miniblog.

Cleaned up an old git repo of Ansible playbooks and it's amazing how much is just Docker now. Docker handles process supervision, centralises logging, and containers coexist without issues. It's nice when things get simpler.

I find it odd that people recommend Docker for sandboxing agentic coding tools. Isn't it easier to just create a separate user account on the machine? It's an established security boundary, and viewing output is easy (just make the user's home directory world readable).

For my personal server, I deploy services with docker and update with watchtower. It works OK, but I'd love to have a proper configuration as code approach. I want a git commit to change a file that says which version should be live, and then CI should deploy that.