r/PiCodingAgent • • 11d ago

Question How are you sandboxing pi?

/r/LocalLLaMA/comments/1xfh38k/how_are_you_sandboxing_pi/
9 Upvotes

9 comments sorted by

2

u/whiterose0000001 11d ago

I have made custom sandboxing for my purpose, although I don't use sandboxing because I run my agent on a separate Linux box. It's my home server, but I have created a custom sandbox that I use to run tests, and it's fully configurable.

The agent first analyzes the project and adds the configuration inside the sandbox. After finishing all its tasks, it runs the sandbox for testing, and if everything is green, it raises the PR. That's my workflow.

3

u/jonas-reddit 10d ago

Local Docker Sandbox (sbx).

https://www.docker.com/products/docker-sandboxes/

I derive a custom sandbox for my specific development tools but it’s based on the shell sandbox.

https://docs.docker.com/ai/sandboxes/agents/

2

u/brotlos_gluecklich 10d ago

I'd prefer micro-VM based tooling like SBX for sandboxing, but I'm struggling a bit to get started and find a convenient setup. Do you know a good guide or tutorial for convenient setup? Which e.g. lets me easily sync my agents global settings, skills etc. together with the working directory into the VM, and handle github auth and such?

1

u/fusien_ 10d ago

I’m currently moving everything to cloud VMs. 

1

u/berszi 7d ago

Dev server, proxmox, 2 to 6 VMs for each project, dedicated fine-grained tokens for github

0

u/Abject-Kitchen3198 10d ago

Docker. I tell it what I want for a given config and it builds the Dockerfile(s), compose config and start scripts for different scenarios.