Hacker News new | ask | show | jobs
by chrstphmr 16 days ago
To synchronize with coding agents isolated in KVM/QEMU VMs, I use local bare repos under /home/git/ on the host.

git user is restricted to git-shell and the agent has a passwordless SSH key to access git@host:/home/git/project.git. On the host, I push/pull to git@localhost:/home/git/project.git (sidestepping fiddling with git safe.directory settings for each project).

Seemed like an easy way for local sync without giving the untrusted VM access to a writable shared filesystem?