuition, so everything I do just uses the mounted project and uv directly. As soon as things get more complex, I imagine I'll end up with a full wrapper as well.

Unrelated: I enjoyed your latest blog entry. I recently starting thinking about how to show the work that is done with AI, and how we talk about it. I haven't come to any major conclusions (I wish!), but your post about the prompting being distinct from the actual work resonates with me. Reminds me somewhat of discussions about the art of photography compared to the art of editing photos as a distinct skill.

einhard

9 godzin temudiscuss

I am certainly no expert in this space so it is quite possible I'm missing something critical, but what seems to work for me is a Podman image I built on my computer with some basic things I need (using OpenCode, but I imagine any other agent could be used instead):

  FROM docker.io/archlinux:base
  RUN pacman -Syu --noconfirm && \
      pacman -S --noconfirm \
      base-devel \
      git \
      curl \
      uv \
      opencode && \
      pacman -Scc --noconfirm
  RUN mkdir -p /etc/opencode 
  WORKDIR /workspace

From there I just run the Podman image from the command line (using a Fish function) that mounts the specific project I'm working on to /workspace. I guess there might be some vulnerabilities with shared kernels and such, but it seems like an easy way to have some isolation.

einhard

2 miesiące temudiscuss

This was an interesting read. I am somewhat reminded of J. S. G. Boggs (https://en.wikipedia.org/wiki/J._S._G._Boggs), who used to hand draw banknotes and bills as a performance art of sort.

There is an excellent book about him by Lawrence Weschler called _Boggs: A Comedy of Values_.

einhard

3 miesiące temudiscuss

I recently rebuilt my homelab after moving countries, and in the process updated Proxmox to v9.1.6. Been playing with centralizing my databases into their own LXCs rather than creating an individual one for each application.

When I started doing this, I also decided to try Proxmox's new OCI compatibility, which seems to be working well so far, so I am removing all my Docker VMs and recreating the containers directly on my hypervisor.

einhard

9 miesięcy temudiscuss

    Location: Zagreb, Croatia.
    Remote: Yes, also open to in-person/hybrid
    Willing to relocate: No
    Technologies: Python (Django, Flask, pandas, etc.), Java, SQL, Git, Linux, Docker
    Résumé/CV: https://rxresu.me/captivate1988/resume-cmplete-public
    Github: https://github.com/adnanvaldes
    Email: [email protected]
    Notes: I have the right to work in the EU, Canada, Mexico, or India (by way of citizenships, work permits, etc).

---

I recently moved to Croatia with my wife. In the past 6 months I have been studying for the CompTIA Linux+ exam (planning on doing it at the end of next month), wrote a posterizer using the SLIC algorithm, and developed a database design for a Nepali NGO focused on children's learning through play.

I am a generalist who likes to deep dive into a topic and learn all the ins and outs. I worked for 10 years as an airline pilot - I have flown C172s, Saab 340s, and I am current on the Boeing 737 NG/MAX - while working on the side as a system administrator and doing volunteer software dev work.

Submissions

Rickshaw Run

comments