Sandbox bwrap Nix: Lightweight Sandbox for AI Agents and Experiments
What is sandbox-bwrap-nix? sandbox-bwrap-nix is a lightweight, open-source sandboxing solution that combines Bubblewrap (bwrap) with the Nix package manager to create isolated environments for AI coding agents and experimental software. It boots in under a second, requires no daemon or root privileges, and gives you fine-grained control over what an AI agent can see, write, and execute. By mounting the Nix store as read-only and providing an isolated home directory with its own process namespace, it delivers three layers of protection against credential leaks, file system tampering, and cross-process snooping. ...