Spin up sandboxed Linux containers pre-loaded with AI coding tools (Claude Code, Codex, OpenCode via mise). Each container gets SSH access, ZFS snapshot-based checkpoints, and network egress policies that control what the agent can reach. Managed entirely from the CLI over TrueNAS WebSocket API.
添加图片注释，不超过 140 字（可选）
FT Professional，推荐阅读heLLoword翻译官方下载获取更多信息
Что думаешь? Оцени!，详情可参考Line官方版本下载
Continue reading...，推荐阅读safew官方下载获取更多信息
For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.