alt Hacker NewsThat's because sandboxing is quite hard. I use `cco`, but even then, the home folder is exposed. You are one prompt away from the agent sending the browser passwords with curl.
To prevent this, you need a fake home and a networking whitelist for the agent to access the provider (llama cpp, OpenAI, etc.)
There is no cross-platform solution that is easy to use for this. And no, a Linux box with Docker won't do. I develop a cross-platform native app and want the agent to compile and fix the platform-specific errors.
Replies
squidsoup • today at 8:03 AM
> That's because sandboxing is quite hard
colima makes it pretty easy, on macOS and linux at any rate.
➕ show 1 reply
dpacmittal • today at 9:12 AM
Use multipass by canonical. Works on macOS, windows, Linux.
➕ show 1 reply
I use sandbox-here for this reason, it's a wrapper around bubblewrap, which works quite well.
Copy the code and adjust it to your liking:
https://github.com/lionkor/sbh
I have a shell alias for it, and use it like
for example or and maybe add --docker if I expect it to do docker things.This kind of wrapper is much easier to handle and maintain than a completely separate tool for sandboxing agents.