We're at a point where coding without an isolation mechanism or sandbox is way too risky.
Use containers at a minimum, VMs if you have enough resources or a remote machine with either of these if you can.
Watch 🍿: youtube.com/watch?v=-ulRSv…
Use containers at a minimum, VMs if you have enough resources or a remote machine with either of these if you can.
Watch 🍿: youtube.com/watch?v=-ulRSv…
Aug 28, 2026 · 1:53 PM UTC
12
19
220
16,667
@CodingGarden @wesbos No. This is influencer slop that raises the barrier of entry for students and does not reflect industry standards. Claude without a VM is exceedingly common and acceptable.
1
0
1
174
@JohnVandivier @wesbos This is industry standard. Every tool I mention in the video has a free / open source way to run it. This is just a new part of the curriculum. Students will learn it just like they learned everything else.
2
0
0
92
@CodingGarden If you code with git, very small tasks and read every line after then no need of any sandbox!
0
0
1
198
@CodingGarden @wesbos Another option is to just not have many dependencies
0
0
0
10
@CodingGardene the .ssh credentials for github from your application which sits in another environment, then how would you push to the remote? does this mean ai vibe coding and regular development is done local to the credentials and testing / running the application is done in a separate environment?
0
0
0
16
@CodingGarden That's why everyone needs to check their dependencies.
0
0
0
107
@CodingGarden Your video series about VPS and Caddy was the spark to build my own setup a few months ago, and now is my main machine!
0
0
0
248
@CodingGarden Adding --network=none to the container for steps that need no internet is a cheap extra layer on top of that.
0
0
2
185
@CodingGarden:
- sub-user level OS permissions if you use ai: allow it to write only in the project folder
- use nVidia OpenShell or similar to start your coding agent from
Outside:
- segment the network and put strict rules on the segment with VMs for agentic development (treat as compromised)
- reinstall the VMs often even if they seem to work
- sub-user level OS permissions if you use ai: allow it to write only in the project folder
- use nVidia OpenShell or similar to start your coding agent from
Outside:
- segment the network and put strict rules on the segment with VMs for agentic development (treat as compromised)
- reinstall the VMs often even if they seem to work
0
0
0
127