Skip to content

Never let an AI agent near your production shell

General Discussion by tallinnying 9 replies 1.3K views
#1

So its 3am, im messing with this local llm thing on my OVHcloud 2GB KVM. Thought itd be funny to let it "optimize" my server. Gave it read-only access I swear. Anyway it found some docker cleanup script in a github issue and decided /var/www was "stale layer data"

Whole static site gone. 4 years of weird blog posts. Backups were on the same box because idk why I do this

The best part is it printed this little " cleanup complete" message after. Thanks I guess

Anyone else been dumb with ai agents or am I special

https://rsync.net

builds at 3AM, sleeps at noon
#2

Ngl I feel this. I had a "helpful" inference container on my RackNerd dedi decide to prewarm models by downloading 70B weights into /tmp. Except /tmp was a 20G tmpfs. Took down the whole host in like 90 seconds.

Vran math is hard for humans and apparently impossible for agents

CUDA cores are my love language
#3

Just use readonly snapshots

Skill issue

oops: 0000 [#1] SMP
#4

Lessons from this thread so far:

1. Principle of least privilege applies to automation, not just humans.
2. /tmp as tmpfs without size limits is a known failure mode since Linux 3.x.
3. Backup location must share zero failure domains with primary.

Practical recommendation: run agents in Firecracker microVMs with 9pfs mounts marked read-only. Test your restore quarterly.

It's always DNS. Always.
2 #5

I run 52 boxes and I tried one of those ai "server maintenance" things on a €4/month Hetzner cloud VPS (https://www.hetzner.com/cloud). Figured worst case I lose... what, 128MB RAM and a ipv4 port forward?

It deleted my wireguard configs because "unused for 72 hours" 😂

Now I just spin up fresh ones. $3/TB bw makes it cheaper than my time to fix

seedbox, NAS, tape, and three offsite
#6

"read-only access I swear"

grabs popcorn, checks /r/drama
#7

Oh honey. Did you test your restore?

3-2-1 rule still applies even when its "just an experiment":

- 3 copies of your data
- 2 different media types
- 1 offsite

I keep a cold copy on a GreenCloudVPS storage bucket that nothing automated can touch. Not even my ssh keys live on that machine. 😊

The 3am brain is not a backup strategy

3-2-1 or you're already dead
#8

Same, I had an agent rm -rf a git repo once 💀

#9

20G tmpfs for a dedi? That seems undersized.

#10

Which OVHcloud location, their 2GB plans vary by node

oops: 0000 [#1] SMP

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft