Top all-time · #20220
M
Maximilian Güntner
Personal blog · sourcediver.org · on HN as sourcediversystemsprogrammingai
Maximilian Güntner's personal blog at sourcediver.org covers systems, programming and ai. Since 2014, 3 different Hacker News readers have linked it 5 times. It is still writing: the last post was on 2026-07-13, and you can follow it by feed.
5mentions?
3HN people?
2014–2026first – last linked?
blog of Maximilian Güntner
What Hacker News says?
You cannot execute (docker) containers securely within another container which also limits what you can do with any agent (DinD). A coding agent that generates a `Dockerfile` would surely benefit from starting a container with it. And generally speaking, as a another commenter explained, name-spacing does not give you the full host isolation that you are looking for when running truly untrusted code which is the rea…
Comment linking /posts/260214_development_sandboxes/
on “Running NanoClaw in a Docker Shell Sandbox”Submitted Distributing NixOS with IPFS as a story · 241 points
HN discussionSubmitted Attention is all they want – blocking content in websites with local LLMs as a story · 2 points
HN discussionSubmitted Using Runit in a Docker Container as a story · 2 points
HN discussionSubmitted Development Sandboxes: A Wishlist as a story · 1 points
HN discussion