Comment on Slightly safer vibecoding by adopting old hacker habitsparentComments−AlexCoventry5moYeah, it's easy to vibecode and review a docker sandbox, too. If you run containers with --runtime=runsc --cap-drop=ALL --security-opt no-new-privileges:true it's pretty tight. That's how I use coding agents, FWIW.
Comments
Yeah, it's easy to vibecode and review a docker sandbox, too. If you run containers with
it's pretty tight. That's how I use coding agents, FWIW.