How are you sandboxing pi?

Are you doing it or not? If yes, what approach are you taking? There are many .. docker sbx, regular container, devcontainer, pi's gondolin/sandbox extension etc. submitted by /u/rm-rf-rm [link] [comments]