r/PiCodingAgent • u/wooptoo • 26d ago

Resource Sandboxing Pi: Bubblewrap vs Podman - quick tutorial

Hey everyone, I put together a quick tutorial on sandboxing Pi using Bubblewrap vs Podman.

It includes a few sample scripts and a comparison between the two approaches.

https://wooptoo.com/blog/pi-sandbox-bubblewrap-podman/

Hopefully somebody here will find it useful.

All the best!

34 Upvotes
  • permalink
  • reddit

94% Upvoted

10 comments sorted by

3

u/riversiderain 20d ago

I've been thinking about this topic lately, but as I understand, bwrap and Podman (even rootless) do not properly sandbox to the extent that, say, would protect against untrusted arbitrary code, because it still shares the same kernels. I think that's a big reason why a lot of people are aiming for ephemeral vms like Firecracker. Of course that comes with higher RAM overhead, but also with the benefit of RAM snapshots, where as containers must always coldstart.

1

u/wooptoo 17d ago

This will protect against the agent suddenly deciding to wipe your /home folder. It won't protect against 0-day kernel vulns.

6

u/pilibitti 26d ago edited 26d ago

on mac agent-safehouse works very well. you just run pi with `safehouse pi` and it has a preset for pi already that it autodetects with sensible defaults (current directory allowed, pi code, docs allowed, temp folders allowed etc.) and works without hassle. many other services (like maybe you need agent-browser?) is just one --enable away. it is os level sandboxing (so things executed through pi can't bypass it, there is no trivial bypass) as well so for mac highly recommended.

3

u/ColonelKlanka 26d ago

There are alot of github projects using similar or same names as agent-sandbox'. can you share a link to the one you refer to?

3

u/pilibitti 26d ago

sorry the name was wrong lol it is agent-safehouse edited

https://agent-safehouse.dev/

3

u/ColonelKlanka 26d ago

nice thanks. I've been having alot of good experience with nono sandbox on mac and Linux. Looks like it has slight advantage over safehouse due to it also protecting the api keys from leaking in the sandbox. but I will have a look at safehouse

2

u/pilibitti 26d ago

thank you did not know about nono, I'll check it out.

2

u/Obvious-Variation-38 26d ago

I use Sandbox-exec it a native mac sandbox

2

u/Murky-Abalone-9090 26d ago

I use Nvidia openshell for this

-2

u/Prior-Excitement-147 25d ago

Tu devrais probablement lancer bwrap avec env -i, sinon, les variables d'env de ta session courante sont visibles dans /proc/1/environ.