We're at a point where coding without an isolation mechanism or sandbox is way too risky. Use containers at a minimum, VMs if you have enough resources or a remote machine with either of these if you can. Watch 🍿:

Adding --network=none to the container for steps that need no internet is a cheap extra layer on top of that.

If you code with git, very small tasks and read every line after then no need of any sandbox!

@wesbos No. This is influencer slop that raises the barrier of entry for students and does not reflect industry standards. Claude without a VM is exceedingly common and acceptable.

@wesbos This is industry standard. Every tool I mention in the video has a free / open source way to run it. This is just a new part of the curriculum. Students will learn it just like they learned everything else.

@wesbos Free and open source isn’t the industry standard. You work at Sentry. Ask to share a dev survey from your own company. How many run claude vs how many use an open source VM? Sentry itself isn’t open source. I’m a FOSS maintainer and advocate and I know FOSS doesn’t mean standard

if you isolate the .ssh credentials for github from your application which sits in another environment, then how would you push to the remote? does this mean ai vibe coding and regular development is done local to the credentials and testing / running the application is done in a separate environment?

This is well explained!👏

Your video series about VPS and Caddy was the spark to build my own setup a few months ago, and now is my main machine!

Thank you CJ! This is awesome!

Inside the VM: - sub-user level OS permissions if you use ai: allow it to write only in the project folder - use nVidia OpenShell or similar to start your coding agent from Outside: - segment the network and put strict rules on the segment with VMs for agentic development (treat as compromised) - reinstall the VMs often even if they seem to work

@wesbos Another option is to just not have many dependencies

100%!

That's why everyone needs to check their dependencies.

Yay... CJ is on my For You page!