Top
Best
New

Posted by luispa 1 day ago

Devvm.dev: One VM for every project(devvm.dev)
179 points | 72 commentspage 3
bill10 15 hours ago|
If you use cloud, then it is already a VM. If you are local, why not just buy a cheap box....
ksajadi 14 hours ago||
how is this different from anthropic srt?
aniceperson 1 day ago||
thanks but i will just use systemd with linux namespaces.
yjftsjthsd-h 1 day ago|
That's a layer of protection, but it still exposes your real Linux kernel to the sandbox, and that's more CVEs than I'd consider ideal.
bigbuppo 20 hours ago||
That's why I keep the hardware separate and a loaded shotgun in the corner. You can never be too careful.
JodieBenitez 13 hours ago||
Don't waste your buckshot when a power strip switch will do !
bigbuppo 1 hour ago||
I'm used to old AS/400 machines with the intergrated UPS.
gigel82 20 hours ago||
I'm looking for a solution that lets me experiment with random projects in isolated environments (could be Docker containers or VMs), seamlessly, but I want to run VSCode on my actual machine, and whatever agent extensions.

I tried the remote SSH thing and it's painful to setup. Did anyone find a better solution than scripting a "create Docker container, bind the gpu, bindmount an external directory for data, install code server, etc."?

christophilus 16 hours ago|
If you learn to use neovim or helix, you can just run those in your container. That’s what I do along with agent CLIs, and it’s great.
rvz 1 day ago||
There are yet thousands of these so-called "sandbox" projects that exists. This one sounds rather really wasteful on resources?

Bubblewrap would just be a better alternative for this.

jFriedensreich 1 day ago||
bubblewrap is linux only and offers a fraction of isolation of a microvm
aniceperson 1 day ago|||
right chain of tought, but systemd is the only to truly leverage linux namespaces capabilities, allowing private networks, other rootfs, etc
yjftsjthsd-h 1 day ago||
systemd is not the only thing using linux namespaces. For example, the suggested bubblewrap uses namespaces to allow isolated networks (--unshare-net) and changing rootfs (--bind /mnt/foo /)
kakugawa 1 day ago||
bwrap has a lot of sharp edges that can bite you, if you're not aware of them.
guhcostan 1 day ago||
[flagged]
makemefundyou20 1 day ago|
[dead]