Docker containers look like tiny Linux machines, but they are processes assembled from namespaces, cgroups, layered filesystems, security filters, and a low-level runtime. This beginner-friendly tour explains what Docker really does and why its architecture feels so strange.
A playful qBittorrent and Jellyfin incident reveals a serious homelab lesson: shared folders, not rogue software, often define the real security boundary. This guide covers staging directories, read-only mounts, non-root services, remote access, and safer update habits.
A backyard bird identification system can start with hardware you already own. BirdNET-Go reads audio from RTSP security-camera streams, runs local AI, tracks new species, and sends alerts to Discord or a smart home.
Docker Sandboxes (`sbx`) runs AI coding agents inside isolated microVM sandboxes so they can work autonomously—installing packages, editing configs, and even running Docker—without exposing the host system. You can control network access and choose workspace boundaries (direct mount or clone mode).