3 ms·
You really shouldn’t be running agents outside of a container. That’s 101.
by lvl155 8mo ago
You really shouldn’t be running agents outside of a container. That’s 101.
- embedding-shape 8mo agoBit more general; don't run agents without some sort of restriction to what they can do provided by the OS in some way. Containers is one way, VMs another, most cases it's enough with just a chroot and using the unix permission system the rest of your system already uses.
- andai 8mo agoWhat happens if I do? What's the difference between resetting a container or resetting a VPS? On local machine I have it under its own user, so I can access its files but it cannot access mine. But I'm not a security expert, so I'd love to hear if that's actually solid. On my $3 VPS, it has root, because that's the whole point (it's my sysadmin). If it blows it up, I wanna say "I'm down $3", but it doesn't even seem to be that since I can just restore it from an backup.
- clawsyndicate 8mo ago[dead]