Hacker News Reader

Comment by teekert | Hacker News Reader

I once opened Zed, howdy there was an agent window on the side, I log into Claude. I asked it to list what it could see and work with... And there my (priv) ssh keys come scrolling by. I don't know what I was expecting really, it's very logical, but also very in your face. They didn't leave my computer I guess, I just showed me the output of some `ls` commands. But still.

So now I have CC in a container, mounting it's own credentials/memory folder per project and only mounting one repo at a time (script in the repo itself). I feel a bit better about it now. It can still access my networks of course.

View on HN

If you ever want a few more features on top of "CC in a container", then do consider byre. It's literally that, but also a nice TUI for adding extra folders, reusable skills, encrypted credentials, etc, and you can eject back to plain Docker (or Podman) whenever you want. Useful if you want to just be able to go to any folder and spin it up with your toolbox with one command: https://github.com/pjlsergeant/byre

> They didn't leave my computer I guess, I just showed me the output of some `ls` commands

Not sure exactly how Zed works, but wouldn't the results of the `ls` tool call be fed back into claude?

Not sure. It didn’t do “cat” so I guess that the file itself did’t leave the computer? Uploading all files in my ~/ would have taken noticible time and didn’t happen I think.

I heard containers aren't very secure and VM is better?

Docker containers aren't very secure because the daemon runs as root by default. Rootless container runtimes are plenty secure, especially if the user that runs the container is unprivileged. Easiest thing in the world with Podman.

Would you run Podman from your own user or another specially created user?

I would have them run as a user that does not have sudo. The easiest way to do this is by using system-level Podman Quadlets that run as an unprivileged user account. That user will need a real home directory for images and volumes.

Reply on news.ycombinator.com