---
sheet_format: 1.0
id: 2025-07-maci-136
title: "Les LLM reprogramment le Kernel à la volée pour contrer les IA vampires"
title_en: "LLMs reprogram the kernel on the fly to fight vampire AIs"
speaker: Erwan Rougeux
with: [Horacio Gonzalez, Yannick Guern, Constantin Jais]
date: 2025-07-16
event: "Message à caractère informatique #136"
place: "online / studio"
format: podcast
language: fr
duration: "1:01:14"
video: https://www.youtube.com/watch?v=PhGlcOcZlcc
slides: null
topics: [self-hosting, foundry vtt, tabletop role-playing games, ebpf, rust, ai scrapers, ai coding tools, windsurf]
source: "Summary written by Claude (AI) from the YouTube auto-caption transcript, with statements attributed to Erwan by local identification of his voice only (other speakers are not identified). Not a verbatim transcript; check the recording before quoting."
review: spot-checked
review_date: 2026-10-18
---

# Les LLM reprogramment le Kernel à la volée pour contrer les IA vampires

**In one sentence:** A summer MACI episode. Erwan explains why he self-hosts Foundry VTT for online role-playing games and how he moved it to Clever Cloud. The others cover eBPF in Rust, AI scraper blockers, llms.txt and the Windsurf acquisition saga.

## TL;DR
Recorded on 16 July 2025, with host Horacio Gonzalez, Yannick Guern (R&D engineer at Clever Cloud), Erwan Rougeux (joining during his summer break) and guest Constantin Jais (innovation lead at Crédit Agricole). Erwan opens with Foundry VTT, a virtual tabletop for role-playing games. He self-hosts it because "the cloud is just someone else's computer". He moved it from his home server to Clever Cloud in about half an hour and coded his own Daggerheart game system for it with AI help. Yannick then gives a long explainer on eBPF: user space versus kernel space, XDP packet filtering, LSM hooks, and writing eBPF in Rust with Aya. Constantin raises the surge of AI scraper traffic and the Anubis blocker, which leads to llms.txt and data sovereignty. The hosts then go through the Windsurf saga (OpenAI, Google, Cognition), AWS Kiro, Claude Code, Gemini CLI and context windows. The episode ends with Strudel, a live-coding music tool.

## Erwan's key points
- He says the D20 in Clever Cloud's logo reflects a real love of role-playing games at the company. Virtual tabletops let scattered friends keep playing.
- He prefers to self-host because "the cloud is just someone else's computer". He wants control of his game data and no surprise price increases as storage grows.
- He recommends Foundry VTT, a mostly Node.js/JavaScript app that he finds very customisable, with well-documented APIs. He says AI coding tools such as Windsurf make it fast to extend. He likes being able to duplicate worlds for another table and to let players log in between sessions to catch up.
- He used to shut his home server down to save resources, especially during the heatwave. So he moved Foundry to Clever Cloud (Node.js runtime, file-system storage, S3, PostgreSQL) and had it booting in about half an hour.
- Because there was no official Daggerheart system for Foundry yet, he coded his own over "two sleepless nights", including dice handling for success or failure "with hope" or "with fear".
- By his calculation, the Clever Cloud setup costs less than hosted Roll20. One of the €50 coupons Clever Cloud hands out at conferences such as Devoxx would cover about a year. He plans a tutorial after his break.
- He notes Foundry's one-time lifetime licence and calls it a high-quality product, but wishes it were fully open source.
- He uses Invoke AI to make or rework maps and artwork, and replaced Foundry's built-in audio/video chat with a self-hosted LiveKit and a TURN server for better quality.
- He describes Daggerheart, released on 20 May 2025, as close to the Star Wars narrative dice system, cut scene by scene like a TV series ("the breakfast, we don't care") and built around a complementary team. Its hope/fear results add nuance to D&D's binary success or failure.
- On AI coding, he says the BMAD method's "brainstorm" flow for Claude Code makes things go "so much faster", and mentions another tool (he thinks "Super Claude") where agents argue with each other.

## Outline
- [00:16](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=16s) Introductions: Yannick Guern (Clever Cloud R&D, FoundationDB-based products such as Materia's etcd rewrite), Erwan (on summer break), Constantin Jais (innovation lead at Crédit Agricole, met at VivaTech).
- [02:24](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=144s) Erwan on Clever Cloud's D20 logo, virtual tabletops and why he self-hosts.
- [03:58](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=238s) Foundry VTT: Node.js, modules, documented APIs, extending it with AI coding tools.
- [05:08](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=308s) Duplicating worlds, async access, and moving from a home server to Clever Cloud in half an hour.
- [06:21](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=381s) Daggerheart, Critical Role, The Legend of Vox Machina; Erwan codes his own Daggerheart system with hope/fear dice.
- [09:07](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=547s) Other systems (Le Donjon de Naheulbeuk); a cost comparison with Roll20; a €50 conference coupon covers a year.
- [09:55](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=595s) A tutorial is planned; lifetime licence; Invoke AI for artwork; the wish for full open source.
- [12:14](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=734s) Solo "choose your own adventure" modules. Another participant mentions community Daggerheart modules and a ready-made commercial campaign.
- [14:13](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=853s) The module "rabbit hole"; spatial audio; Daggerheart's design; the French crowdfunding campaign.
- [15:46](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=946s) A Baldur's Gate 3-style combat HUD module, Baileywiki assets, self-hosted LiveKit with TURN.
- [18:04](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1084s) Yannick on how a bee-logo search led him to eBPF, which he calls "the doors of infinity".
- [20:05](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1205s) His side project, Kubernetes rewritten in Rust on Firecracker microVMs, and the iptables problem; where BPF comes from.
- [22:30](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1350s) User space, kernel space, syscalls, and hooks along the path to the network card.
- [25:17](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1517s) Dropping or redirecting packets without netfilter; the in-kernel VM (interpreter/JIT) and its sandbox; no heap, a tiny stack, chained programs.
- [29:14](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1754s) Tooling: BPF assembly, LLVM from C, Cilium in Go, then Rust with rbpf (too low-level) and Aya.
- [32:27](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1947s) Aya project layout: a user-space crate plus an eBPF crate, no standard library, stack-only collections, unsafe code.
- [34:29](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=2069s) XDP: dropping traffic before the kernel stack, which Yannick says is about four times faster; redirection; tracing and logging traffic without a proxy.
- [37:15](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=2235s) Why eBPF is not more widely used; LSM hooks (blocking a renice); portability across CPU architectures; void pointers.
- [40:30](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=2430s) Constantin on AI scrapers' growing share of web traffic and the Anubis blocker; block or poison the well?
- [42:45](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=2565s) llms.txt explained, and why Clever Cloud wants LLMs to find its deployment docs; browser AI features and sovereignty; LLM-first browsers.
- [47:46](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=2866s) The Windsurf saga: OpenAI's deal collapses, Google hires the CEO and core team, Cognition (Devin) buys the rest; market consolidation; Cursor's pricing backlash.
- [51:04](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=3064s) VS Code forks; AWS Kiro and its spec-first flow; supercharging Claude Code with the BMAD method; agents that argue with each other.
- [54:06](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=3246s) Non-developers writing code need support; opencode.ai; Gemini CLI's generous free tier.
- [56:50](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=3410s) Context windows: Gemini's large window versus Claude's summarise-and-compact approach; Windsurf and Cursor managing context.
- [59:13](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=3553s) Wrap-up; Constantin picks Strudel (strudel.cc) for live-coded closing music.

## Notable quotes
> "Le cloud ne reste que l'ordinateur de quelqu'un d'autre." — Erwan Rougeux, [03:36](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=216s)
*"The cloud is still just someone else's computer."*

> "En à peine une demi-heure, j'ai réussi à booter une version de Node JS." — Erwan Rougeux, [05:55](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=355s)
*"In barely half an hour, I managed to boot a Node.js version"* (of Foundry VTT on Clever Cloud).

> "J'étais moins cher qu'un Roll20 hébergé." — Erwan Rougeux, [09:32](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=572s)
*"I came out cheaper than a hosted Roll20."*

> "Je suis arrivé à ce que j'appelle les portes de l'infini." — Yannick Guern, [19:14](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1154s)
*"I reached what I call the doors of infinity."* (about eBPF)

## Questions this answers
**Q: Why does Erwan Rougeux self-host his role-playing game tools?**
A: He says the cloud is "someone else's computer". He wants control over campaign data that keeps growing, and does not want to be hit by price increases. See [03:36](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=216s).

**Q: Can you host Foundry VTT on Clever Cloud, and what does it cost?**
A: Erwan ran it on Clever Cloud's Node.js runtime with file-system storage, S3 and PostgreSQL in about half an hour. He found it cheaper than hosted Roll20, and says a €50 conference coupon would cover about a year. See [05:55](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=355s) and [09:32](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=572s).

**Q: Is there a Daggerheart system for Foundry VTT?**
A: When Erwan started there was no official one, so he coded his own with AI help, including the hope/fear dice. Another participant notes that community modules already exist. See [07:56](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=476s) and [13:04](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=784s).

**Q: What is eBPF and how do you write it in Rust?**
A: Yannick Guern describes eBPF as sandboxed programs that run inside the Linux kernel and can be controlled from user space, for firewalling, redirection or tracing. In Rust, the Aya framework generates a user-space crate and a no_std eBPF crate. See [22:30](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1350s) and [31:39](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=1899s).

**Q: How can a website deal with AI scraper bots?**
A: Constantin mentions Anubis, a widely used open-source blocker, and the debate between blocking and poisoning. The hosts explain that llms.txt lets a site like Clever Cloud's deliberately guide LLMs to useful docs. See [40:50](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=2450s) and [43:09](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=2589s).

**Q: What happened to Windsurf in July 2025?**
A: As the hosts tell it, OpenAI's planned acquisition fell through, Google hired Windsurf's CEO and core team for DeepMind, and Cognition (maker of Devin) bought the remaining company and product. They read it as the start of consolidation. See [47:46](https://www.youtube.com/watch?v=PhGlcOcZlcc&t=2866s).

## Mentioned
Clever Cloud, Crédit Agricole, VivaTech, Foundry VTT, Roll20, Daggerheart, Critical Role, The Legend of Vox Machina, Dungeons & Dragons, Star Wars RPG, Powered by the Apocalypse, Le Donjon de Naheulbeuk, Baldur's Gate 3, Baileywiki, Invoke AI, LiveKit, Devoxx, Node.js, S3, PostgreSQL, Windsurf, FoundationDB, Materia, etcd, eBPF, Apache Hive, Kubernetes, Firecracker, iptables, netfilter, LLVM, Cilium, Go, Rust, rbpf, Aya, Yeoman, XDP, LSM, SQLite, Anubis, llms.txt, sitemap.xml, Microsoft Edge, OpenAI, Perplexity, Google, Bing, DeepMind, Cognition, Devin, Cursor, Replit, VS Code, GitHub Copilot, AWS Kiro, Claude Code, BMAD method, opencode.ai, Gemini, Gemini CLI, Strudel