frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Show HN: GhostBox – Borrow a disposable little machine from the Global Free Tier

https://www.ghost.charity/
106•keepamovin•5h ago
I built this because I was always creating machines on GH actions to test builds on different OS, and I wanted a tight CLI that could do it. I always saw Actions as this great resources and ephemeral machines you could do dev work in just were a natural way for me to work, so this grew out of that workflow.

I didn't expect it to blow up, so it wasn't 100% finished when I posted it. But it should stabilize pretty quickly.

Happy to know what you think and talk about it.

Comments

Imustaskforhelp•5h ago
Thanks, I know exactly something which has been in my mind to build which can be made possible with this.

Basically any golang/any language cli application preferably-static can be dropped and ran in ghostbox plus xterm in browser (and additionally cloudflare tunnels) or perhaps directly to give a web link.

Anyone can then click on that web link to then try out the cli application. Think jujutsu and others too and they can do this upto 90 minutes.

Feel free to pick up on this idea as more importantly than not, I would personally love to see an idea like this, even something with asciinema to finally show how an app feels and looks.

Can you please tell me more about what is the structure behind Ghostbox and on what service does it run upon? Hetzner/OVH or something else? I would be interested to know more about the infrastructural decisions behind it and does it run on firecrackers, quite so many questions!

This is a really cool project, thanks for making this and have a nice day!

keepamovin•4h ago
Thanks, bud. Right now it just uses spins up an ephemeral machine from GitHub Actions. I mostly used GH myself so have not added any more providers yet - but the Global Free Tier is trending up. Will add more in future.
throwa356262•5h ago
@keepamovin this looks cool, but notice that your README and github links are ghosting us (404)
keepamovin•4h ago
Thanks. I posted and really didn't expect any points. So checking back after 40 minutes and seeing it blown up was quite a shock. I'm working through all the things people have pointed out!
anonymouscaller•5h ago
Couldn't get it working on MacOS or Linux:

$ curl -fsSL https://www.ghost.charity/install.sh | bash Checking for Ghostbox updates... curl: (22) The requested URL returned error: 404 Could not fetch ghost-linux-x64.tar.gz from https://github.com/DO-SAY-GO/ghostbox-releases/releases/late...

gbraad•5h ago
Perhaps removed?

"There are spare machines everywhere. GitHub Actions is only the first place ghosts come from." ... seems a bit odd.

keepamovin•4h ago
Should work fine now. REpo was not public at first.
colesantiago•5h ago
Its great that this is free for disposable use.

We need more of these. There are too many sandboxes that charge insane prices.

Curious what this runs on though and it would be great if this was completely open source.

Great work!

jetbalsa•4h ago
I know a guy who gets a bunch of old hardware as a recycler, We made the Shell On Demand Appliance for DEFCON[1] awhile back and would love to expand it, but power/internet would just cost too much. we have the hardware and software to do this. just not the long term recurring

[1] https://forum.defcon.org/node/246908

fhn•5h ago
this is exactly what a bad actor would do to temp the greedy. If they are providing free ssh access, why not just use an ssh client instead of curl|sh? That's crazy! And free compute is even crazier. I guess they could make money based off training or selling whatever you put on there.
Imustaskforhelp•5h ago
To be honest a bit true, I use exe.dev and it prefers to use ssh or or just directly within the browser itself and that certainly helps with the trust (also exe.dev is awesome, +1 to it using since day 1)

Also the repository itself doesn't exist anymore as it shows me a 404, I haven't run any code or anything but it would definitely be nice if keepamovin talks more about it as the idea itself is nice but yeah.

https://web.archive.org/web/20260501150640/https://github.co...

keepamovin•4h ago
I'm not trying to make money on this. I just think it's a useful utility. The SSH tunnels are provided by cloudflared and tor (as a backup, CF free tunnels sometimes flake).
cobertos•5h ago
Won't the supply-side incentives misalign with demand-side's desires in this case?

If you choose a specific company's free tier, you can rely on reputation and switch if they misbehave (e.g. they exfiltrate your secrets, log all your activities, build a profile on your workload behavior, etc). But if you don't know where your workload being deployed, the operator has less incentive to treat your compute with respect.

Means this is really only useful for nearly-public workloads, where tampering is not a critical failure mode.

rvz•5h ago
That is why unless you own it yourself, a "free tier" is not truly "free".

This service uses GitHub Actions and it is likely against GitHub's terms of service and GitHub can pull the rug if they wanted to.

If you don't own it, there is always a catch when something claims to have a "free tier". This is one of them.

keepamovin•4h ago
I think there's a case for self-hosted runners, and right now it only supports the basic ubuntu, macos and window latest. But I see a path to adding the larger paid runners as part of the toml for machine shape in future.
rao-v•5h ago
Is there a meaningfully useful version of automatically write to an encrypted disk / RAM that could be used with a random cloud instance? Obviously the decryption key would be in RAM somewhere but as a short term best practice it might be somewhat useful
pvitz•5h ago
Segfault provides something similar with a direct ssh connection: https://www.thc.org/segfault/
keepamovin•4h ago
That's cool, thanks for sharing that.
rvz•5h ago
So that's why we will see GitHub Actions continuing to go down so frequently every day of the week. From their "terms of service" [0]

> Ghostbox is software for launching short-lived development machines using third-party infrastructure such as GitHub Actions, tunnels, shells, agents, and related developer tools.

So this will go down, just like GitHub Actions since it abuses the subsidised free tier of GitHub Actions to run a service like this and it is likely against the GitHub TOS.

[0] https://www.ghost.charity/terms

D2OQZG8l5BI1S06•5h ago
Weird to have a .charity TLD but promote abusing Github Actions as free compute.
sikozu•4h ago
That's so weird.
CodesInChaos•4h ago
Volunteering the money of others is a favourite human pastime.
keepamovin•4h ago
Honestly, I was tyring to pick a name, and I picked the one that made me laugh the most. Sparks joy. Because that's what it really is: a charity of ghost machines. GH provides these amazing free compute minutes, and this is a way to use them to focus on dev tasks.

IN future, I think I'll add other providers.

gslepak•44m ago
You're not running a charity. You're probably violating their TOS and abusing the good will they're putting out towards open source projects.

I can't believe it but your little project has for the first time in my life put me in the position of defending Microsoft. I hope they shut it down ASAP.

kitchi•5h ago
Looks like the Github repo has already been nuked, I'm guessing for violating ToS on Github actions?
simple10•5h ago
The website has a broken github link. Repo is here https://github.com/DO-SAY-GO/ghostbox-releases but it's only a README.md with binary releases. No public source code?
mbreese•5h ago
The readme says it’s proprietary code that’s free to use during a “preview”.

Odd to be so tied to GitHub for proprietary code.

rithdmc•4h ago
GitHub is one of the most readily accessible sources of parasitic compute resources.
ktm5j•5h ago
Yeah this seems pretty sketch.. I would not run that binary.
keepamovin•4h ago
I don't believe in releasing source anymore after years of doing it. It's closed source, Rust binary, proprietary but free software offered as a utility. It's the same patterns as used by coding agents and many other CLI tools.
sikozu•4h ago
https://github.com/crisdosaygo/ghostbox-home-reveal This looks more promising?
dunham•4h ago
Yeah, I think that's what the program creates in your github account. I see the source to those files embedded in the executable. (I'm not running the executable, but I downloaded the linux one to my mac to take a look inside.)
keepamovin•4h ago
Sorry I forgot to set it public. It's fine now.
peter_d_sherman•5h ago
An interesting set of ideas!

The broader concept seems to be "ephemeral environments", which is related to sandboxing, which is in turn is related to testing/debugging...

Related:

https://github.com/topics/ephemeral-environments

https://blog.invisiblethings.org/papers/2015/state_harmful.p...

6r17•5h ago
I'd be worry about security tbf - this sounds cool until it's used to host some weird shenanigans and nobody has any kind way to tell who did what
sbuas•5h ago
Where is the source ? This looks fishy, no way I'll run this bin..
beardsciences•5h ago
This idea is great in concept, and I think it's important to state that, but the GitHub Actions stuff is against TOS iirc + they will need to address that pretty quickly.
o10449366•5h ago
As unreliable as GitHub actions are, this is what ruins nice things (free for public repos) for the rest of us.
orliesaurus•5h ago
Things like this are the reason why companies like GitHub then put everything under a paid tier.
rvz•4h ago
Given the consistent outages everywhere on GitHub, they actually should put GitHub Actions under a paid tier only if they want their platform to be sustainable and stable. Period.

It's quite irresponsible of them to have almost all the core features free and a paid tier would significantly reduce abuse of it (and especially GitHub Actions) like this.

If they don't, then don't be surprised to see more outages on their platform.

S0y•4h ago
Do you realize how disastrous it would be for the open-source ecosystem to remove actions from the free tier?
nvme0n1p1•4h ago
Yeah, I can't imagine if open source maintainers had to pay for their own laptop, food, electricity, housing, transportation, or compute time.
kevin_thibedeau•4h ago
They might have to figure out running CI on their own hardware. The horror.
keepamovin•4h ago
I know a lot of people talk about GH outages, but I personally haven't encountered it even tho as you can see form my profile (github.com/crisdosaygo) I'm on there everyday. Maybe my workflows don't hit the weak spots, idk.

But the reason I created this was because Actions always worked so well for me, and it seemed to have so many possibilities to build things on it.

Regarding the Global Free Tier, every GH account comes with Actions Minutes and this is way to have a nice CLI to put them to use toward your building, and maybe have a spot for agents to do some work you don't want locally.

Bigger picture, I feel GH led the way providing this idea of "compute as utility" (free compute for even free GH accounts, was amazing - but I really think that the future is shaped like that). I'm serious about that: AI will eventually become cheaper to train and infer, and the oversupply of compute will be a background layer we will have access to much cheaper. Just one of the trends. So the idea of the Global Free Tier or Background Compute as a universal utility, is something I think si really real.

Also probably important to note that the reliability issues GH seems to have faced, are more of a recent uptick, but Actions has had this free tier for ages.

toraway•5h ago
I wish the link for "Global Free Tier" [1] included an actual list of the free tiers GhostBox is using (ideally also including some kind of table/rubric for comparisons and any limitations, benefits, etc unique to each).

It sounds like Github Actions is the first choice, if it's unavailable (or if Github blocks GhostBox in the future), are each of the alternatives viable as a more or less drop-in replacement? Or would there be loss of functionality?

Those are the questions I had when reading through the site so I think some basic technical docs would go a long way to help people understand the project and decide to give it a try. I like the cute/whimsical branding but I'll admit to doing a little internal eye-roll when I clicked that link expecting technical specifics and instead read:

  > GitHub Actions is only the first place ghosts come from. There are strange little pockets of temporary compute all over the internet. Ghostbox makes them feel like one small machine. 
It's a neat idea though, and I've definitely had moments where I wished I could just spin up a free, temporary VM/container to do something but didn't feel like researching the current free-tier landscape and filling out a sign-up form and stuff.

[1] https://www.ghost.charity/#gft

bensyverson•4h ago
Yeah, I'm open to this concept, but I'm a little hesitant to clone a private repo somewhere random and undisclosed and then inject secrets.
keepamovin•4h ago
Right now it's only GitHub Actions. I didn't want to overbuild in case it wasn't a thing for others. I mostly use Actions myself. But I'm open to adding more. I think the GFT is real.
sikozu•4h ago
GitHub is going to love this. No wonder Actions keeps getting worse and worse.
archargelod•4h ago
Was this botted to the top of the front page?

AI=generated article that asks you to download and run some random binary. Github account is just more AI slop. Everything to me just screams that it's a malware. Or this is normal here?

saltyoldman•4h ago
botted, probably teampcp doing it's usual scams.
croemer•4h ago
None of the links to Github work because you're pointing at the main branch instead of your default branch ghosts-only
keepamovin•4h ago
I appreciate the catch. Will change it. edit: should be good now.
arm32•4h ago
Just shut this down.
skywhopper•4h ago
Nice way to automate the unethical destruction of the commons. Shared space and community standards are for suckers.
S0y•4h ago
This is 100% against githubs TOS lol.

Some years ago I toyed with the idea of running a minecraft server inside github actions, I used tailscale to create a public endpoint and saved the world in an artifact that was re-loaded on the next run. It worked really well, but the point was never to actually use it for real.

keepamovin•4h ago
No, these are dev machines you use for your software building, so it's not.
ctrlmeta•4h ago
The multiple levels of abuse here are astounding. That grown adults can think projects like this are acceptable, let alone promote them, is hard to believe. I am 90% sure this is yet another vibecoded project. Has vibecoding really corrupted people?

First, I am fairly certain this violates Github's ToS. Second, it effectively amounts to a denial of service. Third, are people seriously using the .charity TLD to host something this frivolos? Have people got no sense of propriety anymore?

croes•4h ago
Like social media vibe coding doesn’t change people. It just makes their character more obvious
keepamovin•4h ago
No, this is just using GH Actions runners as ephemeral dev machines for your software work, plumbed together with cloudflared and tor for SSH and HTTP connectivity. It would likely been just a % of all Actions across all other jobs even if it was wildly popular. This is a mistaken interpretation, in reality.

You can read what it is more clearly, here: https://github.com/crisdosaygo/ghostbox-home-reveal

kitchi•8m ago
Looks like that's definitely been disabled for breaking ToS. I guess that answers that question then.
overfeed•36m ago
> Has vibecoding really corrupted people?

You have to go back further back than that, to the Great Recession, IMO.

> Have people got no sense of propriety anymore?

Judging by the proportion of drivers with their high beams on, blinding me on well-lit roads after dark - no, not anymore.

beardsciences•3h ago
The repository now appears to be disabled.

https://github.com/DO-SAY-GO/ghostbox-releases

https://github.com/crisdosaygo/ghostbox-home-reveal

keepamovin•2h ago
Yeah folks on this thread mistakenly thought it was against ToS and flagged it to GitHub. I’m confident and trust GitHub will bring it back once they look into it. It’s not a ToS violation.

Show HN: Destiny – Claude Code's fortune Teller skill

https://github.com/xodn348/destiny
10•xodn348•45m ago•0 comments

Show HN: WhatCable, a tiny menu bar app for inspecting USB-C cables

https://github.com/darrylmorley/whatcable
342•sleepingNomad•11h ago•114 comments

Show HN: AI CAD Harness

https://fusion.adam.new/install
31•zachdive•2h ago•34 comments

Show HN: My Private GitHub on Postgres

https://github.com/calebwin/gitgres
31•calebhwin•3h ago•16 comments

Show HN: Building a smartphone powered by nuclear decay: the power engineering

2•joshuashelvin•25m ago•0 comments

Show HN: GhostBox – Borrow a disposable little machine from the Global Free Tier

https://www.ghost.charity/
107•keepamovin•5h ago•63 comments

Show HN: Site Mogging

https://sitemogging.com
52•jilles•9h ago•58 comments

Show HN: Loopsy, a way for terminals and AI agents on different machines to talk

https://github.com/leox255/loopsy
38•todience•10h ago•8 comments

Show HN: Perfect Bluetooth MIDI for Windows

97•mayerwin•10h ago•31 comments

Show HN: Blotter, a live map of police radio activity

https://blotter.fm
2•s_e__a___n•2h ago•1 comments

Show HN: N=1 – iOS app for structured longevity self-protocols

https://apps.apple.com/us/app/n-1-tracker/id6762523189
3•middleastbeast•3h ago•0 comments

Show HN: Access OPFS from multiple tabs using a fake Shared Worker

https://github.com/arnold-graf/cross-tab-worker/
2•ch_sm•4h ago•1 comments

Show HN: WeSearch – Anonymous news aggregator with no algorithm, 700 sources

https://wesearch.press/
12•EGCstudy•13h ago•8 comments

Show HN: Winpodx – run Windows apps on Linux as native windows

https://github.com/kernalix7/winpodx
90•kernalix7•18h ago•47 comments

Show HN: Herald – Local-first terminal email client

https://herald-mail.app/
3•zoomacode•5h ago•1 comments

Show HN: Pu.sh – a full coding-agent harness in 400 lines of shell

https://pu.dev/
88•nahimn•23h ago•22 comments

Show HN: What happens when you load a webpage (Interactive)

https://toolkit.whysonil.dev/how-it-works/internet-timeline/
31•otterwilde2•4d ago•8 comments

Show HN: Updated – A dual crossword puzzle where two crosswords share one grid

https://forkle.co.uk/
3•daveoshawrus•10h ago•2 comments

Show HN: A new benchmark for testing LLMs for deterministic outputs

https://interfaze.ai/blog/introducing-structured-output-benchmark
58•khurdula•2d ago•24 comments

Show HN: TRiP – a complete transformer engine in C built from scratch just by me

https://github.com/carlovalenti/TRiP
36•carlovalenti•1d ago•6 comments

Show HN: Coding-Flashcards – Learn Rust, SQLite, or Godot from First Principles

https://github.com/ad-si/Coding-Flashcards
19•adius•1d ago•2 comments

Show HN: Rocky – Rust SQL engine with branches, replay, column lineage

https://github.com/rocky-data/rocky
119•hugocorreia90•3d ago•48 comments

Show HN: Drive any macOS app in the background without stealing the cursor

https://github.com/trycua/cua
185•frabonacci•3d ago•41 comments

Show HN: Live Sun and Moon Dashboard with NASA Footage

https://www.lumara-space.app/
218•beeswaxpat•3d ago•66 comments

Show HN: Rip.so – a graveyard for dead internet things

https://rip.so
182•bozdemir•2d ago•117 comments

Show HN: FusionCore: ROS 2 sensor fusion that outperforms robot_localization

https://github.com/manankharwar/fusioncore
11•kharwarm•3d ago•2 comments

Show HN: Auto-Architecture: Karpathy's Loop, pointed at a CPU

https://github.com/FeSens/auto-arch-tournament/blob/main/docs/auto-arch-tournament-blog-post.md
238•fesens•3d ago•75 comments

Show HN: Throwaway – open-source disposable email checker and API

https://github.com/sslboard/throwaway
14•weddpros•1d ago•10 comments

Show HN: I built a context layer for our home

https://rosey.house
2•aloktiagi•14h ago•0 comments

Show HN: Self hosted video feed for children

https://github.com/vkolev/timmygram-server
3•vkolev•14h ago•0 comments