James Washington
writing about archive utils free game ideas replays
Technique

OrbStack container gotchas on a Mac server

Hard-won traps running ~30 containers on a Mac.

The server in the closet

how it works

host network mode proxies TCP only (UDP vanishes); host-side sqlite .backup of a bind-mounted DB wedges the container over virtiofs; SQLite on APFS bind mounts corrupts (use named volumes); VM memory ratchets to its cap; external /Volumes mounts go stale.

Technique: A pattern or hard-won lesson, written down so it isn't learned twice.

The code for this one lives in a private repo. This page explains the idea so you can build your own.

dockermacosorbstacksqlitetechnique

related

  • One Keychain item for all shell secrets (base64 or bust) Technique Keep every API key in one locked vault instead of in shell config files, without slowing down new terminals.
  • Split court-docket watcher (homelab fetch + Worker parse/watermark) Automation Checks a public court docket every few minutes and pings your phone when something new is filed.
  • Mac Mini homelab Document A home server that runs the household's smart-home, AI chat, monitoring and backup services.
  • LiteLLM-as-container job engine behind a DO binding API The backend that runs paid AI document jobs for a small SaaS.
  • Headless shells need 0600 token files Technique Remote terminal sessions can't open the Mac's password vault, so they need separate locked-down token files.
← everything I've built
© 2026 James Washington
github twitter rss