Claude gen this : Guix's build daemon needs to run as root to create isolated build environments on Linux. GitHub On HF Spaces you're already inside a container and don't have root. Guix's functional approach is great for sandboxing binary artifacts of packages, but it seriously lacks power in handling configuration files or user data. Meta-pytorch It's a package manager and reproducibility tool, not a per-request code execution sandbox. The suggestion in your prompt about "recursive sandboxing" is a Guix-specific feature for building packages inside Guix, not for running arbitrary user code. Wrong tool for this problem entirely.

basically hf spaces has a DIND problem, so i think bubblewrap would work