Local vs Docker vs VPS

The more separation between Hermes and your real files, the safer the experiment. Safer is never risk-free.

Local laptop

Closest to your real files

Easiest to start
Actions can touch your machine
Use carefully

Docker container

Workshop safety box

Commands and files run inside a container
Better containment
Not magic if misconfigured

VPS cloud computer

Separate rented machine

Disposable and rebuildable
Supports always-on use
Costs money to run

Safer does not mean risk-free. Always check what Hermes is allowed to access.

Safety Mode — Local vs Docker

Station 5 — Where actions run. Time: 12 min. Pass when you can say whether Hermes is acting on your laptop, in Docker, or on a VPS.

What this is

When Hermes uses tools, it matters where the action happens. The diagram above shows three layers of separation between the agent and your real files.

Local laptop — closest to your real files. Easiest, but actions can touch your machine.
Docker container — a workshop safety box where commands and files run inside a container.
VPS cloud computer — a separate rented machine, disposable and rebuildable.

Why it matters

An agent that can run commands and edit files is powerful. Knowing where those actions land is the difference between a safe experiment and an accident on your personal files.

What to do

For today's beginner demos:

Prefer the Docker backend if it is available, or watch the facilitator run it.
Never point Hermes at sensitive folders during practice.
Read the approval prompt before you let a tool act.

Keep this rule in mind at every layer:

Reference

Safer does not mean risk-free. Always check what Hermes is allowed to access.

Common mistakes

Assuming Docker or a VPS is "secure" no matter how it is configured.
Mounting personal or work folders into a demo sandbox.
Approving an action without reading what it will do.

Next step

Go to Connect the Office API Key.