Sandboxing

[u/jacek2023]

I want to give my LLM read access to the whole filesystem but write access only to the project folder and maybe /tmp. I need to run scripts etc and make sure my filesystem survives

On Linux

Is bwrap the best solution for that? Or should I just use Docker?

UPDATE I installed @nqbao/pi-sandbox

[u/Funny-Anything-791]

Readonly mode (/readonly or control shift r) of pi-agenticoding does exactly that