Show Notes
Bret and Nirmal discuss the intersection of AI agents and DevOps with Solomon Hykes, co-founder of Dagger and Docker. Solomon introduces Container Use, an open-source MCP server that gives coding agents isolated, containerized environments to work in, solving the critical problem of agents interfering with each other when running on the same system.
😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs.
Also in this episode, we explore how AI agents are forcing a fundamental shift in CI/CD practices, with Solomon making the case that traditional CI/CD as we know it will disappear because agents develop 100x faster than humans and can't tolerate slow, unrepeatable build processes. Container Use enables developers to run multiple coding agents in parallel, each in their own sandboxed environment.We examine the emerging MCP ecosystem and its potential trajectory, drawing parallels to how containers evolved from developer tools to infrastructure platforms. Solomon warns about the rapid "gatekeeping" phase already happening with MCP, where vendors rush to lock down and monetize what started as an open developer innovation space. Other topics we touch on are: the four core components of agentic workflows, security challenges with untrusted text injection (the new "SQL injection" problem), token cost management, and the importance of balancing proprietary AI services with open-source infrastructure layers.
Check out the video podcast version here: https://youtu.be/ZSbCPIAKGlc Creators & Guests
Bret Fisher - Host
Beth Fisher - Producer
Cristi Cotovan - Editor
Nirmal Mehta - Host
Solomon Hykes - Guest
(00:00) - Intro
(05:34) - MCP Server and Integration
(15:20) - Future of CI/CD and Agentic Workflows
(18:45) - Four Areas of Concern
(24:38) - The New Gatekeepers
(45:32) - Token Costs vs Efficiency
(47:12) - Balancing Open Source and Proprietary Systems
(47:50) - The Rise of Kubernetes and MCP
(48:44) - Security Concerns with LLMs and MCP
(54:02) - Advice for Developers in a Rapidly Changing Landscape
(57:34) - Introducing Container Use into Your Workflow
(01:00:52) - The Future of AI and DevOps
(01:07:40) - Coding Agent Blind Spots
(01:12:06) - Scaling with Dagger and Kubernetes
(01:14:10) - The Dagger Community
You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news! Grab the best coupons for my Docker and Kubernetes courses on Udemy. Join my cloud native DevOps community on Discord. Grab some merch at Bret's Loot Box Homepage bretfisher.com
★ Support this podcast on Patreon ★
More from Agentic DevOps : AI Engineering for Infrastructure
The OpenAI Hugging Face hack. The Anthropic testing failures. Listen to the security and ops experts, not lab researchers. I walk you through the production failures that allowed OpenAI’s models to access the internet, and what we can learn from the last few months on how to protect our systems and data. Let’s stop debating imaginary outcomes and start working through that security backlog in our infrastructure. I agree with the labs needing to slow down, but not because I believe AI will do uncontrollable harm on humans, but because the labs clearly need better production security and ops teams and more advanced lab infrastructure that’s been properly hardened. They also need to become a production ops security innovator and share that knowledge far and wide. Watch the video of this episode.
Luke Hinds, co-founder of nolabs Inc. and the nono project, joins me to dig into AI agent sandboxing with the nono CLI. It's been my go-to sandboxing tool for local agent use, but I know there are more features I should be using, like secure secrets injection and egress URL path control. Watch the video of this episode.
My friend Mike Rollins joins me for a chat about what it’s like leading a software engineering team that doesn’t read code anymore. Click here to watch a video of this episode.
A deep dive into GitHub’s Agentic Workflows feature, with Don Syme of GitHub Next & Peli de Halleux of Microsoft Research. Check out the video podcast version here: https://youtu.be/zmM8VISTOwo
Bret’s joined by the Anyshift.io co-founders, Roxane Fischer and Stephane Jourdan to discuss how an always-on SRE agent can help you proactively find risks and avoid incidents.