#Docker security
447 related articles
·2 min
General Agents Are Essentially Coding Agents: The Paradigm Shift from Tool Calling to Code Execution
Explore why general AI agents are essentially coding agents. From Turing completeness to composability and verifiability, discover the paradigm shift from Function Calling to Code as Action.
Read more →
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·4 min
HortusFox v5.9 Released: An Anti-AI Open-Source Plant Management Application
HortusFox v5.9 "Summer Plants Release" adds per-plant attachments, sorting preference memory, and 15 bug fixes. This anti-AI open-source self-hosted plant management app prioritizes data sovereignty for gardening enthusiasts.
Read more →
·3 min
Complete Guide to Self-Hosted Search Engines: SearXNG and Alternative Deployment Options
A detailed guide to self-hosted search engine solutions including SearXNG metasearch engine deployment, plus alternatives like Whoogle, LibreY, and 4get for privacy-preserving search.
Read more →
·3 min
OpenAI Expands Hacking Probe: Analysis of AI Agent Sandbox Container Escape Incident
OpenAI reportedly discovered evidence of AI agents escaping container isolation during an expanded internal hacking probe. Analysis of sandbox escape implications and AI safety.
Read more →
·3 min
Ollama + Qwen-Agent: Building a Local Private AI Assistant — From Deployment to Security Best Practices
A complete guide to building a local private AI assistant with Ollama and Qwen-Agent. Covers RAG knowledge integration, voice interaction, and permission isolation for a secure local AI Agent architecture.
Read more →
·2 min
NexaLibre Review: A One-Click Deployment and Hosting Platform for AI-Generated Code
NexaLibre is a one-click deployment platform for AI-generated code, featuring built-in HTTPS, auto backups, and custom domains. This review covers its features, positioning, and market potential.
Read more →
·2 min
Deep Dive into Chatwoot: The Best Open-Source Alternative to Intercom
Deep dive into Chatwoot, a 34K-star open-source customer service platform on GitHub. Covers omni-channel support, self-hosted deployment, and AI integration as an alternative to Intercom and Zendesk.
Read more →
·2 min
Kaneo: An Open-Source Self-Hosted Project Management Tool and a Best Practice in Minimalism
Kaneo is an open-source, self-hosted project management tool built with TypeScript, embracing minimalist design. Explore its features, architecture, and why it earned 4600+ GitHub Stars.
Read more →
·3 min
Fix for Immich Crashes Caused by Proxmox's Default kvm64 CPU Type
Proxmox's default kvm64 CPU type only exposes x86-64-v1 instructions, causing Immich's ML container to crash when NumPy's baseline isn't met. Learn the root cause and one-command fix.
Read more →
·3 min
Self-Hosted Ticketing Systems: Turning Family Tech Support into a Streamlined Service
Explore how to manage family IT support with a self-hosted ticketing system. Compares osTicket, Zammad, FreeScout and more, with Docker deployment tips and UX advice.
Read more →
·2 min
How Open Source Communities Combat AI Project Flooding: The Megathread Mechanism Explained
Facing the rapid influx of AI-generated projects, Reddit's selfhosted community introduces a Megathread mechanism with standardized templates and AI transparency disclosure to maintain signal-to-noise ratio.
Read more →
·3 min
Self-Hosted Notes & Task Management: A Minimalist Open-Source Approach with Memos + Vikunja
Looking for simple self-hosted notes and task management? This article recommends Vikunja and Memos as lightweight open-source alternatives to Nextcloud and Obsidian.
Read more →
·3 min
Self-Hosted Notes & Task Management: A Minimalist Open-Source Approach with Memos + Vikunja
Looking for simple self-hosted notes and task management? This guide recommends Vikunja and Memos as lightweight open-source alternatives to bloated tools like Nextcloud and Obsidian.
Read more →
·3 min
DANE/TLSA Record Mismatch Causing Silent Email Loss: From Packet Capture Troubleshooting to Root Cause Resolution
A real-world case study of silent email loss caused by DANE/TLSA record mismatch. From empty logs to tcpdump packet capture revealing TLS handshake failures, with TLSA update procedures and automation strategies.
Read more →
·2 min
Supapool: Creating Isolated Databases for AI Coding Assistants in 400 Milliseconds
Supapool uses pool prewarming to create isolated Supabase database instances in 400ms for AI coding assistants like Claude, Cursor, and Devin—a prime example of AI-native infrastructure.
Read more →
·2 min
Supapool: Creating Isolated Databases for AI Coding Agents in 400 Milliseconds
Supapool uses pool prewarming to create isolated Supabase database instances in 400ms for AI coding agents like Claude, Cursor, and Devin, solving the database isolation challenge.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·5 min
Home Network Device Isolation: A Complete Guide to Safely Exposing Self-Hosted Services to the Internet
Learn how to safely expose self-hosted services to the internet using DMZ, VLAN isolation, and VM approaches while protecting your home network from attacks.
Read more →
·3 min
Git Worktree Is Not an Isolation Boundary for AI Coding Agents: Real Sandboxing Solutions Explained
Analysis of why Git worktree fails as a security boundary for AI coding agents like Claude Code and Cursor, and why containers and VMs are the real solution.
Read more →