No root, no SSH, no mounting the filesystem @VMwareTanzu
No root, no SSH, no mounting the filesystem  @VMwareTanzu
Uploaded August 2026 | Updated September 2026, 9 minutes ago
“Security has been for a long time a secure by default, which basically says: hey, you can secure it. Here’s all the options.” David Zendzian on the two-word flip that runs through the whole episode. Default secure is the opposite - the platform already made the call, and changing it means acknowledging that you did. Before he gets there he lists what that looks like in practice: you can’t run as root, SSH and remote access go off easily, mounting filesystems is restricted, and there’s no secret sprawl because the database credentials are the platform’s problem rather than yours.

Clipped from a conversation on containing an AI agent that got loose, with David Zendzian and @thecote on Tanzu Catsup.

Full episode: youtube.com/watch?v=lyar-Hndkxg

Interested in a platform that can help you with enterprise-y excellence? Check out: vmware.com/products/app-platform/tanzu

Tanzu Catsup is a weekly conversation about platform engineering, cloud-native operations, and building software in large organizations…and, of course, AI.

Check us out Fridays at 10am US Eastern/4pm Amsterdam time! In YouTube: youtube.com/playlist?list=PLAdzTan_eSPSlg3nySSAI7DjrbN2Bt56r

Hosts: @thecote and David Zendzian
No root, no SSH, no mounting the filesystemThat 8.6 vulnerability isn’t an 8.6 in your environmentWhat are Intelligent Apps? Understand the difference between GenAI vs Agentic AI appsSecure All the Things with Spring SecurityDoes Platform Product Management & Design Really Happen? Or is it all just platform engineering?More expensive than you think: building an internal developer platformNavigating the Application Process: A Step-by-Step Guide with Application AdvisorSurvival Guide to Continuously Align and Upgrade Your Spring DependenciesSpring Boot Governance StarterDemystifying the Agentic Loop: Building Safe Server-Ready Agents with SpringWhats new with RabbitMQ 4.1Build apps, not containers
VMware Tanzu |

No root, no SSH, no mounting the filesystem

SHARE TO X SHARE TO REDDIT SHARE TO FACEBOOK WALLPAPER