Using incus heavily on Omarchy here and love it. I created a script to read yaml configs and create ephemeral incus containers with certain capabilities and certain directories mounted within. It's a wonderful experience for sandboxing Claude Code.
I have tried both Django and Rails for this, and honestly, very surprisingly, Rails did much better, at least with Claude Code. This is for a rewrite of an old .net application. Claude nailed it almost perfectly with Rails, but struggled with Django. YMMV.
After reviewing the available options over a year ago, I decided to implement our own migration tool using https://dbup.readthedocs.io/en/latest/ (we have a pre-existing, sizable .NET codebase). It's worked perfectly for our needs.
And here I am looking at the Windows 11 machine I keep around to play a few games that has forced to me to do a complete reinstall four times because Windows updates broke it overnight, even though I had auto-update turned off...
Omarchy uses limine plus snapper to give you (by default, but configurable) five system rollbacks. Each time an update happens, or a package is installed, a bootable btrfs snapshot is created. I've leveraged this myself to after an update caused an issue with nvidia drivers.
I don't mean this to come across as snarky, but before you spread misinformation, you might want to inform yourself.
The elapsed time from burning the ISO to productive development environment is impressive. Also, folks worry so much about customizing it, but you don't have to. And hyprland and Omarchy almost entire driven by text files, so Claude Code and its ilk are super effective at customizations.
For me, it's not about ricing. I find Omarchy to be an incredibly productive setup, from the launchers for webapps to the focus on TUIs.
I'm conflicted about the drama and still learning more about it, so not ready to draw a conclusion yet. But Omarchy is definitely a very, very fun experience for me.
Granted, I've heavily customized it and am using hy3 for i3-like capabilities, so whatever path out of this for me is likely to i3wm or sway.
And, fwiw, I've been running linux since the late 90s, and most of that as my primary OS (with a decade-ish period of macOS I'd rather forget). I know what I'm doing.
This is gold. Thanks so much for sharing. Being able to put claude in handcuffs and use --dangerously-skip-permissions without concern is a game changer!
So do you configure firejail to give each app their own separate, permanent home directories? Like "firejail --private=/home/user/firejails/discord discord", "firejail --private=/home/user/firejails/chromium chromium", and so on?
As a long-time Linux full time user, I begrudgingly switched to a mac for company reasons around a decade ago. I've lost a little bit of light in my life ever since, and was constantly fighting macOS to just let me work the way I want to.
I've switched back full time to Omarchy, and couldn't be happier. I'll likely eventually land back on NixOS with hyprland and my custom configs, but for now, Omarchy is wonderful.
DHH is just the salesman a Linux distro like this needs, and the combination of smart decisions (most menu'd commands just call out to shell scripts behind the scenes) and text-based config make Omarchy a techie's dream.
Add something like claude code in your ~/.config directory and you have almost instant and infinite ability to customize.
As someone who switched about a year ago from FreeNAS to Synology, this is extremely disappointing. Synology has been a great experience up to this point. I have pools, one on supported WD Reds, and the other on a hodge podge of drives I had collecting dust.
Both pools have been very reliable so far. But if they continue down this path, I'll seek a different solution.
Looks very nice. I wrote a similar tool to this back in the late 2000s in rails, and it was fundamental to our organization at the time. I've been looking for alternative at my new company. I'll definitely spend some time with your app.
For a home-rolled solution, I use a GE CYNC ST19 Edison Style bulb in a socket right outside my office door. I have it configured through Home Assistant (https://www.home-assistant.io/), and then use Hammerspoon (https://www.hammerspoon.org/) on my macbook to make an API call to Home Assistant when the camera state changes.
If my camera turns on/off, so does the light bulb. Works really well for letting my family know I'm busy in meetings.
I'm a CIO/CTO in a similarly-sized (revenue, although we have roughly 900 employees) company in the distribution space. We do almost all development internally, but I have been developing for decades so I know what good looks like. I've had good luck attracting a jolly band of developers and devops.
I despise outsourcing development to third parties unless I absolutely have to. The quality of work is just better with the internal devs, and we retain the knowledge of our entire stack.
Our software is the life blood of our business, so that's a big win for us and it sets us apart from our competitors. I'm able to outpace them from an innovation perspective.
All that said, unless you're very technical or you have a strong IT executive on your team, this approach won't work.