Tootfinder

🧱 Isolation per workload: process containers (AppContainer, Seatbelt, Bubblewrap), Windows-only session containers with a separate account, desktop, clipboard and input, WSL containers, and experimental hardware-backed MicroVMs.
📋 One versioned JSON schema covers containment, process, filesystem, network and UI access. The TypeScript SDK @microsoft/mxc-sdk supports one-shot runs and a provision − start − exec − stop − deprovision lifecycle.

I’m standing atop a very tall ladder, peering down through a haze of liquid nitrogen vapour into a giant stainless steel flask containing three smaller containers.
Inside the smaller wedges
– which are labelled 005, 006, 007
– are three of Peter Tsolakides’ “patients”.
The frozen bodies belong to people who, before their death, paid handsomely to be cryogenically frozen in the hope of one day being brought back to life.
The ladder is inside a normal-looking shed…

‘Patients’ who pay $200,000 to be frozen after death are waiting to be reborn in an Australian shed
Exclusive: Southern Cryonics operates out of a shed in Holbrook in rural NSW. Experts say reanimation is ‘a dream’ but true believers pay $200,000 for a second chance at life

«Firefox Containers — Diese Browser-Erweiterung ist ein echter Geheimtipp:
Webseiten abschotten, das Tracking eindämmen oder zwei Accounts gleichzeitig nutzen? Inkognito-Tabs sind dafür zu umständlich. Eine kostenlose Firefox-Erweiterung schafft Abhilfe. Wir zeigen dir, wie du sie in Minuten einrichtest und die "Container" nutzt.»
Einen wirklichen Geheimtipp ist es schon länger nicht mehr aber wer nutzt es wirklich?
🦊

Firefox Containers: Diese Browser-Erweiterung ist ein echter Geheimtipp
Webseiten abschotten, das Tracking eindämmen oder zwei Accounts gleichzeitig nutzen? Inkognito-Tabs sind dafür zu umständlich.

It's mid-October but our Busy Lizzies are still going ten to the dozen in their containers in the garden. We've some colder nights predicted for later in the week but it's been fantastic to have so much colour this late into Autumn.

did anyone, uh, test it with multi-account containers before they shipped it or no

Finally upgraded my server from Mastodon 4.1 to 4.7.1... and migrated it all to Docker containers! Now I need to redesign the front end with some CSS.

I've written how to get properly signed Let's Encrypt certificates for services your run on your internal network—through caddy and docker containers
https://blog.lanzani.nl/2026/internal-dns-with-caddy-and-docker-containers/
PS: It's awesome to get it working.

Interactive resizing of picture and table content in Rmd and Quarto: #rstats

City Lives V 🔃
城市人生 V 🔃
📷 Pentax 6x7
🎞️ LUCKY SHD 100 (6x7)
If you like my work, Support by buying me a coffee or a roll of film from
PayPal https://www.paypal.com/paypalme/ydcdingsite
Wise

🔍 Three modes on Windows: Enforcement blocks ungranted access, Learning blocks and logs it to a JSON activity report, Permissive allows and logs it. Least-privilege policies can be built from observed behavior.
🏢 Coming soon: Intune policies for MXC containers, Entra separating agent activity from user activity, and Agent 365 controls for local agents. Windows 365 Cloud PC support is already GA.

God, what a fucking asshole.
Anyways, I've already spent some time removing #neovim from about half of my build/development containers. For now I'm going back to #vim, but once vim-classic or #evi

NSL is a weird little thing that gives you various Linux distros as well-integtrated containers inside a host VM on your Linux system. It works fine. I have yet to discover why I'd prefer this over a regular VM, chroot, distrobox, etc....but hey, somebody made it for us for €0. https://frostyard.github.io/nsl/

🌐 https://github.com/microsoft/mxc
https://blogs.windows.com…

"Datacenter rush will create ‘tsunami’ of discarded electronics, report says"
#Technology #Electronics #EWaste

Datacenter rush will create ‘tsunami’ of discarded electronics, report says
Global push will triple toxic e-waste annually in 25 years, filling enough shipping containers to circle globe six times

Another very detailed and good article about Storage management on macOS from The Eclectic Light Company: https://eclecticlight.co/2026/09/21/when-to-use-a-new-container-volume-or-folder/

When to use a new container, volume or folder
In APFS, containers, volumes and folders have different properties and features. Choosing the right one, and setting any size options, is an important step in good storage management.

Ratgeberjournalismus, der mich abholt
https://www.theguardian.com/thefilter-us/2026/aug/22/best-cheese-storage

‘Cheese paper’ will double the life of your cheddar. We lab-tested nine storage solutions
If you want to maintain the integrity of your camembert, specialty cheese storage containers work – but you may already have a solution at home

Last weekend before going back to work. It has been a great vacation away from technology, but I'm already looking forward to tinkering with my gadgets again. For now, tomorrow I need to update the server and the Docker containers.

My second #ClimateDiary post:
Water butts all empty, as of last night. We carried dozens of watering cans full of water, both for the containers, and for the first time, for plants growing in our sandy soil, which were beginning to suffer. And of course, all the washing up water goes on the garden too.

@… @… I believe they are put in containers in a warehouse in the East Bay:

Enjoying MillMint today, and thinking about the way a world built by one person inevitably winds up uncannily unified in aesthetic to the point it undermines the project's credibility with regards to what it tries to express about ours
https://millmint.net

#AI creates all sorts of threats to #wellbeing and #ecosystems. Maybe a short term challenge for AI: Design AI hardware within the constraints of a

Datacenter rush will create ‘tsunami’ of discarded electronics, report says
Global push will triple toxic e-waste annually in 25 years, filling enough shipping containers to circle globe six times

#AI creates all sorts of threats to #wellbeing and #ecosystems. Maybe a short term challenge for AI: Design AI hardware within the constraints of a

Datacenter rush will create ‘tsunami’ of discarded electronics, report says
Global push will triple toxic e-waste annually in 25 years, filling enough shipping containers to circle globe six times

Life with a 3D printer (Bambu Labs X2D) has weirdly reconfigured my life in ways I hadn't predicted. Now I calculate it so I can have a final print done at bedtime and then run a huge overnight print, such as Gridfinity containers.

I am using Fedora server in my homelab setup mainly hosting Nextcloud and Minecraft for family as well as an Forgejo instans. Planning to add Immich as well as Paperless in the near future. I run all services with Podman containers managed via quadlet unit files orchestrated by systemd. My feeling is that this solution fits with nicely with Fedora, but since documentation and deployment instructions is often using docker/docker-compose it often requires me to make adjustments that takes more…

A very specific thing I learned this week: do not store Harney and Sons hot cinnamon spice tea in these plastic ikea containers. Whatever flavors they added have hardened into a quikrete sugar mixture. I’ve boiled one of these containers and it still didn’t get the coating off. Stored fine in a glass canister with a bamboo lid.

Had a random ad served to me that caught my eye.
Stainless Steel food containers...that are microwave safe?
def not cheap but I can see some hilarious fun taking them to a friends house and seeing them freak out when you put the *metal* in the microwave lol
https://misen.com/products/misenware-6-piece-mixed

Since we're on the topic of “disk almost full":
tmutil listlocalsnapshotdates / |grep 20|while read f; do tmutil deletelocalsnapshots $f; done
Deletes lokal time machine snapshots
Another good candidate may be iChat History at ~/Library/Containers/com.apple.iChat
All messages including pictures and movies of the last like 10 years are stored there. So if you use iChat (aka Messages) a lot this is BIG.

🪶 A single ~8 MB daemon binary, no containers, no VM, no #Electron — just native processes managed for you
🛡️ Setup elevates exactly once; the daemon, CLI and GUI never run as root afterwards

Here is another thing I use containers for:
I use #lmstudio to run local llms. When you do that, you quickly notice that chatgpt and claude are not only so good because their llms are good, it's also about the tool use and the harness, even in the chat application.
A pure LLM is pretty stupid (as Mastodon people will point out "occasionally").
The real magic is via tool use and lmstudio can do that. So you need an mcp for web search, and this and that and I run all those in Containers.

Did I ever announce gentoo-kernel-modprep? It's the newest variation on #Gentoo Distribution Kernels: the absolute minimum kernel tree necessary for building modules. Ideal for package-building containers where a full kernel is unnecessary, yet you need to be able to build kernel modules.

For some 30 years I've had a Linux server in my home where I kept all my stuff and done all my work. Just shut down its last incarnation, a virtualized Ubuntu machine. It's now replaced with Proxmox running a bunch of small NixOS containers doing specific jobs. And one generic Fedora machine for interactive work I hope to keep mostly stateless. These days daily hackery happens on a desktop Linux box.

🛡️ #Microsoft Execution Containers (#MXC) are now GA: policy-driven containment for #AI agents, generated code, plugins and tools on #Windows,

Finally,
my homepage thomas-kahle.de is made with Jekyll, so to build it you need a Ruby/bundler/gem/Jekyll toolchain, and imagemagick, node, nbconvert ...
Humanity has all but forgotten how to install and maintain that stack on the mac. Solution: a container recipe!
Oh, and you need a postgres db for some tests or tools? Spin up a container. Containers are magic.
#Math people, take the time to learn about containers! Sparks joy.

🇺🇦 #NowPlaying on #KEXP's #SonicReducer
Containers:
🎵 Where Will We Park
#Containers
https://roughskiesrecords.bandcamp.com/track/where-will-we-park

Just had an interesting idea: A linux distro that is entirely rooted under some path like /system, and where every package is an OCI layer.
This means you can compose containers purely from built image layers, and mount it on top of a filesystem with its existing paths unshaded (or variously hidden) as sandboxing.
Completely orthogonal to the host system.

🔢 With "use native_types", int, float and bool map to C int64_t, double and bool. Strongly-typed std::vector, std::map and std::ordered_map containers run up to 10× faster than PHP arrays
🧮 High-precision numerics built in: bigInt (GMP), decimal (libmpdec) and bigFloat (MPFR) with typed operators and method APIs

🧪 Four versions were built. V1 ran agent-written PHP through eval() inside the app process, Code Mode style, with no boundary at all. V2 evaluated sandboxes (containers, Firecracker, E2B, Daytona, WASM), but each meant new infrastructure for a package.
V3 parsed code with nikic/PHP-Parser against an allowlisted PHP subset, which models kept violating with foreach, if and array appends. V4 switched to a JSON batch format the executor supports completely.

Some of the joy of working with this new AI tool is wearing off. The pace is exhausting. It's able to work very fast when it has well defined tasks. But the process of settling on a design, defining tasks, and trying things out takes just as much time and effort from me as before. I feel like the AI is my taskmaster sometimes. Doesn't help I'm trying to game my $20/mo subscription, keeping the AI as busy as I can within 5 hour quota resets.
But more work done today. Starting to disassemble my main crufty old dev server, the one I've been hauling around for 20 years in various forms. Turning it into a file server (done), a cron job box (done just now), and some services hosted in their own well defined containers.

Late to the party, but TIL about
#Docker containers all over the place and with Colima you have a free, no-gui, no-ai, no-auto-update-prompts container runtime that's drop-in for the official docker.
brew uninstall docker, done aaaaaand done.

Here is one thing that I run in a container:
@… has developed this amazing software to deal with conditional independence formally
#Perl, developed on Linux. So that's a works-on-my-machine situation and with Containers I can basically ship Tobias' machine over and work on it here on my Mac.