Show HN: Pi pod – Run your pi coding agent in sandboxes on your own server
Pi pod is a self-hosted environment for running the pi coding agent in isolated containers with support for mobile apps and team configuration.
summary is enough The project is a wrapper around an existing agent (pi) and the value is primarily in the convenience of self-hosting and mobile access.
summary
Pi pod provides a sandboxed infrastructure for the pi coding agent, allowing users to run it on their own servers to avoid vendor lock-in and maintain privacy. It offers container-based isolation for sessions, a TUI that reduces SSH lag, and planned native mobile apps for portability. The system is designed to allow organizations to standardize agent configurations at the project and team levels.
key points
- Runs pi sessions in individual containers within a self-hosted VM.
- Includes a locally rendered TUI to eliminate input lag over SSH connections.
- Supports organizational configuration management for teams and projects.
- Provides source code for Swift and Kotlin mobile apps for remote access.
who should read it
Users of the pi coding agent who want to self-host their environment or manage it across a team.
discussion positive
consensus
Commenters generally agree that running agents in sandboxes is a good practice, though many have already built their own minimalist versions using Docker, LXC, or Nix.
pushback
Some users argue that containers are insufficient security boundaries for untrusted code and recommend MicroVMs like Firecracker instead.
not op but firecracker exists, as does docker sbx (not container!),
firecracker is a lot more of a headache to setup than docker sbx (not container!) but if you can get it going it probably “feels” the best
of a different variety some people feel better using stuff like bubblewrap/fire jail but idk if these are still microvm as opposed to the above
but it’s my opinion (perhaps completely criticizable), that sandboxing for personal home use machines is 1) somewhat overkill 2) somewhat theatre 3) psychologically sometimes exhausting and unrealistic always assuming the worst is going to …
Provides a nuanced take on the trade-off between the security of MicroVMs and the friction they introduce for personal use.
Generated by an LLM from the article and thread. Check the sources before relying on it.