A CNCF XMas present - New Location Unlocked, with: Mr. Anderson, Your Secrets Are Mine & DevOps Mindset
For this first meetup at the 6th floor at the E+H offices directly opposite JobRad we have two talks planned.
Mohammad-Ali A'RÂBI talks about Mr. Anderson, Your Secrets Are Mine: On Sandboxing AI Agents
AI coding agents are becoming increasingly powerful. They can write code, execute commands, install dependencies, and occasionally go rogue. We need to put them in a cage (or a box) before they end up hacking Hugging Face again. 🤗
Welcome to the Matrix. 😎
In this session, we'll follow the white rabbit into the world of AI agents, Docker Sandboxes, and microVM-based isolation.
- 💊 The Red Pill: Give an AI agent unrestricted access to your laptop. Agent Smith approves.
- 🕶️ Welcome to the Real World: Are AI agents becoming our tools, or are we becoming theirs?
- 📦 Enter the Sandbox: Containers vs. microVMs. What are the differences between
docker runandsbx run? - 🐳 Follow the White Rabbit: One does not simply walk into a sandbox. Getting started with Docker Sandboxes (sbx) and running your first agent with
sbx run claude. - 🔒 There Is No Spoon (or Network Access): Deny-all policies, selective network permissions, and keeping agents away from your secrets.
- 🛠️ Construct Your Own Reality: Build isolated development environments with your favorite tools and dependencies.
- 💾 Déjà Vu: From
docker committosbx template save. Reuse environments with snapshots, Dockerfiles, and Sandbox Kits. - ⚔️ Choose Your Reality: A practical comparison of Docker containers and Docker Sandboxes, including their commands, capabilities, and security boundaries.
Expect live demos, practical commands, a few Matrix references, and hopefully no rogue agents or T-800s.
Never send an agent to do a sandbox's job.
Bernhard Scheffold talks about DevOps Mindset in Software Development
A pragmatic look at some of the DevOps buzzwords and how they affect your everyday life from a development perspective.
Doors are open from 18:00 (food and drinks are being sorted out, details to follow). Talks will likely start around 18:30 and are planned for roughly 30 minutes each, we might have more speakers to be announced later.
There will be ample time for networking.