miniblog.

I find it odd that people recommend Docker for sandboxing agentic coding tools. Isn't it easier to just create a separate user account on the machine? It's an established security boundary, and viewing output is easy (just make the user's home directory world readable).

I'm considering switching my personal servers (on Digital Ocean) from Ubuntu to Debian. I essentially just need something running Docker for most of my projects. Debian seems to require upgrading less often. Any opinions?

For my personal server, I deploy services with docker and update with watchtower. It works OK, but I'd love to have a proper configuration as code approach. I want a git commit to change a file that says which version should be live, and then CI should deploy that.