Re: Open vs proprietary LLMs

* Lucas Nussbaum <[email protected]>, 2026-08-26 08:16:
>I don't know how much it qualifies as "safely", but you can use bubblewrap[1]:
>
>bwrap \
[snip - lots of options limiting fs access]
>  --unshare-all \
>  --share-net \
>  --die-with-parent \
>  /path/to/opencode $@

This leaves the sandboxed process with access to:
- the terminal
- local sockets that you can connect to without going through the file 
system (abstract unix sockets, TCP sockets etc.)

How bad is that depends on your environment, ranging from "this will 
mildly inconvenience the human" to "haha, pwned".