einhard

16 saat öncediscuss

I restrict networking via my pfSense router, using VLANs. I also don't include any credentials in the container; the agents there can't push, pull, or really access anything else beyond the standard tools without any authentication.

I don't use Claude or any other paid agent at the moment, so if that were to change I'd probably modify the way I run this, but with this simple set up I'm not too worried about credentials leaking.

einhard

20 saat öncediscuss

Ah, that makes sense. I've only recently started playing with this stuff, and I've been focusing a lot of just getting somewhat good at using LLMs for projects while developing my own intuition, so everything I do just uses the mounted project and uv directly. As soon as things get more complex, I imagine I'll end up with a full wrapper as well.

Unrelated: I enjoyed your latest blog entry. I recently starting thinking about how to show the work that is done with AI, and how we talk about it. I haven't come to any major conclusions (I wish!), but your post about the prompting being distinct from the actual work resonates with me. Reminds me somewhat of discussions about the art of photography compared to the art of editing photos as a distinct skill.

einhard

21 saat öncediscuss

I am certainly no expert in this space so it is quite possible I'm missing something critical, but what seems to work for me is a Podman image I built on my computer with some basic things I need (using OpenCode, but I imagine any other agent could be used instead):

  FROM docker.io/archlinux:base
  RUN pacman -Syu --noconfirm && \
      pacman -S --noconfirm \
      base-devel \
      git \
      curl \
      uv \
      opencode && \
      pacman -Scc --noconfirm
  RUN mkdir -p /etc/opencode 
  WORKDIR /workspace

From there I just run the Podman image from the command line (using a Fish function) that mounts the specific project I'm working on to /workspace. I guess there might be some vulnerabilities with shared kernels and such, but it seems like an easy way to have some isolation.

einhard

2 ay öncediscuss

This was an interesting read. I am somewhat reminded of J. S. G. Boggs (https://en.wikipedia.org/wiki/J._S._G._Boggs), who used to hand draw banknotes and bills as a performance art of sort.

There is an excellent book about him by Lawrence Weschler called _Boggs: A Comedy of Values_.

einhard

3 ay öncediscuss

I recently rebuilt my homelab after moving countries, and in the process updated Proxmox to v9.1.6. Been playing with centralizing my databases into their own LXCs rather than creating an individual one for each application.

When I started doing this, I also decided to try Proxmox's new OCI compatibility, which seems to be working well so far, so I am removing all my Docker VMs and recreating the containers directly on my hypervisor.

einhard

10 ay öncediscuss

    Location: Zagreb, Croatia.
    Remote: Yes, also open to in-person/hybrid
    Willing to relocate: No
    Technologies: Python (Django, Flask, pandas, etc.), Java, SQL, Git, Linux, Docker
    Résumé/CV: https://rxresu.me/captivate1988/resume-cmplete-public
    Github: https://github.com/adnanvaldes
    Email: [email protected]
    Notes: I have the right to work in the EU, Canada, Mexico, or India (by way of citizenships, work permits, etc).

---

I recently moved to Croatia with my wife. In the past 6 months I have been studying for the CompTIA Linux+ exam (planning on doing it at the end of next month), wrote a posterizer using the SLIC algorithm, and developed a database design for a Nepali NGO focused on children's learning through play.

I am a generalist who likes to deep dive into a topic and learn all the ins and outs. I worked for 10 years as an airline pilot - I have flown C172s, Saab 340s, and I am current on the Boeing 737 NG/MAX - while working on the side as a system administrator and doing volunteer software dev work.

einhard

geçen yıldiscuss

They are referring to Peter the Apostle, who was the first bishop of Rome [0]

[0] https://en.m.wikipedia.org/wiki/Saint_Peter

einhard

geçen yıldiscuss

It makes sense, I don't suppose Discord is particularly interested in being a file-sharing site.

See the comment above about hosting the file in a more permanent way.

einhard

geçen yıldiscuss

Hey, thank you so much. I shared the Discord file because I was sharing it with some friends, and then thought HN might be interested, but I don't have a more convenient place to serve the file at the moment. Thank you for hosting it.

Good point about exporting to Opus! I used .mp3 because the original audio files were also in .mp3. I've re-exported the file in Opus now, let me know what would be the best way to send it to you.

As for file name and credits, I think it's probably best to credit LiveATC (https://www.liveatc.net/), since that's where I got the original audio and I didn't really do much else beyond separating the channels. The specific files I used are the YYZ Ground and YYZ Tower recordings from February 17th that start at 1900z.

einhard

geçen yıldiscuss

I stitched together a small audio clip from LiveATC with both the Ground and Tower frequencies mapped to the Left and Right audio channels. It starts around the time the aircraft was cleared to land, and then skips forward to the moment the controllers realized the aircraft crashed.

Here is a link to the .mp3 file (it's on Discord for now - I don't know if this is allowed, let me know if it isn't):

https://cdn.discordapp.com/attachments/668315121772134401/13...

Submissions

Rickshaw Run

City of Zagreb 3D Model Data

Delta Airlines 4819 TSB Preliminary Report (Toronto Crash) [pdf]

comments