Hacker News Reader

___timor___on Ask HN: How are you sandboxing coding agents?

That's something new. I'll have to try it Thanks!

___timor___on Ask HN: How are you sandboxing coding agents?

Containers work quite well and fast. https://gagor.pro/2025/10/running-gemini-cli-in-a-docker-con...

___timor___on Ask HN: How to stop an AWS bot sending 2B requests/month?

Redirect them to 169.254.169.254, where AWS serve some instance metadata. Maybe auth endpoint, which should result in throttling of their own instances and hopefully cause then troubles.

Gzip, deflate bomb could be another alternative.

Or maybe redirect them to a boat that can respond with TARP IT, filling their connections.

___timor___on How I stopped worrying and loved Makefiles

Makefile or Vagrantfile. Ruby's syntax is perfect for custom DSLs.

___timor___on How I stopped worrying and loved Makefiles

Great idea, added to my todo :)

___timor___on How I stopped worrying and loved Makefiles

Looks interesting.

___timor___on How Often Have You Seen Mostly or 100% AWOL Managers?

Looks like a silent quitting schema. I'd prefer absent boss than someone that micromanage what I'm doing.

___timor___on The best way I found for the use of NVM in CI/CD

I've been working recently on providing nvm integration in Docker base images and on our CI/CD, with a target to make it work as easy for developers as possible.

I think, I nailed it, but... I didn't saw anyone else doing it like that and I wonder now if it might contain any non obvious flaws?

___timor___on CentOS 8 Stream Docker image

Years ago I switched from Gentoo to Debian/Ubuntu, because I was looking for more stability. I was just tired of resolving problems, that I don't care. This CentOS switch feels for me like exactly opposite direction.

On the other side, for containers where you can just refer to previous version/build, it doesn't necessarily have to be that disastrous. A lot of apps that I support, are just single package JAR files dropped into Java base image. It's quite hard to break it by OS updates.

The worse thing I see here is that they changed EOL time for already released version. We were building some assumptions about it and they're all gone now.

___timor___on CentOS 8 Stream Docker image

We’re all divided with recent decision to focus on CentOS Stream, which essentially means that stable, professional distro will turn into rolling release now. Also CentOS board members don’t gave us more confidence for the future.

I don’t want to be totally sceptic, I would like to test it on my own and only then, decide if it’s stable enough. But I work mostly with Docker containers and there are no official Docker images with Stream variant. I decided to create it on my own, based on official instruction.

https://hub.docker.com/r/tgagor/centos-stream

Now at least I can try it and decide on my own, if it’s stable enough for production workloads.