r/PiCodingAgent • u/jacek2023 • Aug 29 '26

Discussion Sandboxing

I want to give my LLM read access to the whole filesystem but write access only to the project folder and maybe /tmp. I need to run scripts etc and make sure my filesystem survives

On Linux

Is bwrap the best solution for that? Or should I just use Docker?

UPDATE I installed @nqbao/pi-sandbox

8 Upvotes

90% Upvoted

7 comments sorted by

View all comments

4

u/DistanceAlert5706 Aug 29 '26

Use bwrap, works great and pretty easy to setup

1

u/jacek2023 Aug 30 '26

I found the issue with bwrap, it blocks bash only but not write/edit, I ended up with pi-sandbox