Tag
This article debunks the misconception that AWS Fargate uses Firecracker microVMs for container isolation, clarifying that it does not despite marketing implications, and discusses operational trade-offs for users.
A blog post describing a lightweight sandboxing approach on Linux using Bubblewrap, where a script named 'box' shares the host filesystem read-only and the current directory read-write, allowing host binaries to run in isolation without a separate distro.
A discussion of AI coding agents needing runtime awareness beyond source code, such as inspecting containers, ports, and services, and considering how much control agents should have over development environments.
Explains why X11 authentication cookies fail across hosts/containers due to hostname keying, and shows a one-line sed trick to rewrite the cookie family to FamilyWild (0xffff) so it matches any hostname.
The CNCF and Linux Foundation Research have opened this year's annual survey on cloud native adoption, covering containers, Kubernetes, and challenges users face. Respondents receive a 35% discount on a Linux Foundation Education course.
A blog post discusses best practices for securing services by running containers without root privileges, reducing security risks.
Mozilla announces the native integration of Containers into Firefox 153, allowing users to isolate browsing contexts for work, personal, and shopping without relying on an extension.
A tutorial explaining how to run Docker containers in the background, access logs, and re-attach to containers, with practical exercises.
A developer discusses the tradeoffs of using agent sandboxes like E2B and Daytona for running code execution, asking the community about lifespan, state persistence, network isolation, and managed vs self-hosted solutions.
Iximiuz Labs offers free premium access to learning materials for those affected by layoffs or job hunting, in exchange for active community participation and honest feedback.
Learn how to use bash's built-in /dev/tcp feature to make HTTP requests from containers without curl or wget, useful for lightweight debugging in restricted environments.
Apple has open-sourced 'container', a tool for running Linux containers as lightweight VMs on Apple silicon Macs, supporting OCI images and optimized for macOS 26.
HomeLab Monitor is a self-hosted, single Docker container that aggregates GPU stats, container memory, disk usage, and service health across multiple machines via SSH, without requiring Prometheus/Grafana or agents.
David Crawshaw, ex-CTO of Tailscale, discusses why virtual machines are a better abstraction than containers for AI agents, and shares insights on building a new cloud provider called exe.
The article explains why average CPU utilization is a misleading metric for latency-sensitive workloads, using queueing theory and a real-world production incident. It argues for more nuanced monitoring approaches.
The author argues that building agent infrastructure requires both the speed of containers and the safety of VMs, highlighting AWS Firecracker as a solution that combines both.
The article discusses the Copy Fail exploit, a security vulnerability that affects Podman rootless containers.
OpenAI released a major update to the Agents SDK, introducing a Codex-style runtime framework, separation of sandbox and runtime, memory, skills, and other features. It also launched managed Shell tools, container endpoints, a skills API, and a TypeScript version, aiming to simplify building and deploying production-grade agents.