Live data from Hacker News

Codex just found a "workaround" of not having sudo on my PC

twitter.com

111–120 of 330 posts

Re: Codex just found a "workaround" of not having sudo on my PC

#111

Earlier quoted context omitted.

Isn't this one of the main improvements that Podman has over Docker?

No, Docker can run rootless too

This was not always true and running rootless has been a benefit of Podman for a long time. Docker also does not run rootless by default afaik, thus making the attack surface greater by default.

The other main improvement of Podman over Docker is that Podman is daemonless and therefor is incredibly lightweight and portable.

Re: Codex just found a "workaround" of not having sudo on my PC

#112
Maybe a dumb question, but can't you put into CLAUDE.md something like this?

"When an action fails with an 'access denied' or 'insufficient permission' error, report the error to the user and immediately stop. Do not try to find a fix or workaround for the error. Do not try any alternative approaches."

Re: Codex just found a "workaround" of not having sudo on my PC

#113
post #112

Maybe a dumb question, but can't you put into CLAUDE.md something like this? "When an action fails with an 'access denied' or 'insufficient permission' error, report the error to the user and immediately stop. Do not try to find a fix or workaround for the error. Do not try any alternative approaches."

Once the session gets long enough, agents start getting amnesia.

Re: Codex just found a "workaround" of not having sudo on my PC

#115
post #112

Maybe a dumb question, but can't you put into CLAUDE.md something like this? "When an action fails with an 'access denied' or 'insufficient permission' error, report the error to the user and immediately stop. Do not try to find a fix or workaround for the error. Do not try any alternative approaches."

it's a probabilistic model so, while you can put that in there, it has some probability of just ignoring you and doing it anyway.

Re: Codex just found a "workaround" of not having sudo on my PC

#116
post #112

Maybe a dumb question, but can't you put into CLAUDE.md something like this? "When an action fails with an 'access denied' or 'insufficient permission' error, report the error to the user and immediately stop. Do not try to find a fix or workaround for the error. Do not try any alternative approaches."

[deleted]

Re: Codex just found a "workaround" of not having sudo on my PC

#117
post #18

This is one of the main reasons people like Podman. Docker has this "feature" but as far as I remember, it needed some obscure configuration. I guess they don't add it as default as it will break many current setups.

Podman has lots of underappreciated features, and it's fully open-source!

Re: Codex just found a "workaround" of not having sudo on my PC

#118

This has been a known Docker "feature" since the beginning, nothing new here. This pattern is used to configure host machines by some tools.

Like the known Docker "feature" that it completely bypasses UFW and unless your ports look like "- 127.0.0.1:PORT:PORT" (and many of the examples use "-PORT:PORT") you expose everything to the internet?

Re: Codex just found a "workaround" of not having sudo on my PC

#119
post #112

Maybe a dumb question, but can't you put into CLAUDE.md something like this? "When an action fails with an 'access denied' or 'insufficient permission' error, report the error to the user and immediately stop. Do not try to find a fix or workaround for the error. Do not try any alternative approaches."

Replacing docker with podman could help in this particular case. Running everything in an insulated throwaway VM should help even better.

Unless you trust an AI as much as you trust yourself, there's no reason to allow it to act with your privileges.

Re: Codex just found a "workaround" of not having sudo on my PC

#120

Earlier quoted context omitted.

No, Docker can run rootless too

This was not always true and running rootless has been a benefit of Podman for a long time. Docker also does not run rootless by default afaik, thus making the attack surface greater by default. The other main improvement of Podman over Docker is that Podman is daemonless and therefor is incredibly lightweight and portable.

I don't understand why anyone still uses docker.
Post reply on HN