News for hackers. Stuff that matters.
Re:Show HN: Share your AI Setup, Learn from others by johnsmith1840 on Thursday September 17, 2026 @03:52PM (#49745673)
Ec2 + codex or claude and tmux so you can move about. Control EC2 permissions outside the node. Not really much value beyond that.

Only layer beyond this I want is the permission scoping, stronger sandboxing per session and centralized control. I have not seen a clean product around this though where I own the compute.

Re:Show HN: Share your AI Setup, Learn from others by adunsulag on Thursday September 17, 2026 @10:00PM (#49749364)
I've been developing my own sandboxing environment using Nvidia's Openshell.

Works like Claude code but with stronger guarantees for me on file system and network access. Still playing around with it, but so far I've been liking the setup.

I still run the sandbox inside a VM for now, but I feel far more comfortable in running Claude Code in unsupervised mode because I restrict the outbound network access and secrets never hit inside the sandbox.

Re:Show HN: Share your AI Setup, Learn from others by johnsmith1840 on Friday September 18, 2026 @05:11PM (#49760315)
Why not a virtual machine or container? I'm playing around myself with some but can't shake that a VM is the right shape for it. That's my infra brain though.
Re:Show HN: Share your AI Setup, Learn from others by ahmed89 on Saturday September 19, 2026 @10:33AM (#49766895)
Is that mainly an EC2/shell problem for you or does the same session end up touching things like GitHub, AWS, MCP or other systems too?