Viewing profile — kernc

The convergence is ongoing. We are Borg. You will be assimilated.

Why would they care to empower competitors?

`sandbox-venv` is a small shell script that sandboxes Python virtual environments in separate Linux namespaces using Bubblewrap (and soon using only command `unshare`, bringing the…

Did you also manage to enable menu icons?

Let everyone be reminded how joyful GIMP 2.10 menus used to look ... https://i.imgur.com/nVyMQBt.png

Probably not. Maybe Bubblewrap and sandbox-run. It's an anything-is-already-way-better-than-nothing type of thing. [0]: https://github.com/containers/bubblewrap [1]: https://github…

As a heads up and affirmation that the approach is correct, here's a small shell bubblewrap wrapper that boils the command line down to `sandbox-run claude --dangerously-skip-permi…

Other actionable insights are: - Merge amendments up into the initial prompt. - Evaluate prompts multiple times (ensemble).

It being deprecated and all, didn't feel like wrapping it, but macOS supposedly has a similar `sandbox-exec` command ...

> Linux-only What other dev OSs are there? > once privileges are dropped [...] it doesn't appear to be possible to reinstate them I don't understand. If unprivileged code could eas…

Since everyone tends to present their own solution, I bid you mine: sandbox-run npx @anthropic-ai/claude-code This runs npx (...) transparently inside a Bubblewrap sandbox, exposin…

I wrote myself a handy and generalized bwrap-wrapping script: https://github.com/sandbox-utils/sandbox-run

No.1: Run untrusted code in a sandbox! https://github.com/sandbox-utils/sandbox-venv

Now that everyone is kindly on board, IBM can finally bury this standard. /s

What are the reasons for Snapchat? :.

> alias npm=... I use sandbox-run: https://github.com/sandbox-utils/sandbox-run The above simple alias may work for node/npm, but it doesn't generalize to many other programs avail…

Local-first (on Lunix), POSIX shell: https://github.com/sandbox-utils/sandbox-run

A simple zero-config alternative using Linux-native containers seems to be sandbox-venv [1] for Python and sandbox-run [2] for npm ... [1]: https://github.com/sandbox-utils/sandbox…

> This might be a red flag for Persona service itself as it might contain serious flaws and security vulnerabilities that Cyber criminals are relying on Persona seems to rely solel…

You can use special a Unicode strikethrough glyphs such as available in https://efck-chat-keyboard.github.io

Is exactly why I composed bubblewrap-based sandbox-venv for Python: https://github.com/kernc/sandbox-venv Dangerous times we live in.

Too personal to share, but maybe too personal and important to share even with the members of the cloudy cartel, i.e. the Providers. Is exactly why I wrote myba that does full cont…

The intricacies of Borg are exactly why I switched over to a wrapper around pure git: https://kernc.github.io/myba/

Make your own backup system—is exactly what I did. I felt git porcelain had a stable-enough API to accommodate this popular use case. https://kernc.github.io/myba/

Indeed, more repos should add a SLOC (e.g. ghloc) badge! Give you a feel for what you're working with. https://github.com/pajecawav/ghloc-web#badges