Yuval
I've been writing code since 1996, and infrastructure code since around 2011. The work here is Kubernetes and containers, and agent networking, security, and sandboxing.
Tools & Labs
Posts
A desktop environment for AI agents, in one Dockerfile (locally and on Agent Substrate)
Claude Code, Chromium and Chrome DevTools MCP on a headless Wayland desktop you can watch over noVNC, running in a Substrate actor that suspends and resumes mid-task.
Sandbox matrix: what isolation do you actually get?
What a process, a rootless container, runc, gVisor, Firecracker, and Kata actually separate for an agent: filesystem, network, kernel, and privilege.
Debugging kubernetes service account RBAC
This script breaks on Kubernetes 1.24 and later, and the kubeconfig it writes holds a token that does not expire.
…Inside packer-builder-arm-image
Update (as of Nov 10, 2026): this project now lives on as packer-plugin-arm-image. The repo has 436 stars, and the last commit on master was Oct 1, 2026.
As someone who has worked embedded project on occasion, I needed a consistent way to automatically prepare embedded images, pre-loaded with code (especially in the world of cheap SD-cards). The challenge is of course, that embedded images use a different CPU architecture. That's why packer-builder-arm-image was created.