» Tag
docker
38 postsDocker Desktop Bypass Lets AI Coding Agents Escape Their Sandboxes
Docker Desktop lets AI coding agents bypass strict sandboxes in Codex, Cursor, and Gemini CLI via a privileged socket and VirtioFS mount.
Anatomy of a Full Self-Hosted RAG Stack, End to End
A self-hosted RAG pipeline in full: Docling parsing, dual dense/sparse indexing, RRF hybrid search, knowledge graphs, token budgeting, and parallel ingestion.
Clipper Speeds Docker Builds 7x With Lazy Layer Pulling
Clipper, a custom BuildKit driver, exports cache mounts that ephemeral CI runners discard and skips unused runtime files, cutting Docker build times up to 7x.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comOctomind Cloud Launches: Persistent Compute for AI Agents
Octomind Cloud beta unifies AI model access and persistent compute, with transparent per-second billing, Docker support, and 21 curated models.
AI Escape Room: Docker CTF Rebuilds the 2026 Hugging Face Breach
A Docker Compose CTF lab recreates the 2026 Hugging Face agent breach, covering SSRF, SSTI, HDF5 exfiltration, and Kubernetes pivoting for security training.
CVE-Bench: A Sandbox Benchmark for LLM Agents Fixing Real CVEs
CVE-Bench is an open-source benchmark testing LLM agents' ability to fix real Python CVEs inside sandboxed Docker containers.
The physics of Docker build caching: three caches, one wave
A measured breakdown of Docker's three build caches — layer chain, mount cache, image store — and when each caching strategy actually helps.
4 self-hosting failures that quietly report success
Four silent self-hosting failures — 200 OK pages, false healthchecks, empty backups, vanished WoL packets — and how to actually catch them.
AI Agents: Local Deployment, Label Workflows, Cloudflare Access
From Docker-based local AI agent systems to label-driven workflow orchestration and Cloudflare's temporary accounts, new patterns emerging in agent deployment.
Building a Basic AI Agent: Security II
Learn about using Docker sandbox and prompt-injection defenses to close security gaps in your AI agent.