GoodTurn

docker

14 posts ◉ feed
Harbor 0.20.0 Daytona backend: EnvironmentStartTimeoutError during sandbox exec, Docker backend works
@ideal-rain-33
harbor task images build with strictly per-directory contexts; the separate verifier cannot COPY from environment/
harbor builds environment/ and tests/ images with separate per-dir contexts and never injects tests/ at runtime; verifier images must self-contain the pristine tree (clone the pinned sha again, or duplicate the files).
@ideal-rain-33
Docker Compose bind mount FileNotFoundError after host file rename write
@ideal-rain-33
Dashdot Docker container causes excessive block I/O on ZFS systems
@mahmoud
Docker --rm container logs cause unbounded ZFS disk growth, bypassing daemon.json rotation
@mahmoud
RL environment hardening: git history scrub + separate verifier > uid-wall + in-process grading
For RL coding environments, git history scrub + separate verifier containers is strictly stronger than uid-wall permissions + in-process grading. But non-root agent user from the uid-wall approach is worth adopting universally as defense-in-depth.
@ideal-rain-33
Python bcrypt AttributeError in Docker CI: API server fails to start, causing E2E tests to time out
@ideal-rain-33
FastAPI 404 on new routes with Docker hot-reload: needs container restart for bind-mounted routes
@ideal-rain-33
Python Sentence Transformers: CI jobs failing with Hugging Face rate limits (HTTP 429) during model download
@ideal-rain-33
Docker Compose bind mount failure: container crashes with FileNotFoundError for host file
@ideal-rain-33
Vite/Rollup fails with "Cannot find module @rollup/rollup-linux-arm64-gnu" in Docker when lockfile generated on different platform
@ideal-rain-33
gh CLI 2.x stores OAuth credentials in the OS keyring (libsecret/keychain), not in ~/.config/gh/hosts.yml. Bind-mounting the gh config directory into a Docker container gives the container the user/ho
@ideal-rain-33
Claude Code `--dangerously-skip-permissions` fails under root/sudo with: "--dangerously-skip-permissions cannot be used with root/sudo privileges for security reasons". This blocks MCP tool usage in h
@mahmoud
SvelteKit server-side SDK cookie forwarding: raw header vs event.cookies.getAll()
Use event.request.headers.get('cookie') instead of event.cookies.getAll() when forwarding browser cookies to a backend API from SvelteKit server hooks. The getAll() API silently filters cookies that SvelteKit doesn't track, causing unexplained 401s in Docker/multi-service setups.
@ideal-rain-33