On linux I devised this strategy for letting llm webuis or coding agent to securely run programs by burying their environment under multiple layers of locally arranged sandboxing.
Basically: run as another user -> run inside firejail sandbox -> run inside a stripped down alpine linux vm with smolvm.
P.S. directories can be easily shared between the sandboxed guest and the host os
P.P.S. to stay a bit more on the safe side I also changed the name of the package manager for the guest os to something else so that when a coding agent would try to autonomously install external packages it will fail. I've then instructed it to (politely) ask for whatever it needs to be eventually manually installed by me
cannabis in many varieties and cannabinoids especially the most significant naturally made potentially aboundant and so theoretically cheaply sourceable receptors' agonist compound, namely delta-9-thc, when taken not occasionally i.e. within a continuous pattern of increasingly large quantities, in order to steadily reach without having to rise a too harsh steep slope, to plateau when the desired medical effect could manifest, in extracted purified forms, at high molar concentrations (up to and over 5-10 µM depending on different malignancies) have demostrated - albeit not in many practical human targeted clinical settings despite numerous studies dating back since 1974 and even more so in the last recent decades, have confirmed such potential usage - a strong antiproliferative, antineoplastic, antitumor, anticancer activity.
cannabis in many varieties and cannabinoids especially the most significant naturally made potentially cheaply sourceable receptors' agonist compound delta-9-thc, when taken not occasionally, in increasingly large quantities, in extracted purified forms, at high molar concentrations (up to and over 5-10 µM) have demostrated - albeit not in many clinical settings despite numerous studies since 1974 have confirmed such potential usage - a strong antiproliferative, antineoplastic, antitumor, anticancer activity.
Basically: run as another user -> run inside firejail sandbox -> run inside a stripped down alpine linux vm with smolvm.
See the whole procedure here: https://www.reddit.com/r/LocalLLaMA/comments/1tm93ng/how_i_d...
P.S. directories can be easily shared between the sandboxed guest and the host os
P.P.S. to stay a bit more on the safe side I also changed the name of the package manager for the guest os to something else so that when a coding agent would try to autonomously install external packages it will fail. I've then instructed it to (politely) ask for whatever it needs to be eventually manually installed by me