It feels like sandboxing in AI is starting to approach the vector databases buzz at its peak... New options pop up every day, hard to keep up

I keep bumping into more and more AI app/agent sandboxing, ephemeral deployment and observability use cases with an experimental version of DockerSlim/Mint that runs code in local or remote environments. What are good/popular cloud sandbox environments people use/like?

Now that SEP-1391 introduces async tool calls in MCP can we officially forget about A2A :-)

interesting... the npm saga continues and it appears even CrowdStrike's npm packages are impacted

The schedule for #Rejekts2025 Atlanta is out👉🏾 cfp.cloud-native.rejekts.io/cloud-native... Congrats to those who made it. We look forward to a great time with the community in Atlanta! 🤗

Looking forward to #KubeCon / #CloudNativeCon in Atlanta & exploring/building integrated AI Assistant and MCP Server capabilities in #DockerSlim . Join the session even if you don't care about the project if you're curious about learning more about building AI Assistants and MCP Servers in #Golang 🙂

Looks like the talk about minimal base container images, "Move Over Chainguard: We’re Building Our Own Minimal Images", isn't going to make it to the Rejekts conference either, which means there'll be more time to work on it 🙂 Happy to do a hallway track preview for it at KubeCon in Atlanta!

Our "Move Over Chainguard: We’re Building Our Own Minimal Images" KubeCon talk got rejected (too many great talks to choose from, so i'm not surprised) Who still wants to see this talk :-)

a bit of trivia ( #golang and AI agent related)... guess what value ends up in MainConfig.KeyOne (and why) when the YAML config file is loaded and guess how confused Gemini CLI and even Claude Code were with it 🙂

Lots of people have been asking for the Podman container runtime support minifying images with #DockerSlim and it's finally coming! If you want to get a preview and try it before anybody else ping me

Interesting... and now CloudFlare has container-based sandboxes to run AI generated code: developers.cloudflare.com/changelog/20...

Finally... containers on CloudFlare... Better late than never :-) blog.cloudflare.com/containers-a...

What's the point in submitting a conference talk proposal if it's going to be one paragraph (and a short one too)... I'm still puzzled by those :)

Who wants to see Slim OS, a new minimal and hardened container image distro? Seems like everybody is building one, even Docker... :-)

Silly, but it always bugs me a bit when I hear the classic "your product needs to be a pain killer & not a vitamin because vitamins are only nice to have". I get the idea & yes vitamins ARE only nice to have... yet, somehow, vitamins is a huge business 🙂 Most things in life are "nice to have"...

Hugging Face has a course on MCP (pretty cool though I'm still not sure why there's a need for it :-)) huggingface.co/mcp-course

Container "image mode" in Redhat Linux... interesting to see containers as the first class construct in an OS

Funny timing... Wiz just came out with their hardened container images and now Docker :-)

Bummer that Stacklok Trusty is shutting down... A really nice supply chain security service for open source packages

Bluesky is nice, but having to constantly relogin is a major UX downside. Either the security people at Bluesky need to back down a bit or the UI team needs to be a bit less lazy not to loose the existing login session. Every time Bluesky logs people out it loses users...

Application container maintenance starts with good Dockerfiles! And this is where you can get good Dockerfiles 🙂 GoodDockerfiles.com

It can get pretty hectic at #KubeCon (the latest one in London was huge in more than one way :)) and, I bet, for the CNCF CTO it's as busy as it can get. Still @cra.dev found time to spend in the Pavilion with the projects

The architecture diagram DeepWiki/Devin generated for #DockerSlim / MinT(oolkit) is the best AI generated diagram so far (not complete, but it does make sense and it's useful enough)

"Protecting NATS and the integrity of open source: CNCF’s commitment to the community" www.cncf.io/blog/2025/04... github.com/cncf/toc/iss...

It seems like #KubeCon London was a long time ago... It was this month though! The Docker / Dagger event was very cool... With interesting demos, but sucky sound. Solomon saved the night though :)

I’m hiring 👇

10 million tokens in Llama 4 is still not enough... Need, at least, 25 million tokens for our autopilot product :)

A2A vs MCP (myth vs reality): Agent2Agent has "/.well-known/agent.json" direct discovery endpoints, which MCP doesn't have... or does it... It does with "/.well-known/mcp.json" 🙂

A pretty cool vulnerability www.deep-kondah.com/parquet-unde...

"great security should be invisible"...

I couldn't miss the "What I wish I knew about container security" Cloud Native Rejekts talk in London by Duffie and Jed

Speaking of Model Context Protocol (MCP) and its gotchas... "Resources" are probably not what you expect them to be. The spec tells you that it's for exposing read only data, but it doesn't tell you that your MCP clients like Claude Desktop won't be able to access them like they can access "Tools".

It's funny that there's an official Model Context Protocol (MCP) SDK for C Sharp and even Swift, but no official #golang SDK

We reviewed 4 python Dockerfiles: Tux (discord bot), GuruBase RAG, Podcastify AI (OSS version of NotebookLM) & AgentGPT (AI agent builder). We also previewed the container image composition tool. More notes will be posted soon!

@justingarrison.com Tried to upload my SCaLE slides a few times and it never worked for me... Curious if I'm the only one in this boat :) Have you heard anything similar from others?

Do you want to know if you have "Shadow AI" BEFORE it gets to production?

why do you need 10,000 tutorials for a Hello World MCP server... asking for a friend 🙂

AgentGPT is the last python app Dockerfile we selected for the upcoming Good Dockerfiles live stream. It's going to be a lot to cover! AgentGPT probably deserves its own stream 🙂

Ivan at SCaLE 22x (without being here in person) 🙂

@guincodes.bsky.social awesome Cloud Native track at SCaLE 22x! Thank you!

It was a fun SCaLE 22x talk with great questions and participation from the audience! We managed to build a functional container by hand without any container tools. There was cheating to do less 🙂 And we also explored the magic of lazy loaded containers and eStargz! #scale22x

Thank you for the opportunity to share! Great attendees! Not shy to ask questions and to answer my questions :) Building containers by hand and live was fun

Want to know how docker images are made? @kcqon.bsky.social knows! #SCALE22x

SCaLE 22x (in Pasadena, CA) is starting tomorrow! I'll be talking about building containers the hard way (& cheating at it) & lazy loaded containers and many other things. If you are in the LA area or California in general there's no excuse not to go because you can get 50% off with this code: SPEAK

6am. Heading to LA for SCALE. See you soon, @justingarrison.com, @withenoughcoffee.com, @mauilion.dev, @elchefe.me, @jeremyadams.bsky.social, @shykes.bsky.social, @capileigh.bsky.social, @flox.dev, @kelseyhightower.com, @jerdog.dev, @kcqon.bsky.social, @hazelweakly.me, @jimmy.zelinskie.com

(Software) engineers don't know how to run code they didn't write (simplifying, of course, too many details for this format :-)). That's a huge elephant in the room that adds a lot of friction and prevents lots of opportunities. And AI will make it 10x - 100x worse...

SCaLE 22x is almost here (March 6 - 9, Pasadena, CA)! First one for me. Super excited to be there & share with others. You can get 50% off on registration with this code (no excuse not to be there if you are in California ;-)): SPEAK

Platform / DevOps engineers & even Devs often know a lot less about the applications they work with than I expected. This is one of the surprising learnings helping #DockerSlim users. Enough app knowledge is key for every application maintenance activity out there (before & after it's deployed)

Curious how many people know about the "--link" flags in COPY Dockerfile instructions... and how many people know about all of its properties and side effects :-)