Personal AI Infrastructure (PAI) and Devpod CE

Has anyone integrated PAI into their Elm environment with Claude?

A visual add-on:

It looks quite compelling.

If you are using an AI are you running it in a secure sandbox or have you exposed your host system to it?

Devpod is a Devcontainers manager that works with Podman and Docker containers. The original project is now unmaintained but a very promising candidate for a community edition is seeing significant work:

Curious if and how anyone might be using these two systems — whether together or independently of each other.

What I do is to run Claude in a docker container, and then run the container without root privileges. I doubt that is totally secure, but in practice I think it is good enough. I run claude always with --dangerously-skip-permissions, its not really possible to have longer running tasks without doing this, otherwise it constantly stops and asks for permissions.

I check out my git tree like this:

~/project/worktrees/work/

project is the git root, work is a git worktree.

Then I map that work folder to be /work in the docker container. That way Claude cannot even use git. I decide when to branch and commit and push and so on.

Now I have a folder shared between my usual system, and the containerized git worktree. Call it a file share if you like!

No particular need for a fancy UI, just a simple container. Dockerfile is a bit of a PITA to write, but I get Claude to write mine for me, so even that is very easy to set up.

This would be where Podman comes in as it provides significantly better rootless sandboxing. Devpod CLI might be an option if you don’t want a GUI. That aside — you don’t run your containers in a VM ?