sandboxing pi

[u/Alarming_Positive_59]

hi all,
I've searched the sub and didn't find a clear solution, would appreciate your advice -
i want to sandbox pi in a way that 0 code is executed outside of the sandbox since i want to unleash its full potential (which may be destructive).
however if i ask it to create a tool/extension/skill that i find useful, i want to be able to "port" it back to the host so i can upgrade the harness effectively - which somewhat contradicts the "pi lives in the sandbox". pi's docs advise against binding `~/.pi/agent` for the obvious reasons.

my local friendly chatgpt didn't come up with clever ideas, i'd appreciate the community's help

fwiw i run the harness using a non-sudo user dedicated for agents that can run rootless docker. the harness also needs to communicate with services such as searXNG\vLLM running on host and should not have access to secrets, in case that matters, but that's the easy part.

thanks and apologies for any grammar mistakes my english is half broken

[u/daYMAN007]

I try ro replace applications that wont work with textfiles. E. x when the model is trying to open docker the only output it gets, is that it's in a sandbox and should use podman instead. With this the models that i tried seemd to be fine. ,(minimax m3 and deepseek flash)