HackerTrans
TopNewTrendsCommentsPastAskShowJobs

pploug

no profile record

Submissions

SBX: MicroVM Sandboxes for Agents

docker.com
5 points·by pploug·3 ay önce·1 comments

We Reverse-Engineered Docker Sandbox's Undocumented MicroVM API

rivet.dev
1 points·by pploug·5 ay önce·0 comments

Docker AI agent sandboxes with HyperVisor isolation

docker.com
5 points·by pploug·5 ay önce·2 comments

Study: Managers with first-born daughters, hire more women and pay more equal [pdf]

csef.it
14 points·by pploug·6 ay önce·4 comments

Docker open sources hardened images catalog, free for all to use

thenewstack.io
12 points·by pploug·7 ay önce·0 comments

[untitled]

1 points·by pploug·8 ay önce·0 comments

Debugging containers that have no shell

docs.docker.com
31 points·by pploug·8 ay önce·7 comments

The Paranoid Guide to Running Copilot CLI in a Secure Docker Sandbox

gordonbeeming.com
59 points·by pploug·8 ay önce·14 comments

Docker model runner adds Vulkan GPU support

docker.com
1 points·by pploug·9 ay önce·0 comments

comments

pploug
·24 gün önce·discuss
Always assumed the SoMe sharing buttons was primarily motivated by the social sites to get their pixel on as many sites as possible to track behavior across sites
pploug
·geçen ay·discuss
Company sells product for profit - they are liable for the product and all its subcomponents - there is nothing unfair about this - it doesn't matter if you found the components in a hole in the ground or on github - if you are selling a product based off it, you are liable.

For freelancers / oss companies - you can still sell services such as consulting or support - without selling your oss project - then its a service - not a product.
pploug
·geçen ay·discuss
Uh, this looks very nice - reminds me of a TUI version of Canopy, if you are interested, We've (docker) been working on a separate agent sandbox runtime called SBX built around a MicroVM with a private docker daemon inside, maybe there's potential for a collaboration to add support for this runtime - feel free to ping me: per(dot)krogslund(at)docker .com
pploug
·2 ay önce·discuss
This article is from February - we have since shipped the microvm sandbox engine as a seperate binary: sbx - no docker desktop required, small 50mb binary.

https://docs.docker.com/ai/sandboxes/

Not sure how well their work maps to sbx, but there has been multiple releases with features and improvements since then
pploug
·3 ay önce·discuss
MicroVM based sandboxes for agents, with container support, in a small independent binary installable from brew/winget
pploug
·4 ay önce·discuss
Docker sandboxes uses a MicroVM as an additional isolation layer - its not just containers (as also mentioned in the nanoclaw post)
pploug
·5 ay önce·discuss
Outlining this as precision versus using 100s of thousands on chainguard, seems like 2 extremes pitted against eachother, when hardened images is largely free now: https://hub.docker.com/hardened-images/catalog
pploug
·5 ay önce·discuss
- Each agent runs in a dedicated microVM - agents can build and run Docker containers inside the MicroVM - no access to the host Docker daemon - network isolation with allow and deny lists - available for macOs and windows (linux support coming)
pploug
·6 ay önce·discuss
https://docs.docker.com/ai/sandboxes/
pploug
·6 ay önce·discuss
purely curious, but why did you go with ollama instead of the built in LLM runner in docker, since you are also using docker?
pploug
·6 ay önce·discuss
Remember interviewing for a security role at Phillip Morris who owns the IQOS e-cigaret brand. They bragged about how the device phoned home every time it could get a bluetooth or wifi connection, to inform of consumption amount and patterns - so they could proactively send users more nicotine.

He dramatically revealed that they were no longer selling tobacco, but rather "Nicotine as a service"

Needless to say, I decided not to work for a merchant of death
pploug
·6 ay önce·discuss
"We find that women’s relative earnings and employment increase by 4.4% and 2.9% respectively following the birth of the manager’s first daughter. These effects are driven by an increase in managers’ propensity to replace male workers by hiring women with comparable education, hours worked, and earnings."
pploug
·7 ay önce·discuss
For oss projects with heavy pulls, the (free) dsos programme removes all rate limits on their public images, the intention was never to impact projects, but rather mega corporations using hub as free hosting:

https://www.docker.com/community/open-source/application/
pploug
·7 ay önce·discuss
Projects are not charged for hub usage
pploug
·7 ay önce·discuss
Thanks for reporting, team is fixing it, the right url is: https://github.com/docker-hardened-images/catalog/issues/
pploug
·7 ay önce·discuss
0 results for "ketamin" I think this is broken
pploug
·7 ay önce·discuss
Exactly for this problem, the docker sandbox command was added to the cli - currently only experimental though:

https://docs.docker.com/ai/sandboxes/
pploug
·8 ay önce·discuss
> the prevailing trends in locker-room design is privacy, a way to make “a diverse user base” feel comfortable.

One thing that annoys me about this article is the subtle stab at woke / gender identity as a reason for this change. Both Germany and Sweden has a much higher percentage of transgender people compared to the US, and neither have these kinds of locker rooms.

Living in Germany where all-gender nude changing rooms, nude all-gender saunas and nude beaches are very normal and very much not sexualised, it is striking how different the underlying culture is here - Germans find nudity practical and sanitary, and at the same time they very much insist that you wear special bathing shoes.
pploug
·8 ay önce·discuss
Docker Debug was previously a paid-for feature, now available for free since v4.49
pploug
·9 ay önce·discuss
I agree on principle, while at the same time I'm fairly sure the common employees at these respective companies are probably thankful that their job security is not impacted by their employer taking a (very small) stand.