How I Built a Zero-Trust Docker Sandbox for AI Coding Agents & Untrusted Repos

说明与用途

创建一个无 root 权限的 Docker 沙箱，安全运行不受信任的代码和 AI 代理，文件即时同步，依赖缓存持久化。

问题

Running untrusted Python code or AI coding agents on a host system risks accidental modification or deletion of host files and permission headaches when containers write files as root.

结果

Developers can run untrusted Python code and AI agents in an isolated, non‑root Docker container with instant file sync, zero permission headaches, and persistent dependency caching, all set up in under two minutes.

工作流

• 1. Build the base Docker image with pre‑created cache directories and open permissions.
• 2. Add the saferun alias to ~/.zshrc or ~/.bashrc.
• 3. Clone any repository locally.
• 4. Open a terminal at the project root and type saferun to enter the sandbox.
• 5. Run untrusted code, install dependencies with uv, or use OpenCode inside the container.
• 6. Exit the container with exit; the container is removed and all edits remain on the host.

证据

I built saferun a zero-trust, disposable Docker sandbox designed specifically for Python developers and AI agent workflows on macOS and Linux.

来源

Files edited inside PyCharm or VS Code on the host machine sync instantly with the container.

来源