Hacker News

Subscribe to Hacker News feed
Hacker News RSS
Updated: 29 min 14 sec ago

Manifest Man

Mon, 07/13/2026 - 6:40pm
Categories: Hacker News

Lobste.rs is now running on SQLite

Mon, 07/13/2026 - 6:35pm

Article URL: https://lobste.rs/s/ko1ji1

Comments URL: https://news.ycombinator.com/item?id=48899847

Points: 10

# Comments: 0

Categories: Hacker News

Ask HN: How do you troubleshoot desktop Linux crashes/freezes?

Mon, 07/13/2026 - 6:25pm

I've been using Linux all my life. I’d like to be able to claim that it’s stable, but that’s not my experience :) So I’d like to get better at recovering from freezes and crashes, and finding the root cause.

I make extensive use of Ctrl+Alt+f3, and magic system request keys (Ctrl+Alt+PrtSc+f; Ctrl+Alt+PrtSc+reisub). But often the system is too far gone to drop to a virtual terminal. In these cases, I usually try to find clues in dmesg/syslog/journalctl.

The bulk of issues seem to be caused by Nvidia GPUs, and suspend.

What are your go-to commands for recovery? And, when that isn't an option, how do you post-mortem after rebooting?

Comments URL: https://news.ycombinator.com/item?id=48899736

Points: 2

# Comments: 0

Categories: Hacker News

Ask HN: AI Agent and harness containerization/security recommendations

Mon, 07/13/2026 - 6:19pm

Hello HN crew -

I am seeing the tendency for people to allow AI agents to access local project & user folders, and beyond (operating system files).

I thought to ask the question: How can we best use AI tools safely - where the workflow often runs local system commands and network commands - to protect the integrity of our systems & data AND be easy enough to use productively?

Comment structure idea:

Operating system / Agent harness / Agent / Security strategy & tool stack / Workflow

To give some examples: I am currently using OpenCode (+DeepSeek) on Linux Mint Debian Edition (LMDE), and I notice that the Agent & harness is frequently asking to create files in /tmp/ - I usually forbid this, and instruct it to only use files in the current folder. I would rather that the tool ONLY have access to a given project folder (~/Projects/PROJECT-NAME) in a system-enforced way. However, I see that the agent often wants to run system commands (like `ps` to debug a local dev server, `pandoc` or `ffmpeg` for file conversion, etc). This starts blurring the line - so I'm thinking that in order for the AI agent to be useful, I can consider giving it access to an isolated operating system - leading me to think about Virtual Machines, Docker containers, and so on. That introduces complexity like, "Should I be using shared folders between my system/VM?" etc.

Would love to hear what's been working for you, the "ideal" state, and practically how we can implement it.

I ought to mention that I'm frequently teaching technology (including AI) to somewhat newbies - so I am trying to find that balance, that lets them get easily something done effectively, but gives them security/integrity practices by default starting off, so they don't get into an awful jam ("The AI deleted my project/computer!").

Thanks!

Comments URL: https://news.ycombinator.com/item?id=48899674

Points: 2

# Comments: 0

Categories: Hacker News

Pages