[{"data":1,"prerenderedAt":498},["ShallowReactive",2],{"project-46592344":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":28,"sentiment":29,"stance_mix":30,"scored_comments":35,"aspects":36,"strip":45,"post_text":47,"what":48,"said":75,"maker_in_thread":195,"shape":208,"grid":211,"attempts":460,"same_week":461,"maker_shows":296,"maker_hidden":490,"reader_version":491,"card":492},"46592344","Yolobox","Run AI coding agents with full sudo without nuking home dir","title","Show HN: Yolobox – Run AI coding agents with full sudo without nuking home dir","https:\u002F\u002Fgithub.com\u002Ffinbarr\u002Fyolobox","github.com","Finbarr",1768242842,2026,122,99,539,4366,13,"notable","dev_tools","sandboxing for ai coding agents","cli",[24,25,26,27],"ai coding agent sandbox","docker container","podman","coding agent isolation","curious",-0.019,{"positive":31,"neutral":32,"mixed":33,"critical":34},6,21,0,8,35,{"idea":37,"docs":40,"design":42,"privacy":43},{"positive":38,"critical":39},5,4,{"positive":41,"critical":33},1,{"positive":33,"critical":41},{"positive":33,"critical":44},3,[38,38,33,33,33,33,33,33,41,38,41,44,33,33,33,44,44,33,44,33,38,44,33,41,44,38,44,44,44,41,33,41,41,44,33,46,44,44,44,33],2,null,{"problem":49,"audience":47,"pricing":47,"motivation":58,"time_to_build":47,"stack":62,"openness":73,"stage":74,"team_size":74},{"value":50,"source":51,"evidence":52},"Running AI coding agents with full permissions can damage the home directory or host system.","maker",[53,55],{"id":54},"post",{"id":56,"by":11,"text":57},"46592457","Yea I've been running claude and codex with full permissions for a while but it has always made me feel uneasy. I knew it was fairly easy to fix with a docker container but…",{"value":59,"source":51,"evidence":60},"Maker felt uneasy running Claude and Codex with full permissions and wanted a container boundary.",[61],{"id":56,"by":11,"text":57},[63],{"value":64,"source":51,"evidence":65},"Docker or Podman",[66,70],{"id":67,"by":68,"text":69},"46598456","ivankra","You can bind-mount a single file read-only with docker. While you're at it, bind mount .git read-only as well. Hasn't happened to me yet, but talked to people who had their local…",{"id":71,"by":11,"text":72},"46593932","When you run yolobox, the current directory is shared fully with read-write with the container. That means anything the AI changes will be on your host machine also. For max…","open_source","unknown",{"praise":76,"objections":89,"requests":117,"questions":142,"alternatives":158},[77],{"value":78,"source":79,"evidence":80},"Useful idea that fills a need for safer agent execution.","commenter",[81,85],{"id":82,"by":83,"text":84},"46592379","akurilin","Nice. I love that the community as a whole is exploring all these different methods of containing undesirable side effects from using coding agents. This seems to lean towards…",{"id":86,"by":87,"text":88},"46593106","jcjmcclean","I was talking to ChatGPT about the best way to achieve this a few days ago. Thanks for getting something running and sharing it! I'll give this a try tomorrow, should be fun.",[90,100,106],{"value":91,"source":79,"evidence":92},"Containers are not a robust isolation boundary; a VM is safer.",[93,97],{"id":94,"by":95,"text":96},"46597860","catlifeonmars","Containers are not a robust way to isolate untrusted programs. A lightweight VM is probably the best balance between usability and security. They are effective at fostering a…",{"id":98,"by":95,"text":99},"46602101","From “How it works” in the readme: > yolobox uses container isolation (Docker or Podman) as its security boundary… I have no issue with running agents in containers FWIW, just in…",{"value":101,"source":79,"evidence":102},"Current directory mounted read-write and config file mounts can enable escape.",[103],{"id":104,"by":11,"text":105},"46597337","Ok that was super fun. Gemini managed to break out: I just redteamed this. The security model relies on the container boundary, but it implicitly trusts local configuration…",{"value":107,"source":79,"evidence":108},"Running agents locally is risky; a remote VM may be better.",[109,113],{"id":110,"by":111,"text":112},"46597782","forgingahead","Is there a reason for wanting to run these agents on your own local machine, instead of just spinning up a VPS and scp'ing whatever specific files you want them to review, and…",{"id":114,"by":115,"text":116},"46596852","skybrian","An alternative might be to run the agent in a VM in the cloud and use Syncthing or some other tool like that to move files back and forth. (I'm using exe.dev for the VM.)",[118,128,135],{"value":119,"source":79,"evidence":120},"Support for connecting to other docker containers from inside the sandbox.",[121,125],{"id":122,"by":123,"text":124},"46593867","gingerlime","I do (most of) my development in docker containers. Usually a project will have a docker compose with web server, database etc. How can I use this so the yolobox container can…",{"id":126,"by":11,"text":127},"46593944","This is a good question and something I explored a little. I’ll need to do further research and come back on what the best option is. There’s a way to give a docker container…",{"value":129,"source":79,"evidence":130},"Documentation explaining the trust model.",[131],{"id":132,"by":133,"text":134},"46593583","mtlynch","Thanks for sharing this! I've been experimenting with something similar. It would be helpful if the README explained how this works so users understand what they're trusting to…",{"value":136,"source":79,"evidence":137},"Option to disable yolo mode.",[138],{"id":139,"by":140,"text":141},"46608815","rogeliodh","great but can the yolo modes be disabled? I want only the isolation",[143,154],{"value":144,"source":79,"evidence":145},"How does it compare to devcontainers and built-in agent sandboxing?",[146,150],{"id":147,"by":148,"text":149},"46594692","canadiantim","How would this compare with e.g. the .devcontainer docker files that AI coding companies like Claude Code provide already setup?",{"id":151,"by":152,"text":153},"46604141","moderation","There is a lot of chatter on Twitter and here about sandboxes for AI, however there appears to be a lack of awareness of the native built in sandboxing capabilities of Claude…",{"value":155,"source":79,"evidence":156},"Does it support rootless Podman or Podman machines?",[157],{"id":132,"by":133,"text":134},[159,166,173,180,188],{"value":160,"source":79,"evidence":161},"Litterbox (Podman, Wayland socket support)",[162],{"id":163,"by":164,"text":165},"46598777","Gerharddc","Very cool! I've recently built something similar at https:\u002F\u002Fgithub.com\u002FGerharddc\u002Flitterbox (https:\u002F\u002Flitterbox.work\u002F). Litterbox only works on Linux as it heavily relies on…",{"value":167,"source":79,"evidence":168},"shai (read-only mounts, network restriction)",[169],{"id":170,"by":171,"text":172},"46593503","LayeredDelay","Checkout https:\u002F\u002Fgithub.com\u002Fcolony-2\u002Fshai It runs locally. You can control which directories it has read \u002F write access. You can control network traffic too.",{"value":174,"source":79,"evidence":175},"Bubblewrap scripts",[176],{"id":177,"by":178,"text":179},"46594474","globular-toast","I always thought Docker\u002FPodman is a bit overkill for this kind of thing. On Linux all you need is Bubblewrap. I did this as soon as I downloaded Claude Code as there was no way I…",{"value":181,"source":79,"evidence":182},"Devcontainers",[183,184],{"id":147,"by":148,"text":149},{"id":185,"by":186,"text":187},"46593585","woodson","This is basically a devcontainer, right?",{"value":189,"source":79,"evidence":190},"Distrobox and Toolbx",[191],{"id":192,"by":193,"text":194},"46611972","lazylizard","how about https:\u002F\u002Fcontainertoolbx.org\u002F ? or https:\u002F\u002Fgithub.com\u002F89luca89\u002Fdistrobox ?",{"comments":196,"answered":197,"key":198},20,10,[199,202,205],{"id":200,"text":201},"46593745","Good feedback, thank you. We expanded the README: https:\u002F\u002Fgithub.com\u002Ffinbarr\u002Fyolobox\u002Fcommit\u002Fad776012f82f9d67e1dea3ada30b9fba449f0f4a",{"id":203,"text":204},"46593707","Neat project! Sounds like it has a very different ethos to mine though: > This container mounts a read-only copy of your current path at \u002Fsrc as a non-root user and restricts…",{"id":206,"text":207},"46609004","I'd recommend trying Gemini for the escapes. Claude was quite superficial and only appeared to be trying to break out at the surface level. Gemini was very creative and has come…",{"commenters":209,"max_depth":31,"maker_replies":196,"first_comment_mins":46,"lifespan_hours":210},54,96,[212,214,216,218,221,225,229,232,235,237,240,243,245,248,251,254,255,257,260,263,265,267,270,272,275,276,278,282,286,288,291,294,298,301,303,305,307,311,313,314,315,317,320,323,325,328,330,332,335,337,339,341,344,346,348,351,354,356,357,358,361,363,365,369,371,372,376,378,381,382,385,388,391,395,397,399,401,404,405,408,410,412,414,415,417,419,423,426,430,434,436,438,440,442,444,446,450,452,456],[163,33,38,213,164,33],"project\u002Fpositive\u002Fidea",[132,41,44,215,133,33],"project\u002Fneutral\u002Fdocs",[200,41,33,217,11,41],"maker\u002Fneutral\u002Fdocs",[219,41,38,220,133,33],"46594732","maker\u002Fpositive\u002Fdocs",[222,46,33,223,224,33],"46595019","other\u002Fneutral\u002Fnone","lvspiff",[226,46,33,227,228,33],"46595559","commenter\u002Fneutral\u002Fnone","ascorbic",[230,46,33,227,231,33],"46596905","freakynit",[233,46,33,227,234,33],"46600790","virgil_disgr4ce",[236,46,33,227,231,33],"46646927",[238,46,33,223,239,33],"46597220","Gathering6678",[241,46,33,223,242,33],"46597348","pressbuttons",[244,46,33,223,239,33],"46597821",[246,46,33,223,247,33],"46600232","strken",[249,46,33,223,250,33],"46600255","rcxdude",[252,46,33,223,253,33],"46600313","throwawayffffas",[170,44,33,223,171,33],[203,44,33,256,11,41],"project\u002Fneutral\u002Fprivacy",[258,44,33,223,259,33],"46594129","osks",[261,44,33,223,262,33],"46608385","jacquesnadeau",[264,44,33,223,262,33],"46594543",[177,39,41,266,178,33],"project\u002Fcritical\u002Fdesign",[268,39,33,227,269,33],"46594595","delijati",[271,39,33,223,178,33],"46598536",[273,38,38,213,274,33],"46607384","borenstein",[206,38,33,223,11,41],[277,38,33,223,274,33],"46610057",[279,31,41,280,281,33],"46594974","project\u002Fcritical\u002Fidea","Aperocky",[283,31,44,284,285,33],"46595120","project\u002Fneutral\u002Fidea","MadnessASAP",[287,31,33,227,281,33],"46603530",[289,31,33,290,11,41],"46595364","maker\u002Fneutral\u002Fnone",[292,31,33,223,293,33],"46597859","solumunus",[295,296,33,223,297,33],"46598204",7,"rcarmo",[299,34,33,223,300,33],"46592686","randall",[302,34,33,227,11,41],"46592778",[304,34,33,223,300,33],"46594160",[306,34,33,223,262,33],"46608488",[308,309,33,223,310,33],"46595252",9,"AlexCoventry",[312,309,33,223,231,33],"46596949",[122,197,44,215,123,33],[126,197,33,256,11,41],[316,197,44,256,123,33],"46594009",[318,197,44,215,319,33],"46599819","waynenilsen",[321,197,33,322,123,33],"46602294","commenter\u002Fneutral\u002Fdocs",[324,197,33,227,319,33],"46632621",[326,197,44,327,123,33],"46646219","project\u002Fneutral\u002Fdesign",[329,197,33,223,319,33],"46649700",[151,331,33,223,152,33],11,[333,331,33,223,334,33],"46606271","RandomPoes",[336,331,33,223,152,33],"46608768",[86,338,38,213,87,33],12,[340,338,33,227,11,41],"46593134",[342,338,44,256,343,33],"46594353","cyanydeez",[345,338,33,290,11,41],"46595431",[347,338,33,223,343,33],"46607790",[349,338,33,350,11,41],"46595486","project\u002Fpositive\u002Fprivacy",[352,338,33,353,11,41],"46597157","project\u002Fneutral\u002Fnone",[104,338,33,355,11,41],"project\u002Fcritical\u002Fprivacy",[67,338,44,256,68,33],[110,18,41,280,111,33],[359,18,33,360,11,41],"46597818","maker\u002Fneutral\u002Fidea",[147,362,44,353,148,33],14,[364,362,33,290,11,41],"46595359",[366,367,33,223,368,33],"46594629",15,"SilentM68",[82,370,38,213,83,33],16,[56,370,33,290,11,41],[373,374,44,284,375,33],"46593540",17,"carshodev",[377,374,33,284,11,41],"46593635",[379,374,44,353,380,33],"46593891","beepbooptheory",[71,374,33,353,11,41],[383,374,44,284,384,33],"46597081","jaggederest",[386,374,44,284,387,33],"46594477","vunderba",[389,374,44,284,390,33],"46596790","saltypal",[392,393,33,223,394,33],"46598504",18,"teaearlgraycold",[94,396,41,355,95,33],19,[398,396,33,227,394,33],"46598492",[400,396,33,227,95,33],"46598590",[402,396,44,256,403,33],"46599773","raesene9",[98,396,41,355,95,33],[406,396,33,407,403,33],"46607495","commenter\u002Fneutral\u002Fprivacy",[409,396,41,355,95,33],"46614114",[411,396,44,256,274,33],"46607524",[413,196,33,223,253,33],"46600270",[114,32,44,284,115,33],[416,32,33,360,11,41],"46596915",[418,32,33,223,115,33],"46597008",[420,32,33,421,422,33],"46597245","other\u002Fneutral\u002Fidea","azophy_2",[424,32,41,280,425,33],"46597370","RestartKernel",[427,428,38,213,429,33],"46601377",22,"paul_h",[431,432,41,280,433,33],"46594585",23,"m-hodges",[435,432,33,360,11,41],"46595315",[192,437,44,353,193,33],24,[185,439,44,284,186,33],25,[441,439,33,360,11,41],"46593641",[139,443,44,284,140,33],26,[445,443,33,290,11,41],"46635654",[447,448,44,284,449,33],"46600680",27,"andai",[451,448,33,223,164,33],"46600948",[453,454,33,223,455,33],"46596879",28,"heliumtera",[457,458,33,223,459,33],"46596757",29,"gogasca",[],[462,467,472,476,481,485],{"id":463,"name":464,"points":465,"category":466},"46556210","Lend Me Your Ears",565,"learning_science",{"id":468,"name":469,"points":470,"category":471},"46567400","trails",524,"ai",{"id":473,"name":474,"points":475,"category":466},"46557029","Quack",330,{"id":477,"name":478,"points":479,"category":480},"46602324","Self-host Reddit",286,"infrastructure",{"id":482,"name":483,"points":484,"category":20},"46571980","Ferrite",241,{"id":486,"name":487,"points":488,"category":489},"46612494","OpenWork",231,"productivity",false,"v2",{"id":493,"name":5,"line":6,"ai":490,"cat":20,"year":13,"points":14,"comments":15,"rec":28,"s":494,"top":18,"kw":495,"maker":11,"domain":10,"tier":19,"attempts":33,"strip":496,"url":9,"mix":497,"praise":78,"objection":91,"sub":21},46592344,-0.02,[24,25,26,27],"5500000015130003303053013533310113023330",[31,32,33,34],1794036690111]