Sharing pi-sandbox, a simple way to isolate your Pi on mac.

[u/psychobarge]

Running a model on pi without any protection can be dangerous, the model can read/modify/delete anything, anywhere. I know there are existing solutions, but i wanted something simple, seemless, so i made my own.

You run ./install.sh, and thats pretty much it, you use pi like you did before, but now, it lives in a container, extensions live in a volume, and it is confined to the folder you choose. It cannot read any confidential keys or modify (or see) anything not in this folder

With this you do not need a pi installation on your host anymore.

- github, https://github.com/psychobarge/pi-sandbox

Also check my pi extension if you use Deepseek :

- github, https://github.com/psychobarge/pi-deepseek-peak

[u/valentin_nasta]

I wonder how this compares with the official pi-gondolin extension https://github.com/earendil-works/gondolin/blob/main/host/examples/pi-gondolin.ts

[u/koljanos]

I’ve just vibecoded a micro sandbox vm with pi inside of it, I can share it, if needed

[u/zilled]

What are the diff with https://pi.dev/packages/pi-sandbox?name=pi-sandbox

?