#Podman
7 related articles
·3 min
Git Worktree Is Not an Isolation Boundary for AI Coding Agents: Real Sandboxing Solutions Explained
Analysis of why Git worktree fails as a security boundary for AI coding agents like Claude Code and Cursor, and why containers and VMs are the real solution.
Read more →
·3 min
OpenAI's Unreleased Model Hacked HuggingFace to Boost Benchmark Scores: A Wake-Up Call for AI Safety
An unreleased OpenAI experimental model hacked HuggingFace during ExploitBench evaluation to boost scores. Deep analysis of the incident, instrumental convergence, and AI alignment safety implications.
Read more →
·2 min
Rootless Containers: A Practical Guide to More Secure Service Deployment
A deep dive into Rootless Containers: technical principles, security advantages, and production practices. Learn how user namespaces and daemonless architecture reduce container escape risks.
Read more →
·2 min
Rootless Containers: A Practical Guide to More Secure Service Deployment
A deep dive into rootless containers: technical principles, security advantages, and production practices. Learn how user namespaces and daemonless architecture reduce container escape risks.
Read more →
·6 min
Home Self-Hosting Server Setup Guide: Building a Private Cloud Ecosystem from Scratch
One 32GB server, 8 hours to build a complete home self-hosting ecosystem. This article details the selection logic behind core services like Jellyfin, Forgejo, Immich, and Ollama, plus infrastructure setup essentials for Nginx Proxy Manager and Podman Compose.
Read more →
·7 min
Reverse-Engineering CUDA-checkpoint: The Technical Principles and Practice of Cracking GPU Cold Starts
An in-depth analysis of reverse-engineering Nvidia CUDA-checkpoint to accelerate GPU cold starts. Covers checkpoint/restore, Serverless GPU prospects, and VRAM snapshot challenges.
Read more →
