<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>agents on random thoughts</title><link>https://riad.run/tags/agents/</link><description>Recent content in agents on random thoughts</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Thu, 12 Nov 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://riad.run/tags/agents/feed.xml" rel="self" type="application/rss+xml"/><item><title>Letting an agent run commands as root with a throwaway sshd</title><link>https://riad.run/posts/throwaway-sshd/</link><pubDate>Thu, 12 Nov 2026 00:00:00 +0000</pubDate><guid>https://riad.run/posts/throwaway-sshd/</guid><description>&lt;p&gt;I wanted a coding agent to run a few commands as root on a server. The usual options all bother me:&lt;/p&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;&lt;strong&gt;Give it the password.&lt;/strong&gt; Now it has the password, forever.&lt;/li&gt;&#10;&lt;li&gt;&lt;strong&gt;Add a &lt;code&gt;NOPASSWD&lt;/code&gt; rule to sudoers.&lt;/strong&gt; Permanent config, and it applies to every process of that user, not just the agent.&lt;/li&gt;&#10;&lt;li&gt;&lt;strong&gt;Share a tmux session.&lt;/strong&gt; The agent has to scrape the screen and guess the exit code.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;p&gt;What I wanted was closer to this: I start something on the server, the agent can run commands while it&amp;rsquo;s running, and when I press Ctrl-C the access is gone.&lt;/p&gt;</description></item></channel></rss>