» Tag
containers
24 postsRootless Edge Deployments: Daemonless CI/CD with Podman and Buildah
Mounting a root Docker socket in CI/CD pipelines with hardware access is a major risk. Podman and Buildah's rootless, daemonless design mitigates it.
Clipper Speeds Docker Builds 7x With Lazy Layer Pulling
Clipper, a custom BuildKit driver, exports cache mounts that ephemeral CI runners discard and skips unused runtime files, cutting Docker build times up to 7x.
The physics of Docker build caching: three caches, one wave
A measured breakdown of Docker's three build caches — layer chain, mount cache, image store — and when each caching strategy actually helps.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comCode on Incus gives every AI coding agent its own isolated machine
Code on Incus isolates AI coding agents in secure system containers with real-time threat detection, protecting host machines from credential leaks and attacks.
MCP vs CLI: What Actually Survived in Production
A retrospective on MCP vs CLI for AI agents: token costs, lifecycle independence, containers, and a decision tree built from production failures.
Fender: a Docker socket proxy that removes Docker Hub lock-in
Fender sits between the Docker CLI and daemon, transparently rewriting image references to your chosen registries—no Dockerfile or CI script changes required.
How to Self-Host a Validated AI Coding Assistant with NVIDIA NeMo Guardrails
Self-host your AI coding assistant with NVIDIA NeMo Guardrails. Establish a system that prevents errors and ensures traceability.
New Software Development Tool for Safe Local AI Usage
The sde tool offers a secure, isolated workspace for AI-assisted development on macOS.
OpenShell Kubernetes Operator for Managing Sandboxes
The OpenShell Kubernetes Operator enables sandbox management via kubectl. A significant tool for developers.
Google's Agent Substrate Project: A New Control Plane for AI Agents
Google introduces GKE Agent Sandbox and Agent Substrate for AI agents, addressing Kubernetes limitations. A new control plane emerges.