Yuval
I've been writing code since 1996, and infrastructure code since around 2011. The work here is Kubernetes and containers, and agent networking, security, and sandboxing.
Tools & Labs
Posts
Debugging kubernetes service account RBAC
You can use the kubectl auth can-i to debug access issues related to yourself.
but what if you need to debug access issues for your application running in kubernetes?
A desktop environment for AI agents, in one Dockerfile (locally and on Agent Substrate)
Claude Code, Chromium and Chrome DevTools MCP on a headless Wayland desktop you can watch over noVNC, running in a Substrate actor that suspends and resumes mid-task.
Sandbox matrix: what isolation do you actually get?
What a process, a rootless container, runc, gVisor, Firecracker, and Kata actually separate for an agent: filesystem, network, kernel, and privilege.
Inside packer-builder-arm-image
As someone who has worked embedded project on occasion, I needed to a consistent way to automatically prepare embedded images, pre-loaded with code (especially in the world of cheap SD-cards). The challenge is ofcourse, that embedded images use a different CPU architecture. That's why packer-builder-arm-image was created.