
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
dat-container
Advanced tools
Container runtime for Dat
npm install -g dat-container
Requires systemd-nspawn and fuse installed.
One a host (linux) machine allocate a sparse file, format it, mount it, and install a distro inside, and unmount it
# installing arch from arch
fallocate -l 1000000000 arch.img
mkfs.ext4 arch.img
mkdir -p mnt
sudo mount arch.img mnt
sudo pacstrap mnt base
sudo umount mnt
You can now boot this image using systemd-nspawn using the following command to modify it more
sudo systemd-nspawn -i arch.img -b
When you are done add this image to a Dat (you can add more than one) and start sharing the Dat
You are now ready to boot the image over Dat. On a guest machine simply install dat-container and run
# do a full container boot
sudo dat-container -i arch.img --key <dat-key-from-above> -b
That's it! The image will now live boot over the network!
To run a single command (also live)
# run uname -a
sudo dat-container -i arch.img --key <dat-key-from-above> -- uname -a
Any argument prefixed with --sn- is automatically forwarded to systemd-nspawn.
This tool needs more cool options, features, and documentation. All help is appreciated.
Don't worry. All files are usually very sparse and small on disk even though they look like they take up gigabytes of space. To see the actual size run
# show actual blocks used on disk as the first column
ls -shl
MIT
FAQs
Container runtime for Dat
We found that dat-container demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.