Topical Takes
Short, opinionated posts on eBPF, Linux internals, and the tools we all run in production.
How Do I Sandbox Codex on Linux? (2026)
Codex enforces its Linux sandbox with bubblewrap plus seccomp, so it inherits bubblewrap's properties and its failure modes. What read-only, workspace-write and danger-full-access actually permit, why OpenAI rejected the legacy Landlock path, what the network proxy does not filter, and how to tell the sandbox is working rather than silently failing with exit code 0.
Best AI Agent Tools for DevOps on Linux in 2026: What Each One Actually Enforces
Eight tools for running AI agents on infrastructure you own, compared on what each one enforces rather than on features: Landlock, bubblewrap, Anthropic's sandbox-runtime, gVisor, containers, auditd, agent-lock and yeet. Which ones confine, which ones only record, which need root, and what each vendor's own documentation says it does not cover.
How to Run AI Agents Locally on Linux (2026)
Running an AI coding agent locally means the agent process is yours and the model usually is not. How to set up Claude Code, Codex or an offline model on Linux, what the sandbox defaults actually allow, which parts of the loop still make network calls, and how to see what the agent did on your box when its own log stops at the shell.