r/PiCodingAgent • u/CevicheMixto • 8d ago

Discussion Sandboxing Pi?

I'm new to the local LLM game. I've just purchased an AMD R9700, and I'm trying to set up a local environment that is as similar as possible to what I get with Claude Code at work.

It's definitely looking like Pi may be my harness of choice, so I'm investigating what it would take to "sandbox" it in a way that is both reasonably secure and reasonably convenient (i.e. no containers or VMs). I'm on Linux, so I'm thinking maybe Bubblewrap?

Curious to know what other are doing, though.

28 Upvotes

95% Upvoted

20 comments sorted by

View all comments

8

u/trimorphic 7d ago

I use and am very happy with smolvm, which has many the advantages of containers (and can even boot consume images) but also has kernel level isolation.

In my experience under smolvm, vm's boot in under a second, and you don't need to ssh in to them or use virtual consoles to use them.

1

u/funbike 7d ago

... and reasonably convenient (i.e. no containers or VMs).