5 ms·

Many people seem to be running OpenCode and similar tools on their laptop with basically no privilege separation, sandboxing, fine-grained permissions settings

Many people seem to be running OpenCode and similar tools on their laptop with basically no privilege separation, sandboxing, fine-grained permissions settings in the tool itself. This tendency is reflected also by how many plugins are designed, where the default assumption is the tool is running unrestricted on the computer next to some kind of IDE as many authentication callbacks go to some port on localhost and the fallback is to parse out the right parameter from the callback URL. Also for some reasons these tools tend to be relative resource hogs even when waiting for a reply from a remote provider. I mean, I am glad they exist, but it seems very rough around the edges compared to how much attention these tools get nowadays. Please run at least a dev-container or a VM for the tools. You can use RDP/ VNC/ Spice or even just the terminal with tmux to work within the confines of the container/ machine. You can mirror some stuff into the container/ machine with SSHFS, Samba/ NFS, 9p. You can use all the traditional tools, filesystems and such for reliable snapshots. Push the results separately or don't give direct unrestricted git access to the agent. It's not that hard. If you are super lazy, you can also pay for a VPS $5/month or something like that and run the workload there.

Imustaskforhelp 8mo ago
I really like the product created by fly.io's https://sprites.dev/ https://sprites.dev/ for AI's sandboxes effectively. I feel like its really apt here (not sponsored lmao wish I was) Oh btw if someone wants to run servers via qemu, I highly recommend quickemu. It provides default ssh access,sshfs, vnc,spice and all such ports to just your local device of course and also allows one to install debian or any distro (out of many many distros) using quickget. Its really intuitive for what its worth, definitely worth a try https://github.com/quickemu-project/quickemu https://github.com/quickemu-project/quickemu I personally really like zed with ssh open remote. I can always open up terminals in it and use claude code or opencode or any and they provide AI as well (I dont use much AI this way, I make simple scripts for myself so I just copy paste for free from the websites) but I can recommend zed for what its worth as well.
tomrod 8mo ago
Hi. > Please run at least a dev-container or a VM for the tools. I would like to know how to do this. Could you share your favorite how-to?
- kaliszad 8mo ago
  I have a pretty non-standard setup but with very standard tools. I didn't follow any specific guide. I have ZFS as the filesystem, for each VM a ZVOL or dataset + raw image and libvirt/ KVM on top. This can be done using e.g. Debian GNU/ Linux in a somewhat straight forward way. You can probably do something like it in WSL2 on Windows although that doesn't really sandbox stuff much or with Docker/ Podman or with VirtualBox. If you want a dedicated virtual host, Proxmox seems to be pretty easy to install even for relative newcomers and it has a GUI that's decent for new people and seasoned admins as well. For the remote connection I just use SSH and tmux, so I can comfortably detach and reattach without killing the tool that's running inside the terminal on the remote machine. I hope this helps even though I didn't provide a step-by step guide.
- yawaramin 8mo ago
  Hi. You are clearly an LLM user. Have you considered asking an LLM to explain how to do this? If not, why not?
  - exe34 8mo ago
    would an LLM have a favourite tool? I'm sure it'll answer, but would it be from personal experience?
    - cbm-vic-20 8mo ago
      In 2026? It will be the tool from the vendor who spends the most ad dollars with Anthropic/Google/etc.
    - yawaramin 8mo ago
      I checked with Gemini 3 Fast and it provided instructions on how to set up a Dev Container or VM. It recommended a Dev Container and gave step-by-step instructions. It also mentioned VMs like VirtualBox and VMWare and recommended best practices. This is exactly what I would have expected from an expert. Is this not what you are getting? My broader question is: if someone is asking for instructions for setting up a local agent system, wouldn't it be fair to assume that they should try using an LLM to get instructions? Can't we assume that they are already bought in to the viewpoint that LLMs are useful?
deleted 8mo ago
[deleted]
_zoltan_ 8mo ago
Claude asks you for permissions every time it wants to run something.
- estsauver 8mo ago
  Until you run --dangerously-skip-permissions
- xmcqdpt2 8mo ago
  That's why you run with "dangerously allow all." What's the point of LLMs if I have to manually approve everything? IME you only get half decent results if the agent can run tests, run builds and iterate. I'm not going to look at the wall of texts it produces on every iterations, they are mostly convincing bullshit. I'll review the code it wrote once the tests pass, but I don't want to be "in the loop".
indigodaddy 8mo ago
I've started a project [1] recently that tries to implement this sandbox idea. Very new and extremely alpha, but mostly works as a proof of concept (except haven't figured out how to get Shelley working yet), and I'm sure there's a ton of bugs and things to work through, but could be fun to test and experiment with in a vps and report back any issues. [1] https://github.com/jgbrwn/shelley-lxc https://github.com/jgbrwn/shelley-lxc

Imustaskforhelp 8mo ago

I really like the product created by fly.io's https://sprites.dev/ https://sprites.dev/ for AI's sandboxes effectively. I feel like its really apt here (not sponsored lmao wish I was) Oh btw if someone wants to run servers via qemu, I highly recommend quickemu. It provides default ssh access,sshfs, vnc,spice and all such ports to just your local device of course and also allows one to install debian or any distro (out of many many distros) using quickget. Its really intuitive for what its worth, definitely worth a try https://github.com/quickemu-project/quickemu https://github.com/quickemu-project/quickemu I personally really like zed with ssh open remote. I can always open up terminals in it and use claude code or opencode or any and they provide AI as well (I dont use much AI this way, I make simple scripts for myself so I just copy paste for free from the websites) but I can recommend zed for what its worth as well.

tomrod 8mo ago

Hi. > Please run at least a dev-container or a VM for the tools. I would like to know how to do this. Could you share your favorite how-to?

kaliszad 8mo ago
I have a pretty non-standard setup but with very standard tools. I didn't follow any specific guide. I have ZFS as the filesystem, for each VM a ZVOL or dataset + raw image and libvirt/ KVM on top. This can be done using e.g. Debian GNU/ Linux in a somewhat straight forward way. You can probably do something like it in WSL2 on Windows although that doesn't really sandbox stuff much or with Docker/ Podman or with VirtualBox. If you want a dedicated virtual host, Proxmox seems to be pretty easy to install even for relative newcomers and it has a GUI that's decent for new people and seasoned admins as well. For the remote connection I just use SSH and tmux, so I can comfortably detach and reattach without killing the tool that's running inside the terminal on the remote machine. I hope this helps even though I didn't provide a step-by step guide.
yawaramin 8mo ago
Hi. You are clearly an LLM user. Have you considered asking an LLM to explain how to do this? If not, why not?
- exe34 8mo ago
  would an LLM have a favourite tool? I'm sure it'll answer, but would it be from personal experience?
  - cbm-vic-20 8mo ago
    In 2026? It will be the tool from the vendor who spends the most ad dollars with Anthropic/Google/etc.
  - yawaramin 8mo ago
    I checked with Gemini 3 Fast and it provided instructions on how to set up a Dev Container or VM. It recommended a Dev Container and gave step-by-step instructions. It also mentioned VMs like VirtualBox and VMWare and recommended best practices. This is exactly what I would have expected from an expert. Is this not what you are getting? My broader question is: if someone is asking for instructions for setting up a local agent system, wouldn't it be fair to assume that they should try using an LLM to get instructions? Can't we assume that they are already bought in to the viewpoint that LLMs are useful?

deleted 8mo ago

[deleted]

_zoltan_ 8mo ago

Claude asks you for permissions every time it wants to run something.

estsauver 8mo ago
Until you run --dangerously-skip-permissions
xmcqdpt2 8mo ago
That's why you run with "dangerously allow all." What's the point of LLMs if I have to manually approve everything? IME you only get half decent results if the agent can run tests, run builds and iterate. I'm not going to look at the wall of texts it produces on every iterations, they are mostly convincing bullshit. I'll review the code it wrote once the tests pass, but I don't want to be "in the loop".

indigodaddy 8mo ago

I've started a project [1] recently that tries to implement this sandbox idea. Very new and extremely alpha, but mostly works as a proof of concept (except haven't figured out how to get Shelley working yet), and I'm sure there's a ton of bugs and things to work through, but could be fun to test and experiment with in a vps and report back any issues. [1] https://github.com/jgbrwn/shelley-lxc https://github.com/jgbrwn/shelley-lxc