Repository navigation
docs(blog): add giving an AI agent its own Linux user post - #777
Open
steffenmaechtel wants to merge 1 commit into
Open
steffenmaechtel wants to merge 1 commit into
steffenmaechtel wants to merge 1 commit into
Conversation
Short Summary (TL;DR): Adds a community blog post by Steffen Maechtel on running a coding agent (opencode) as its own Linux user on a WSL2 machine: dedicated user without Windows interop, DDEV re-executed as the agent user through a sudoers helper, a rootless Docker daemon owned by the agent, and the working tree shared through a group. The daily workflow stays the same; the agent loses access to SSH keys, /mnt/c, and any root-equivalent socket. ## The Issue - New content, no issue. ## How This PR Solves The Issue Four new files: the post (src/content/blog/giving-an-ai-agent-its-own-linux-user.md), a new author entry (src/content/authors/steffen-maechtel.md) with avatar (public/img/avatar/steffen.jpg), and a hand-written SVG feature image (public/img/blog/2026/11/giving-an-ai-agent-its-own-linux-user.svg). ## Manual Testing Instructions Open the PR preview at REPLACE_ME and compare with https://ddev.com/blog/: the /blog/ listing (card with feature image, DevOps category, Nov 9 date), the post page (the napkin ASCII diagram renders in its code block, the author box shows Steffen Maechtel with avatar), and /blog/author/steffen-maechtel/. ## Automated Testing Overview No new code. prettier --check, textlint, and npm run build pass locally; astro-link-validator found no broken links; the three external links (opencode.ai, docs.ddev.com docker-installation, github.com/steffenmaechtel/opencode-permissions-kit) return 200. ## Release/Deployment Notes pubDate is 2026-11-09 and must match the merge day: the site has no scheduling, pubDate only sorts posts, so a future-dated post is visible immediately after merge. It will be adjusted if the merge moves. 🤖 Developed with assistance from [OpenCode](https://opencode.ai)
|
🌐 Fork Preview for PR #777 https://pr-777.ddev-com-fork-previews.pages.dev This preview updates automatically when you push changes to your fork. |
Member
|
I asked Claude about AI security concerns on my Linux (I had forgotten about this PR), and it answered:
And then I remembered this PR 🙂. I think this approach makes sense from a DDEV user's perspective, and the article itself should have cross-links to #778 (once one of them is merged) - an alternative approach for isolation. I haven't reviewed it yet. |
stasadev
self-requested a review
November 12, 2026 15:12
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Short Summary
Adds a new community blog post by Steffen Maechtel on running a coding agent (opencode) as its own Linux user on a WSL2 machine. Related to: ddev/ddev#9031 (comment)
Rendered at https://pr-777.ddev-com-fork-previews.pages.dev/blog/giving-an-ai-agent-its-own-linux-user/
Infos
The text was translated entirely using AI. The source text and information were written in German. The AI has generated its own phrases based on the information. Some of my colleagues have checked it, and we have made changes in a few places.
Four new files: the post (src/content/blog/giving-an-ai-agent-its-own-linux-user.md), a new author entry (src/content/authors/steffen-maechtel.md) with avatar (public/img/avatar/steffen.jpg), and a hand-written(AI) SVG feature image (public/img/blog/2026/11/giving-an-ai-agent-its-own-linux-user.svg).
Tests
prettier --checkandtextlintare greenRelease/Deployment Notes
pubDate is set to 2026-11-09, need to be adjusted