Tag Archive
containers
4 posts found
Sandboxing Autonomous AI Coding Agents: Ephemeral Containers and Egress Boundary Enforcement
Infrastructure security engineer Alex Chen discusses container sandboxing, system call filtering with seccomp and Landlock, and network egress boundaries for au…
You’re Debugging DNS in the Wrong Namespace
Network namespaces isolate DNS resolvers from the host. A practical guide to finding which namespace your process lives in, dropping into it, and tracing the ac…
Why Read-Only Containers Do Not Stop Binary Execution
A read-only root filesystem prevents disk writes, but Linux kernels still permit staging and executing in-memory ELF binaries via memfd_create and unhardened tm…
Lazydocker vs Dockge: TUI vs Web Dashboard for Docker Compose Management
A comparative analysis of Lazydocker and Dockge for managing Docker Compose stacks, focusing on security boundaries, resource usage, and workflow efficiency.