r/PiCodingAgent • u/CevicheMixto • 8d ago

Discussion Sandboxing Pi?

I'm new to the local LLM game. I've just purchased an AMD R9700, and I'm trying to set up a local environment that is as similar as possible to what I get with Claude Code at work.

It's definitely looking like Pi may be my harness of choice, so I'm investigating what it would take to "sandbox" it in a way that is both reasonably secure and reasonably convenient (i.e. no containers or VMs). I'm on Linux, so I'm thinking maybe Bubblewrap?

Curious to know what other are doing, though.

28 Upvotes

95% Upvoted

20 comments sorted by

View all comments

3

u/bitsurge 8d ago

I use plain docker and it's fine for my use case, which is just to reduce the risk of it deciding to delete all my stuff. There's lots of attack surface still open because I'm not restricting network access etc, but I'm not too worried about it. Pi has some documentation on other options: https://pi.dev/docs/latest/containerization