Reading up on Docker
17 deep · digging since nov 26, 25
- Self-hosted dev sandboxes with preview URLs (Docker, Go, no K8s)
sandboxd is an open-source backend that creates isolated Linux containers with AI coding agents and live preview URLs, all self-hosted on one machine using Docker and Go.
- Development environments for your cloud agents
Cursor introduces new tools for configuring cloud agent development environments, including multi-repo support, Dockerfile-based configuration, and enhanced security controls.
- Ask HN: Who is using OpenClaw?
A Hacker News community discussion reveals that while many are skeptical of OpenClaw's hype, a minority report real productivity gains from automating tasks like note-to-flashcard workflows or office management via the tool.
- Ask HN: What Are You Working On? (March 2026)
Monthly Ask HN thread where developers share side projects, including a Rust iCloud downloader, a logic-puzzle site with 90 subscribers, and an A2A agent registry built on Docker.
- BuildKit: Docker's Hidden Gem That Can Build Almost Anything
BuildKit is a general-purpose, pluggable build framework that can produce OCI images, tarballs, local directories, APK packages, and more via custom frontends, not just Dockerfiles.
- The switch to Linux and the beginning of my self-hosting journey
A developer recounts switching from Windows 10 to Debian Linux and self-hosting services like PiHole and Syncthing, while HN discussants debate Linux desktop usability and self-hosting complexity.
- GitHub - KeygraphHQ/shannon: Fully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark.
Shannon is an autonomous AI pentester that analyzes source code and executes real exploits to prove vulnerabilities, achieving a 96.15% success rate on the XBOW benchmark.
- GitHub - gavrielc/nanoclaw: My personal Claude assistant that runs in Apple containers. Lightweight, secure, and built to be understood and customized for your own needs.
NanoClaw is a lightweight, container-isolated AI assistant that runs Claude agents in Docker with filesystem-level security, multi-channel messaging, and a small codebase designed for easy customization.
- Running Claude Code dangerously (safely)
Claude Code users discuss practical sandboxing strategies—VMs, containers, and firewalls—to safely run the agent with dangerous file-system permissions.
- A field guide to sandboxes for AI
Sandboxing tools for AI agents differ fundamentally by boundary (containers, gVisor, microVMs, Wasm), not just by policy, and picking the wrong one creates either leaks or excessive cost.
- AddyOsmani.com - The Next Two Years of Software Engineering
The next two years of software engineering hinge on how AI affects junior hiring, skill atrophy, role evolution, specialist vs generalist, and education pathways.
- Just a moment...
Setting up Windows 95 in QEMU on a modern Mac, patching it for fast CPUs, and compiling C programs using Open Watcom via Docker.
- What are you doing this weekend?
A developer recounts returning to FreeBSD for a home NAS after years on Linux, praising its simplicity for servers but sticking with Arch for desktops.
- Technology | 2025 Stack Overflow Developer Survey
Python adoption accelerated sharply in 2025, Docker saw a record +17 point usage jump, and Rust remained the most admired language, according to the Stack Overflow Developer Survey.
- Show HN: Sim – Apache-2.0 n8n alternative
Sim is an Apache-2.0 licensed, self-hostable alternative to n8n for building, deploying, and managing AI agents and workflows with 1,000+ integrations.
- What They Don't Tell You About Maintaining an Open Source Project ~ andrej acevski
Maintaining an open-source self-hosted kanban board involves relentless documentation, user support, scary database migrations, and careful scope management far beyond building the initial product.