#Docker

Xec Gives zx's $ a Passport to SSH and Kubernetes

A one-maintainer TypeScript project finally builds the Fabric-style remote execution layer JavaScript scripting never had.

Article · 3d ago5

Zero-Downtime Postgres Migrations with Logical Replication

Replicate a live Postgres 16 database into a schema-changed Postgres 18 instance and cut over in seconds.

Tutorial · 1w ago3

Sandbox Your AI Coding Agent in a Locked-Down Docker Container

Run Claude Code and Cursor's CLI agent inside a hardened, egress-filtered container with a human approval gate.

Tutorial · 1w ago1

NanoClaw Went Zero-CVE. Its Worst Bug Wasn't One

Echo's hardened images are real hygiene, but agent security lives at the host boundary, where scanners don't look.

Article · 2w ago0

Fan Out Scientific Computing Jobs on AWS Batch with Spot Instances

Containerize a simulation and scale it across thousands of cheap Spot vCPUs with AWS Batch array jobs.

Tutorial · 2w ago0

Docker Finally Admits Containers Can't Contain AI Agents

Its new microVM Sandboxes make YOLO-mode coding agents safe by default, with a custom hypervisor instead of containers.

Article · 2w ago2

Docker's Answer to YOLO-Mode Agents Is a VM, Not a Container

The sbx CLI wraps coding agents in disposable microVMs with a credential-injecting proxy — and a mandatory login.

Article · 2w ago1

Your Web App Is Too Professional to Self-Host

Production-grade architecture becomes a support-ticket generator the moment strangers run your code on their own boxes.

Article · 3w ago1

Build a Private Harbor Registry That Blocks Vulnerable Images

Self-host Harbor 2.15 with Trivy scan-on-push and stop critical-CVE images at pull time.

Tutorial · 3w ago0

Docker Hub Finally Does OIDC, but Only for Paying Orgs

Short-lived federated tokens replace registry PATs in GitHub Actions — unless you're on a free plan.

Article · 4w ago0

Demystifying the NVIDIA DGX Spark for API Developers

Transitioning from cloud APIs to local GPU hardware requires mastering unified memory architectures and physical thermal constraints.

Article · 1mo ago0

Autonomous Pentesting: Inside the Multi-Agent Architecture of PentAGI

How the open-source security tool orchestrates LLMs and sandboxed Kali Linux environments to automate offensive workflows.

Article · 1mo ago0

PostHog’s Pragmatic Pivot: The Reality of Self-Hosting FOSS Analytics

With a clean FOSS mirror and a streamlined hobby tier, PostHog redefines the boundaries of open-source product analytics.

Article · 1mo ago0

Apple's Native Container Stack Gets a Native UI with Davit

Davit bypasses Docker Desktop by talking directly to Apple's native virtualization daemon over XPC.

Article · 1mo ago0

Ditching the GPU: High-Quality Local TTS with Kokoro

How a tiny 82-million parameter model brings natural, Apache-licensed speech synthesis to modest CPU hardware.

Article · 1mo ago4