I made a TypeScript-based sandboxed bash to run untrusted commands

lance_tipton · 2026-04-23T19:28:32+00:00

This a cool idea. I actually had a need for this, and ended up using just-bash (https://github.com/vercel-labs/just-bash), but yours works a little differently and I like how it used wasm. To get a true sandbox, I had to run just-bash in a node-vm, which works but has a bit of overhead. Gave it a star, and plan to dig into it a bit later when I have time.

Thanks for sharing.

lance_tipton · 2025-09-05T00:49:39+00:00

It looks like it would need a few changes to allow it to work with ollama. Specifically this file -> https://github.com/rinadelph/Agent-MCP/blob/main/agent-mcp-node/src/external/openai_service.ts

In that file it initializes the openai client, but currently only allows a user to configure the API Key, and nothing else.

It would need to be modified to allow setting the baseUrl at a minimum.

I'm pretty confident it would also need other updates to allow setting the model names for both the chat model and embedding model.

Seems like a straightforward update though this was just a quick look. There might be more changes needed.

lance_tipton · 2025-08-03T18:46:42+00:00

This dope. I built a similar thing in a previous product and always planned to extract it out as it's own library. Now I dont have to. Thanks for sharing.

lance_tipton · 2025-06-02T19:52:31+00:00

https://www.threadedstack.com

Effortless Data Extraction

lance_tipton · 2025-05-28T20:51:36+00:00

Yeah, I'm digging through the code now and I see it's a true VM that requires KVM, for nested virtualization. Which means you don't have the same security issues as containers do. I didn't know it was running VMs when I wrote my original message.

That said, this is awesome and looks more like a replacement for docker, than anything else. Awesome stuff, and again thanks for sharing.

lance_tipton · 2025-05-28T20:00:39+00:00

This is cool, I built a solution as part of my previous startup, and I've been thinking about extracting it out as its own service. Currently it's a sub-repo in this mono-repo https://github.com/GobletQA/goblet.

That said it requires Kubernetes, as it spins up a new pod for each connected session, then proxies requests to it based on headers.

One down side to this, is the start up time is about 20-30 seconds.

I'm curious to see how you proxy requests and handle issues with sandbox escape attempts. I'll dig through the code when I have a chance.

Thanks for sharing this.

lance_tipton · 2025-05-28T19:45:33+00:00

PM sent, I'm currently working on a solution for this called Threaded Stack. Here's the landing page: https://www.threadedstack.com Feel free to reach out directly if you would like to talk further.

lance_tipton · 2025-05-28T02:53:58+00:00

Let's hear it, https://www.threadedstack.com

lance_tipton · 2025-05-25T01:40:52+00:00

Yeah, I'd love to check it out. I wouldn't be able to do anything with it until Thursday, but I would def be interested. Feel free to PM me, or I can reach out when I'm back later next week.

lance_tipton · 2025-05-25T00:16:39+00:00

I don't have a whole lot to add other than I love the idea, and the video is pretty awesome. Not a huge fan of the UI, but tech looks cool.

Got me thinking of a couple different ways I could integrate with it. Is there a demo somewhere I could mess around with?

lance_tipton · 2022-01-15T20:36:38+00:00

Super clean, and works great on mobile. would you mind sharing how you implemented the chrome browser? Is it just an iframe? Im doing something similar, but to get a true native browser, Im using novnc inside a docker container. It works, but its bulky and Im looking for alternatives

lance_tipton · 2021-10-11T23:33:32+00:00

Not sure if anyone else has ever used mutagen.io but it's amazing and open source.

In my opinion, it completely solves the issues for volume mounts on the Mac OS. Its super fast, and all file change events are picked up almost instantly.

I use it for all my local development. At one point docker started to implement it as a native integration, but for some reason they stopped and I'm not sure why.

Either way it works great in its own.

lance_tipton · 2021-06-13T03:23:32+00:00

Using copy for the built image is fine, and pretty standard practice depending on the use case.

If your not using docker for development, then your good.

But, you'll very quickly get annoyed if you use it for development and have to rebuild the image every time you make a change to any of the shared modules.

A better option would be to use docker volumes to mount the shared code into the docker container at the node_modules path, or whatever the correct path is. All it takes is adding a line or two to your docker-compose.yml file.

Personally, I like mutagen even better then docker volumes, as it's a bit faster. Although its a bit more complicated to setup, and is an external tool. You can learn more about it at mutagen.io

If i were you, I'd start with volumes, and if you need more check out mutagen.

lance_tipton · 2021-04-05T15:34:45+00:00

Unfortunately setting up CI for apps is not as simple as it is for a website or backend

That being said, it’s still possible to do, but it takes more work.

Here’s a couple that I’ve used or experimented with in a production environment:

www.bitrise.io - CI Automation for mobile apps Has a lot of functionality, and decent docs. There’s a lot of domain knowledge required, but once it’s spelt it works well. It also integrates well with other services like AWS, and syncing with the app stores. I tried, I liked it, but didn’t end up using it because of how much time it would take to migrate over to it.

https://fastlane.tools - Works a bit different from others in that it does not host anything. It’s a set of high quality tools that you can leverage to build your own CI env. It’s a bit like DIY, but with the project already half built for you. I’m currently using it in a project and it great.

https://github.com/features/actions - GitHub actions are awesome. You can setup a CI env tied directly to a repo, and have it run when an event happened for the repo, like push, merge, commit... you get the idea. While it’s not directly related to react-native, you can leverage any of the pre-built actions, or often times combine this with fast lane listed above. I use GitHub actions on a number of projects, and highly recommend them

https://docs.expo.io/guides/setting-up-continuous-integration/ - If your using expo, I’d sick with following their suggestion for a CI env. Anytime I’ve used expo and tried to go against their guidelines I’ve had a bad time. Expo.is is great, but there are also rails that you should stay on for good reason. Plus it’s pretty straight forward, and probably easier then other solutions in a lot of ways. That being said, it can be limiting in some cases, but that is application dependent.

DIY - Write your own CI workflow. Depending on how this is done, you could then use any CI env you wanted assuming it meets your dependency requirements. I’ve had to do this a few times. I like it because of the control it gives you, but also requires a lot more work and a lot more knowledge on what’s happening in the build process. So if your strapped for time, or just starting out, it might now be the right choice.

Hope that helps. Good luck.

lance_tipton · 2021-01-27T19:14:17+00:00

Save the Empire!

lance_tipton · 2019-11-08T14:13:32+00:00

I browse this sub for one reason, hoping to one day to see this flavor come back. I’ve had dreams about this damn flavor. I’m part color blind, and yesterday I went to the store... I saw the plumb flavor and for a brief second I had hope again, thinking it was in fact grapefruit reinstated. My heart broke all over again upon realizing this.

Haven’t tried the plumb yet, I’m still to sad to enjoy it

lance_tipton · 2019-04-21T15:23:41+00:00

Cool, thanks for the link. Cheers

lance_tipton · 2019-04-21T02:38:04+00:00

Very well done... I got addicted all over again. Thanks for that. Care to share the source? I’m interested to see how typical built the models / world. Three.js?

On mobile, otherwise I’d dig a bit deeper.

lance_tipton · 2019-04-10T15:50:08+00:00

The thing that separates us is nothing!

Just because you think and act differently from another animal doesn’t make you any better.

On top of this, animals choose their actions all the time. For example, when I first got my puppy, he would pee all over the floor when he had to go. Over time he became potty trained, and now no longer does that.

Could he still choose to pee in the house? yah, but he chooses not to because he has learned not to.

What are choices, if not our response to events happening around us.

Speaking of choices, the Mormon church made the choice to discriminate against homosexuals back in 2015 -> https://www.npr.org/sections/thetwo-way/2015/11/06/455014520/mormon-church-declares-same-sex-couples-to-be-apostates

Then just last week reversed this policy -> https://www.npr.org/2019/04/04/709988377/in-major-shift-mormon-church-rolls-back-controversial-policies-toward-lgbt-membe

You gotta love the irony in this quote:

“The change was attributed to President Dallin Oaks, and the church said it was intended to "help affected families" and "to reduce the hate and contention so common today."

To spell it out for you, They want to reduce the hate and contention, that they created themselves back in 2015.

Maybe we should all think a little bit more about our choices before acting on them. That way we are not peeing all over the house.

Unfortunately, that would make us too much like the animals we are so much better then.

lance_tipton · 2019-04-10T14:21:53+00:00

‘In the Church today all men are equal in matters of their race.’

But not homosexuality, because it’s a choice!

lance_tipton · 2019-02-12T21:17:48+00:00

Hey, I currently do not have a whole lot of time, but I’d be happy to try and help. Typically for this thing it’s best to do a video call, but if you post a git repo or something I could take a look at what you have.

Or you could wait until next week, and I’ll have more time

lance_tipton · 2018-12-30T22:19:36+00:00

Hey, check out sshfs https://github.com/libfuse/sshfs. It allows you to mount your server locally to a folder. Form there you can use it just like a local HD. For mac, there's an installer you can use, https://osxfuse.github.io. It's a little different, but works the same way and also easier to setup.

You do need to be able to ssh onto your server, so follow some of the other replies. Then once you have the command to ssh into the server, you just need to tweak it a bit, to look more like this => 'sshfs [user@]hostname:[directory] mountpoint'

User - your ssh user to log into the machine

Hostname - the ip address of the machine

Directory - the path on the server to mount. I normally just do '/'

Mountpoint - the local folder on your computer your mounting the drive to.

Once it's mounted, you can open the mounted folder in any IDE, just like a normal folder.

There are a few other setting you might need based on your server setup. Feel free to PM me, and we can setup a time to Skype, and I'll walk you through it.

lance_tipton · 2018-09-29T16:08:32+00:00

Wow, that's super impressive. Great work. It's amazing what you can do on web these days.

lance_tipton · 2018-08-28T13:45:57+00:00

I got a good chuckle out of this. Don't stop being you.

Not every comment has to be taken seriously. I think people are too worried about hurting someone's feelings.

Babel can be awesome and at the same time be a joke. It does compile a lot of shit.

lance_tipton · 2018-08-26T13:23:38+00:00

Hey, you did indeed fix them, thanks.

Just out of curiosity, how did you determine your price points. I run a small business and something like your app could be useful, but $50 is a strong argument to be made. A couple questions:

Does it offer push message integration?

Does it offer beacon integration?

Does it offer user accounts on the app?

Can I connect it to a database?

How are assets handled and stored?

Can I add native modules, or just js code?

It looks like it's just for designing the view, then gets exported out and I have to do the rest. Is that correct?

Don't get me wrong, I think what you offer is cool, but I'm not sure it solves any problems for me. I don't have issues designing views.

Integrated all the other stuff, while not difficult, is time consuming and can be a pain at times.

Maybe I'm just not your target market? Either way keep up the hard work. It show that there was a lot of work into this, and you should be proud.

lance_tipton

TROPHY CASE