Comment by simonw 9 days ago Which agent sandbox do you recommend? 4 comments simonw Reply flexagoon 9 days ago If you're on Linux, the easiest way IMO is to just run the agent in bwrapI do it like thishttps://github.com/flexagoon/dotfiles/blob/main/dot_config/f...But I'm sure it's simple enough that you can just ask the agent itself to make you a command for it with proper bwrap configuration artemisart 9 days ago bwrap is builtin in claude too, activate with /sandbox command. mik3y 9 days ago I've been enjoying Moat [1]. Proxies credentials, networking, etc; uses MacOS containers if available; and setup worked without much fuss. I haven't tried others, though.[1] https://majorcontext.com/moat/ fspoettel 9 days ago nono works great with pi: https://nono.sh/
flexagoon 9 days ago If you're on Linux, the easiest way IMO is to just run the agent in bwrapI do it like thishttps://github.com/flexagoon/dotfiles/blob/main/dot_config/f...But I'm sure it's simple enough that you can just ask the agent itself to make you a command for it with proper bwrap configuration artemisart 9 days ago bwrap is builtin in claude too, activate with /sandbox command.
mik3y 9 days ago I've been enjoying Moat [1]. Proxies credentials, networking, etc; uses MacOS containers if available; and setup worked without much fuss. I haven't tried others, though.[1] https://majorcontext.com/moat/
If you're on Linux, the easiest way IMO is to just run the agent in bwrap
I do it like this
https://github.com/flexagoon/dotfiles/blob/main/dot_config/f...
But I'm sure it's simple enough that you can just ask the agent itself to make you a command for it with proper bwrap configuration
bwrap is builtin in claude too, activate with /sandbox command.
I've been enjoying Moat [1]. Proxies credentials, networking, etc; uses MacOS containers if available; and setup worked without much fuss. I haven't tried others, though.
[1] https://majorcontext.com/moat/
nono works great with pi: https://nono.sh/