3 ms·

I once opened Zed, howdy there was an agent window on the side, I log into Claude. I asked it to list what it could see and work with... And there my (priv) ssh

by teekert 1mo ago

I once opened Zed, howdy there was an agent window on the side, I log into Claude. I asked it to list what it could see and work with... And there my (priv) ssh keys come scrolling by. I don't know what I was expecting really, it's very logical, but also very in your face. They didn't leave my computer I guess, I just showed me the output of some `ls` commands. But still. So now I have CC in a container, mounting it's own credentials/memory folder per project and only mounting one repo at a time (script in the repo itself). I feel a bit better about it now. It can still access my networks of course.

petesergeant 1mo ago
If you ever want a few more features on top of "CC in a container", then do consider byre. It's literally that, but also a nice TUI for adding extra folders, reusable skills, encrypted credentials, etc, and you can eject back to plain Docker (or Podman) whenever you want. Useful if you want to just be able to go to any folder and spin it up with your toolbox with one command: https://github.com/pjlsergeant/byre https://github.com/pjlsergeant/byre
Phemist 1mo ago
> They didn't leave my computer I guess, I just showed me the output of some `ls` commands Not sure exactly how Zed works, but wouldn't the results of the `ls` tool call be fed back into claude?
- teekert 1mo ago
  Not sure. It didn’t do “cat” so I guess that the file itself did’t leave the computer? Uploading all files in my ~/ would have taken noticible time and didn’t happen I think.
ShinyLeftPad 1mo ago
I heard containers aren't very secure and VM is better?
- MrDrMcCoy 1mo ago
  Docker containers aren't very secure because the daemon runs as root by default. Rootless container runtimes are plenty secure, especially if the user that runs the container is unprivileged. Easiest thing in the world with Podman.
  - ShinyLeftPad 1mo ago
    Would you run Podman from your own user or another specially created user?
    - MrDrMcCoy 1mo ago
      I would have them run as a user that does not have sudo. The easiest way to do this is by using system-level Podman Quadlets that run as an unprivileged user account. That user will need a real home directory for images and volumes.

by teekert 1mo ago

petesergeant 1mo ago

If you ever want a few more features on top of "CC in a container", then do consider byre. It's literally that, but also a nice TUI for adding extra folders, reusable skills, encrypted credentials, etc, and you can eject back to plain Docker (or Podman) whenever you want. Useful if you want to just be able to go to any folder and spin it up with your toolbox with one command: https://github.com/pjlsergeant/byre https://github.com/pjlsergeant/byre

Phemist 1mo ago

> They didn't leave my computer I guess, I just showed me the output of some `ls` commands Not sure exactly how Zed works, but wouldn't the results of the `ls` tool call be fed back into claude?

teekert 1mo ago
Not sure. It didn’t do “cat” so I guess that the file itself did’t leave the computer? Uploading all files in my ~/ would have taken noticible time and didn’t happen I think.

ShinyLeftPad 1mo ago

I heard containers aren't very secure and VM is better?

MrDrMcCoy 1mo ago
Docker containers aren't very secure because the daemon runs as root by default. Rootless container runtimes are plenty secure, especially if the user that runs the container is unprivileged. Easiest thing in the world with Podman.
- ShinyLeftPad 1mo ago
  Would you run Podman from your own user or another specially created user?
  - MrDrMcCoy 1mo ago
    I would have them run as a user that does not have sudo. The easiest way to do this is by using system-level Podman Quadlets that run as an unprivileged user account. That user will need a real home directory for images and volumes.