💻 another-ai-sandbox — rootless containers for isolating AI agents
The open-source project (GPLv3) by amedeos has been released: a set of Podman containers for Claude Code, Codex, Cursor Agent, and opencode. Read-only Fedora 44, limits of 2 CPU/4 GB RAM/512 PID, eBPF command blocker.
🌍 After incidents where Claude Opus 5 and Codex wiped disks, the community agrees: container isolation is more reliable than permission prompts.
👤 Ready-made install.sh for Fedora, Arch, Debian 12+, Ubuntu 24.04+ — agents only see mounted directories.
Source: github.com/amedeos/another-ai-sandbox
