How I Built a Zero-Trust Docker Sandbox for AI Coding Agents & Untrusted Repos

Описание и применение

Создайте изолированную среду Docker без прав root для безопасного выполнения непроверенного кода и работы AI‑агентов, синхронизируя файлы с хостом и сохраняйте кэш зависимостей.

Задача

Running untrusted Python code or AI coding agents on a host system risks accidental modification or deletion of host files and permission headaches when containers write files as root.

Результат

Developers can run untrusted Python code and AI agents in an isolated, non‑root Docker container with instant file sync, zero permission headaches, and persistent dependency caching, all set up in under two minutes.

Рабочий процесс

• 1. Build the base Docker image with pre‑created cache directories and open permissions.
• 2. Add the saferun alias to ~/.zshrc or ~/.bashrc.
• 3. Clone any repository locally.
• 4. Open a terminal at the project root and type saferun to enter the sandbox.
• 5. Run untrusted code, install dependencies with uv, or use OpenCode inside the container.
• 6. Exit the container with exit; the container is removed and all edits remain on the host.

Доказательства

I built saferun a zero-trust, disposable Docker sandbox designed specifically for Python developers and AI agent workflows on macOS and Linux.

Источник

Files edited inside PyCharm or VS Code on the host machine sync instantly with the container.

Источник