pploug

13 ms·

1.
by pploug 2mo ago
Sandboxes are free, distributed outside of Docker Desktop, no license fee required - money is made on enterprise governance and cloud offerings. You can call containers a commodity, or an industry standard? Feels like that is more an emotio
2.
by pploug 2mo ago
2 different platforms, 2 separate sources of truths for policies, 2 different level of compatibility (apple containers don't support compose, MS uses a custom moby implementation, neither are particular mature), none has linux compatib
3.
MicroVM sandbox on Win, Mac, Linux, with policy engine(docs.docker.com)
12 points by pploug 2mo ago|7 comments
4.
by pploug 3mo ago
Always assumed the SoMe sharing buttons was primarily motivated by the social sites to get their pixel on as many sites as possible to track behavior across sites
5.
by pploug 3mo ago
Company sells product for profit - they are liable for the product and all its subcomponents - there is nothing unfair about this - it doesn't matter if you found the components in a hole in the ground or on github - if you are selling
6.
by pploug 4mo ago
Uh, this looks very nice - reminds me of a TUI version of Canopy, if you are interested, We've (docker) been working on a separate agent sandbox runtime called SBX built around a MicroVM with a private docker daemon inside, maybe there
7.
by pploug 4mo ago
This article is from February - we have since shipped the microvm sandbox engine as a seperate binary: sbx - no docker desktop required, small 50mb binary. https://docs.docker.com/ai/sandboxes/ Not sure how well t
8.
by pploug 6mo ago
MicroVM based sandboxes for agents, with container support, in a small independent binary installable from brew/winget
9.
SBX: MicroVM Sandboxes for Agents(docker.com)
5 points by pploug 6mo ago|1 comments
10.
by pploug 6mo ago
Docker sandboxes uses a MicroVM as an additional isolation layer - its not just containers (as also mentioned in the nanoclaw post)
11.
by pploug 7mo ago
Outlining this as precision versus using 100s of thousands on chainguard, seems like 2 extremes pitted against eachother, when hardened images is largely free now: https://hub.docker.com/hardened-images/catalog
12.
We Reverse-Engineered Docker Sandbox's Undocumented MicroVM API(rivet.dev)
1 points by pploug 7mo ago|0 comments
13.
Docker AI agent sandboxes with HyperVisor isolation(docker.com)
5 points by pploug 8mo ago|2 comments
14.
by pploug 8mo ago
- Each agent runs in a dedicated microVM - agents can build and run Docker containers inside the MicroVM - no access to the host Docker daemon - network isolation with allow and deny lists - available for macOs and windows (linux support co
15.
by pploug 8mo ago
https://docs.docker.com/ai/sandboxes/
16.
by pploug 8mo ago
purely curious, but why did you go with ollama instead of the built in LLM runner in docker, since you are also using docker?
17.
by pploug 8mo ago
Remember interviewing for a security role at Phillip Morris who owns the IQOS e-cigaret brand. They bragged about how the device phoned home every time it could get a bluetooth or wifi connection, to inform of consumption amount and pattern
18.
Study: Managers with first-born daughters, hire more women and pay more equal [pdf](csef.it)
14 points by pploug 8mo ago|4 comments
19.
by pploug 8mo ago
"We find that women’s relative earnings and employment increase by 4.4% and 2.9% respectively following the birth of the manager’s first daughter. These effects are driven by an increase in managers’ propensity to replace male workers
20.
by pploug 9mo ago
For oss projects with heavy pulls, the (free) dsos programme removes all rate limits on their public images, the intention was never to impact projects, but rather mega corporations using hub as free hosting: https://www.docker.c
21.
by pploug 9mo ago
Projects are not charged for hub usage
22.
by pploug 9mo ago
Thanks for reporting, team is fixing it, the right url is: https://github.com/docker-hardened-images/catalog/issues/
23.
Docker open sources hardened images catalog, free for all to use(thenewstack.io)
12 points by pploug 9mo ago|0 comments
24.
by pploug 9mo ago
0 results for "ketamin" I think this is broken
25.
by pploug 9mo ago
Exactly for this problem, the docker sandbox command was added to the cli - currently only experimental though: https://docs.docker.com/ai/sandboxes/
26.
by pploug 10mo ago
> the prevailing trends in locker-room design is privacy, a way to make “a diverse user base” feel comfortable. One thing that annoys me about this article is the subtle stab at woke / gender identity as a reason for this change. Bo
27.
Debugging containers that have no shell(docs.docker.com)
31 points by pploug 11mo ago|7 comments
28.
by pploug 11mo ago
Docker Debug was previously a paid-for feature, now available for free since v4.49
29.
The Paranoid Guide to Running Copilot CLI in a Secure Docker Sandbox(gordonbeeming.com)
59 points by pploug 11mo ago|14 comments
30.
by pploug 11mo ago
I agree on principle, while at the same time I'm fairly sure the common employees at these respective companies are probably thankful that their job security is not impacted by their employer taking a (very small) stand.

More ›