2026-05-20 Markku-Juhani O. Saarinen
Using Agentic AI (Claude Code, Codex) for coding is great, but running such a creative (and sometimes unpredictable) system with full visibility to your personal files (ssh keys, browser-stored passwords, etc.) is dangerous.
There are various ways of doing sandboxing. Using the standard Linux user separation, access control, and shared group permissions is actually one of the more powerful ones and should be used as a baseline.
Note that to do any of this, you need to be competent enough to use a self-administered Linux system (local root). If you're not comfortable with it, don't use Agentic CLIs.