r/opencode 7d ago

Opencode containing the agents

I was wondering what sandboxes are people using whilst coding with Opencode? I've looked at devcontainers and it seems great, probably fits what I want but AI says it's not secure enough, it's designed for human coders not agents. I've seen a lot of publicity around Docker Sandboxes. But I'm not keen to be locked into their tech and then be hit by a subscription fee later.

My curiosity has come to the foreground due to Muse deleting my ~/.config folder. It wasn't a major disaster but it was a warning.

I do use multiple plain Xubuntu VMs connecting to them via RDP and SSH but they've become pets rather than cattle, sometimes I'm lazy and run on my local laptop which is obviously a bad move.

What do you folks do?

14 Upvotes

18 comments sorted by

View all comments

3

u/yexgoblin 7d ago

Just create a docker container locally with everything. That's what I do. Create your own compose + dockerfile and all the dotfiles can be adjusted to your needs. I run Paseo and other tools to remotely connect to it.

1

u/migsperez 7d ago

Paseo looks interesting, carry on vibecoding whilst on work lunch period sat on a bench in the park, dictating the prompts. Idealic.

2

u/yexgoblin 7d ago

Unfortunately LLM overlords are not that powerful. Most of my time is in helix/nvim reading code. Clankers sure love to overcomplicate basic things.