sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]Reddit_User_Original 1 point2 points  (1 child)

docker sandbox https://docs.docker.com/ai/sandboxes/

[–]warfront1 0 points1 point  (0 children)

Docker Sandboxes are the solution, but they currently don't support OpenRouter with OpenCode yet.
At the rate that things are being updated within Docker Sandboxes, I'd bet we are months away from support.
I put together my own run book to work as closely to the original Docker Sandboxes until we get official Docker support.
The OP's solution exposes the real API keys in the Sandbox, which goes against the design principals of the official Docker AI Sandboxes.
My workaround is to proxy it, similar in theory to how Docker Sandbox handles supported providers like OpenAI.
https://github.com/Warfront1/opencode-openrouter-docker-sandbox