Landlock Your Vibe Coding
submited by
Style Pass
We’ve all heard the horror stories where an unsandboxed coding agent deletes the user’s entire home directory. As a mitigation, many vibe coding tools are now using Docker to contain the agent’s actions.
Unfortunately, Docker is not a good tool to keep the vibe coding agents at bay. To quote Docker’s own documentation (emphasis mine):
The docker group grants root-level privileges to the user. For details on how this impacts security in your system, see Docker Daemon Attack Surface.
So while it keeps the agent from doing harm outside of the Docker container, installing Docker also removes the security boundary between your normal user and root. Docker is not something that your normal user account should have access to.
Read more blog.gnoack....
