Tech & AI @Docker, ex: co-founder at @AtomicJarInc (acquired by @Docker), @VMwareTanzu, @pivotal, @AWS and @Microsoft

Joined April 2007
Harbor 🤝 Docker Sandboxes
Agents that can edit files and run commands can also game their own evals. Harbor + Docker Sandboxes fix that: every eval task runs in an isolated microVM, with network policies for fair, reproducible runs. bit.ly/4B8xf9Z
1
5
45
1,675
Software factories are popping all-over. Today’s problem is securing them. Our reference architecture sets four boundaries (sandbox, network, supply chain, identity and access) enforced outside the agent. With @ianlivingstone @vtahowe @AhmadNassri @williammanning
Agents are building software. Who's securing the factory? Agent Baseline participants publish a reference architecture for securing agentic software factories, with controls enforced by the environment, not the agent. Learn more in the white paper → bit.ly/4dxr05M
1
1
9
348
The capabilities that make an agent useful are the same ones that dissolve the walls around it. The boundary has to be deterministic. Applying this to software factories. Show & tell Oct 13 NYC with @irlivingstone @AhmadNassri @dickhardt @zacharydhamilton moderated by @vtahowe 👀
"You can argue that a developer working in your organization has morals. It is very difficult to argue that an agent does." - @ealeyner VP Product Strategy @Docker Constrain is 1 of 6 Agent Baseline outcomes, and Eli's applying it to something bigger. Out soon 👀
2
1
6
334
We'll dig into this live in NYC on Oct 13 after @aiDotEngineer with @ianlivingstone, @AhmadNassri, @ealeyner, @DickHardt, @braintrust, @Docker, @SocketSecurity, @KeycardAI At Elsie Rooftop with food and drinks 🥂✨🗽 luma.com/keycard-rg1c
1
3
129
36h trip to Amsterdam for AGNTCon . Double red-eye. Just practice for @HackTheNorth. If I'm judging a 36-hour hackathon where everyone's pulling all-nighters, only fair I show up having done my own 🤣 Come find me — I'll be the one with the extra large coffee.
4
261
Astra launch is genius positioning. Model is clearly an advance in coding,etc.. but the marketing, demos and public videos showcase computer-use.. (while never mentioning it by name)
1
1
13
873
Agents are making the news for escaping sandboxes so we asked @ealeyner, VP Product Strategy at @Docker, what it takes to contain an agent. His answer, in summary, is it requires defense in depth. Worth a listen if you're looking to put your agent in a box and keep it there.
2
2
14
1,212
Someone should have told me not to argue about morals in Sin City - on the stage of Marquee nightclub 🤣 - i did it anyway.
"A developer has morals. It's very difficult to argue that an agent does." @vtahowe & @ianlivingstone (@KeycardAI) @ealeyner (Docker), and Ezra Tanzer (@snyksec) on agent identity, delegation patterns and what real governance looks like when agents are delegating work to other agents: Watch the full panel: youtube.com/watch?v=Da-GgBgm…
1
8
283
Amazing to see all the success of @jmorgan and @mchiang0610 - what a rocketship they built at @ollama
Big day for Ollama! When we started, open models and the open source AI ecosystem were in their early days with few believers. Our belief in open source has never wavered. With today's fundraising announcement and our 9M+ active builders, we’re ready to scale open models into AI that you can own. All aboard open models! 🧵
3
288
End of an Era. Artificial artificial intelligence no longer needed when real AI is decent? Can this mean that my code would finally be retired?
AWS says Mechanical Turk will no longer accept new customers and that it is placing the crowdsourcing service in maintenance, signaling its future retirement (@ssharwood / The Register) (Visit Techmeme dot com for the link and full context!)
1
3
379
Amar has been the quiet GOAT of the Toronto ecosystem for many years! Lucky to be able to call @avarma for his advice - he always picks up, cares and dispenses wisdom generously. Thank you for your friendship @avarma and for all you do.
For years, @avarma has been one of the most important people in Toronto tech without many outside the ecosystem fully understanding why. He helped build Xtreme Labs. Autonomic sold to Ford. Xtreme’s story even brushes up against Tinder. He has been described as “sort of the king of Toronto.” Others put it more bluntly: “What people don’t realize is that he was carrying Toronto and KW tech on his back.” Now, with Mantle, he is building again. My profile:
8
886
Eli Aleyner retweeted
This is exactly what I wrote about. Jews are being targeted simply because they are Jewish. Not politics. Not policy. Just identity. If that doesn’t alarm you, you’re not paying attention. Or you’re choosing not to. nationalpost.com/opinion/can…
The synagogue I attended as a boy and youth, where I was bar mitzvah'd and received my primary Jewish education, now under gunfire in once-peaceable North York, Ontario.
41
93
4
927
36,550
Eli Aleyner retweeted
Introducing Oz: the platform to orchestrate agents in the cloud. Spin up hundreds of agents from your terminal, browser, the API, or your phone. Each agent gets a @docker environment to build, test, and write PRs. Come back from your lunch break to code that’s ready to merge.
106
163
90
1,430
2,372,426
Do you leave your unlocked laptop unattended at a coffee shops? Yet, this is what we do when we run AI agents in yolo mode.. 3Cs is a framework of how to think about AI Agent security: Contain, Curate, Control -> docker.com/blog/the-3cs-a-fr…
3
1
3
579
I Am a Proud Jewish Canadian. This Is What Has Changed.
Harley Finkelstein: Canadian Jews are being targeted simply because they are Jewish nationalpost.com/opinion/can…
233
227
27
2,327
348,319
We’re partnering with @Docker to make software development safer for everyone! Socket Firewall Free is now bundled into Docker Hardened Images, adding build-time and dependency-install supply chain protection for @nodejs, @ThePSF, and @rustlang socket.dev/blog/socket-firew…
2
3
541
Docker is changing the game. Starting today, the Full catalog of (over 1000) Docker Hardened Images is FREE for All. Base Images, Helm Charts, MCP Servers, all of it. No gimmicks, no trials. Free, Apache2. 🎉
🎁 What’s on your dev wishlist? How about secure, production-ready base images… free and open source?! Docker Hardened Images are now free for everyone, & backed by an Apache 2.0 license. Read more: bit.ly/4rYoCKI #DHI #OpenSource
1
1
10
3,172
Longer agent tasks depending on Testing to be effective as per @pirroh - 🧐 as described at #aiecode
2
104
Eli Aleyner retweeted
Mocks are fine… until they lie. 😅 Enter Testcontainers: run real services in containers for integration tests that actually reflect production. Your tests deserve better—learn how 👉 msft.it/6018t6zcG #DevOps meets reality ✅
3
20
1
120
10,347