npub1h3…a728v on Nostr: What isolation do you use for your harness? I use separate vm + rootless docker + ...
What isolation do you use for your harness?
I use separate vm + rootless docker + caddy proxy for git restricted per repo.
Even if the token has access to more repos, each project can reach only their repo.
But I also run CI on that machine for now.
Published at
2026-09-17 21:33:35 UTCEvent JSON
{
"id": "00007cf7b13c8462689376c25995d3b4707f696380218796988219ea0146f05d",
"pubkey": "bc4b52cda9a2c8a17d1d03754475aa752ccc74da9041b3da7b844b0e47ed8389",
"created_at": 1789680815,
"kind": 1,
"tags": [
[
"nonce",
"43893",
"16"
]
],
"content": "What isolation do you use for your harness?\n\nI use separate vm + rootless docker + caddy proxy for git restricted per repo. \nEven if the token has access to more repos, each project can reach only their repo.\n\nBut I also run CI on that machine for now.",
"sig": "41445774a947a6b168cf4554db57dff8d775c728884cf468d589b1aa54a9d8c6a8f8cac7f0d56b07c19bb7d0f811370345148b0e9948dc97c009152ec6db423d"
}