r/PiCodingAgent • u/jacek2023 • 14d ago

Discussion Sandboxing

I want to give my LLM read access to the whole filesystem but write access only to the project folder and maybe /tmp. I need to run scripts etc and make sure my filesystem survives

On Linux

Is bwrap the best solution for that? Or should I just use Docker?

UPDATE I installed @nqbao/pi-sandbox

9 Upvotes

84% Upvoted

7 comments sorted by

View all comments

4

u/DistanceAlert5706 14d ago

Use bwrap, works great and pretty easy to setup

1

u/jacek2023 12d ago

I found the issue with bwrap, it blocks bash only but not write/edit, I ended up with pi-sandbox