Adding your user to the docker group is in the official Docker install instructions, I wouldn't call that "random copy paste guides".

You mean the optional post install instructions, which is a separate page from the main install instructions, and contains a giant warning about the security implications?

https://docs.docker.com/engine/install/linux-postinstall

If the official sudo project had a guide on how to disable passwords, that shouldn't be taken as endorsement of having that as a default config.

Per my other comments, it does not really matter if you disable the sudo password or not. If you have a sudo binary at all you effectively are giving every user process root since malware can mask the sudo command and intercept the password so trivially.

That is an extreme amount

I tried Moshi. Some things I did not like - Despite the name, using mosh is a paid feature - It was not clear what is and isn't a paid feature when using the app for the first time (after selecting which server to connect to, when you select which terminal/chat to connect to there's initially a counter that says 20/20 which decreases every time you connect) - If you pair your phone to the server for push notifications a bunch of info regarding the chat is sent to their servers to produce the push (naturally), this makes it unsuitable for me at my job at least. IMO it would be sufficient to just get a "Agent needs your attention" push.

All in all, I did not find it worth it compared to using mosh or SSH in Termux. I have a colleague who loves Moshi though, for him its perfect. Among other things he likes the dictation.

I'm just a hobbyist with a 3D printer, but after watching a few tutorials it seems quite simple if you're only using the sketcher and part design 90% of the time.

Unless she hosts her own cert authority or is using a self-signed cert, the wildcard cert she mentions is visible to the public on sites such as https://crt.sh/.

Yes, the wildcard cert, but not the actual hostname under that wildcard.

Can't speak for the benefits of https://nono.sh/ since I haven't used it, but a downside of using docker for this is that it gets complicated if you want the agent to be allowed to do docker stuff without giving it dangerous permissions. I have a Vagrant setup inspired by this blogpost https://blog.emilburzo.com/2026/01/running-claude-code-dange..., but a bug in VirtualBox is making one core run at 100% the entire time so I haven't used it much.

> but a bug in VirtualBox is making one core run at 100% the entire time

FYI they fixed it in 7.2.6: https://github.com/VirtualBox/virtualbox/issues/356#issuecom...

Security in layers, I'd do both.

Always try to avoid having two services using the same DB. Only way I'd ever consider sharing a DB is if only one service will ever modify it and all others only read.

Good luck enforcing that :)

How fast my terminal can print 10000 lines is pretty far down the list of requirements I have, who cares as long as it is fast enough? To me it is as irrelevant as who has the best unicode support.

I tried niri this spring and had several issues trying to get copy-pasting between Wayland and X (Xwayland) working. Think I had some other problems as well that were a dealbreaker that I can't recall at the moment. Anyway, have you had an issues like this? I assume Gnome does a lot of work to make it seamless, maybe Quickshell does something similar?

As far as I remember I just had to install wl-clipboard and xwayland-satellite. It was working fine then even before I moved from Waybar to Quickshell.