Comment by grigio

it seems overkill, I made a similar sandbox for opencode where the AI agent can do everything, also install software and it is done as normal user, only a directory is shared with the host if you want https://github.com/grigio/docker-nixuser