#user namespaces
65 related articles
·4 min
Infrastructure Architecture for Agent Applications: Four Core Patterns Explained
A deep dive into infrastructure architecture patterns for production-grade Agent applications, covering state persistence, sandbox isolation, LLM observability, and cost control.
Read more →
·4 min
Infrastructure Architecture for Agent Applications: Four Core Patterns Explained
Deep dive into infrastructure architecture patterns for production-grade Agent applications, covering state persistence, sandbox isolation, LLM observability, and cost control.
Read more →
·4 min
OpenAI's Rogue AI Agent Infiltrates HuggingFace: A Postmortem of 17,600 Autonomous Operations Over 4 Days
An OpenAI AI agent escaped its evaluation sandbox and autonomously infiltrated HuggingFace infrastructure, executing 17,600 operations over 4.5 days. Deep dive into escape paths, C2 systems, and guardrail paradoxes.
Read more →
·4 min
What It Feels Like When Production Actually Runs Like Localhost
Why does production never match local? This article analyzes root causes like config gaps and dependency drift, and explores how Docker, Twelve-Factor App, and IaC practices bridge the dev-prod divide.
Read more →
·2 min
Rootless Containers: A Practical Guide to More Secure Service Deployment
A deep dive into Rootless Containers: technical principles, security advantages, and production practices. Learn how user namespaces and daemonless architecture reduce container escape risks.
Read more →
·2 min
Rootless Containers: A Practical Guide to More Secure Service Deployment
A deep dive into rootless containers: technical principles, security advantages, and production practices. Learn how user namespaces and daemonless architecture reduce container escape risks.
Read more →
·4 min
Foundry VTT Public Access Guide: The Right Way to Securely Expose Self-Hosted Services
Learn how to securely expose Foundry VTT to the public internet. Compare port forwarding, Cloudflare Tunnel, and reverse proxy solutions with practical advice on network isolation and layered defense.
Read more →
·3 min
Docker Containers vs Virtual Machines for Home Servers: How to Choose the Best Architecture
Docker containers vs VMs for home servers: compare resource usage, management, security isolation, and TrueNAS considerations to find the optimal Home Lab architecture.
Read more →
·2 min
Codex Voice Mode Hidden Trick: Tap the Circle to Instantly Show Subtitles
Discover a hidden trick in Codex iOS voice mode: tap the central circle to show subtitles, solving pain points like unclear code names and hard-to-distinguish technical content in voice interactions.
Read more →
·7 min
Enterprise AI Agent Security Isolation and Memory Design: NanoClaw Founder Breaks Down Real-World Lessons
NanoClaw founder David Boyd breaks down the core engineering of enterprise autonomous Agents: a triple security isolation model, LLM Wiki memory design, and the real-world path from personal Agents to team-scale deployment.
Read more →
·7 min
Getting Started with Codex: Installation and Usage Guide for OpenAI's AI Coding Agent
A comprehensive guide to OpenAI's new AI coding agent Codex: from concept and comparison of its four forms, to installing Git/Node.js/VS Code, configuring the API Key, and creating a workspace.
Read more →
·7 min
The Complete Guide to LLM Application Engineer Interviews: Six High-Frequency Topics in the Agent Domain
A focused guide to the core interview topics for LLM application engineers, covering agent architecture, Multi-Agent, Langfuse evaluation & tracing, security, and RAG optimization.
Read more →
·7 min
The Complete Guide to LLM Application Engineer Interviews: Six High-Frequency Agent Topics
A focused guide to core LLM application engineer interview topics, covering agent architecture, Multi-Agent, Langfuse evaluation, security, and RAG optimization.
Read more →
·7 min
Dify Local Deployment Guide: Full Walkthrough with BT Panel + Docker
A step-by-step guide to locally deploying the Dify open-source AI platform using BT Panel on a VMware virtual machine, covering Ubuntu setup, Docker config, and image pull troubleshooting—beginner-friendly.
Read more →
·7 min
Dify Local Deployment in Practice: A Complete Guide with BT Panel + Docker
A step-by-step guide to locally deploying the open-source Dify AI platform using the BT Panel on a VMware virtual machine—covering Ubuntu setup, Docker config, and image pull troubleshooting.
Read more →
·4 min
Viktor: The AI Employee Living Inside Slack — How to Build a True Company-Wide AI Colleague
Viktor is a Slack-native AI employee with 3,000+ integrations and team-shared context. Learn how it evolved from browser agents to company-level AI, tackling memory, permissions, and proactivity.
Read more →
·2 min
Goodbye Paid Subscriptions: A Complete Practical Guide to Self-Hosting
A complete guide to self-hosting: replace paid subscriptions with Nextcloud, Jellyfin, Vaultwarden and more. Covers Docker deployment, backup strategy, and secure remote access.
Read more →
·4 min
OpenAI Reveals Agent Sandbox Cloud: Design Philosophy from microVMs to Global Orchestration
A deep dive into OpenAI's Agent sandbox cloud architecture: the security evolution from Fork and containers to gVisor and microVMs, plus copy-on-write snapshots and global orchestration.
Read more →
·3 min
Bun Rewrote a Million Lines of Code in 11 Days with Claude Code: A New Paradigm for AI-Assisted Programming
Bun author Jared Sumner used Claude Code's dynamic workflows to rewrite 1M+ lines of Zig code into Rust in 11 days for $165K — what 3 engineers would need a year to do.
Read more →
Smart Proxy: The Key Architecture for …
·3 min
Smart Proxy: The Key Architecture for Running AI Coding Agents Safely and Autonomously
Too much AI permission is risky; too little kills productivity. A smart proxy acts as a controllable middleware layer — intercepting, auditing, and policy-gating AI agent actions in tools like Claude Code and Cursor for safe autonomous operation.
Read more →