Conversation
jarkko

Jarkko Sakkinen

Landstrip 0.20.x is expected to have some bugs because I did bunch of breaking changes. I'll tag 1.0 at the point when this no longer happens i.e., I consider it mature. However, likely as large hops as transition from 0.19 to 0.20 will not happen any time soon.
1
0
0
jan@social.janantos.com

jan

Reply to @jarkko

@jarkko yeah I tried lanstrip in my pi harness workflows and a lot of things do not work for me, eg my agent is using chromium to visualy confirm and test development (never got chromium working in landstrip, most likely my fault), so also the mermaid doesn’t work for me there because again of chromum, but I got pty working there so the agent can test console interactive apps. For sure landstrip is too complex for me to set, so it is significantly easier to me to run agent in podman container with volume only to project source.

1
0
0
jarkko

Jarkko Sakkinen

Reply to @jan@social.janantos.com
@jan It will take at minimum a year to make almost any sandbox truly sound in details :-) This seems to apply despite the tools we have. It's such a precision task. In latest version I just broke what I had to so that from now on I can mostly focus on maturizing tiny details.
2
0
0
jarkko

Jarkko Sakkinen

Reply to @jarkko
@jan I started to do this because people working on sandboxes were not really seem to have much understanding of the topic. I would count possibly Codex as an exception, which is pretty well implemented from this angle but have not studied it in detail. Usually OpenAI is good at doing right thing with code tho.
1
0
1
jan@social.janantos.com

jan

Reply to @jarkko

@jarkko sorry if it was heard as critics, in fact I love landstrip, it just doesn’t work for some of my specific scenarios and perhaps my skills, I can imagine I would be able to find the way.

1
0
1
jarkko

Jarkko Sakkinen

Reply to @jan@social.janantos.com
@jan Not at all :-) Just shared my thoughts on topic and it was 100% neutral.
0
0
0
jan@social.janantos.com

jan

Reply to @jarkko

@jarkko yes you are absolutely right, majority of people I know, run harness from project root and give access to “almost” full system, and I am trying to explain it to them, but they dont listen. The landstrip pi extension is great I am not abandoning it

1
0
1
jarkko

Jarkko Sakkinen

Reply to @jan@social.janantos.com
@jan This is a sign for useless sandbox driven by an uneducated developer: a list of kernel enforcement mechanisms that have been piled.
1
0
0
jarkko

Jarkko Sakkinen

Reply to @jarkko
@jan For me personally most of my understanding of sandboxes derive from what Chromium team has ever done starting from https://lwn.net/Articles/332974/. This was before seccomp filters :-) Chromium is a great source of information for this topic.
0
0
1
About social.kernel.org

Terms of service

  1. Please do not use this service in violation of the Linux Kernel Code of Conduct. Doing so will result in your account suspension with the referral of the matter to the CoC committee.

  2. "Repeating"/"boosting" someone else's status on this platform will be treated as endorsement and will fall under rule #1.

  3. You are encouraged to use this platform to promote your work on the Linux Kernel, but there is no restriction on permitted topics (with the exception of anything covered by #1 above).

  4. There is no requirement to post in English, but it should be considered the primary language of communication on this platform.

Privacy notice

The admins of this service have access to all posted statuses. They aren't looking, but if it's something they shouldn't know about, then you should not post it on this platform.

Please see the Linux Foundation Privacy Policy, which applies to this platform as well.

Getting your own account

If you would like an account on this instance, please check that the following applies to you:

  • You are listed in MAINTAINERS or CREDITS

  • OR: You have a kernel.org account or email address

  • OR: You have a long and established history of involvement with the Linux Kernel

If the above is true and you agree with the Terms of Service and Privacy Notice listed above, please use these instructions to request an account: