Skip to content

Instantly share code, notes, and snippets.

View dredozubov's full-sized avatar

Denis Redozubov dredozubov

104 followers · 21 following
View GitHub Profile
@dredozubov
dredozubov / agent-sandboxen.md
Created August 18, 2026 09:14 — forked from wincent/agent-sandboxen.md
List of coding agent sandboxes 2026-05

Coding Agent Sandboxes — Comprehensive List

Compiled from awesome-lists (restyler/awesome-sandbox, webcoyote/awesome-AI-sandbox, bureado/awesome-agent-runtime-security) and a survey of vendor blogs / field guides published through 2026. Grouped by isolation primitive and then by deployment model.

1. OS-level primitives (no container, no VM)

These rely on kernel/userland features to constrain a normal host process. Lowest overhead, weakest boundary.

  • macOS Seatbelt / sandbox-exec — Apple's TrustedBSD-based MAC framework. Used directly by Codex CLI, Gemini CLI, and underneath Anthropic's srt.
  • Linux Landlock — Unprivileged filesystem/network LSM; default backend for Codex CLI on Linux.
@dredozubov
dredozubov / install_graphite_statsd_ubuntu_precise.sh
Last active January 1, 2016 07:28 — forked from bhang/install_graphite_statsd_ubuntu_precise.sh
#!/bin/bash
# node.js using PPA (for statsd)
sudo apt-get install -y python-software-properties
sudo apt-add-repository ppa:chris-lea/node.js
sudo apt-get update
sudo apt-get install -y nodejs npm
# Install git to get statsd
sudo apt-get install -y git