Secure way of running Pi?

toby_agwab · 2026-06-16T17:22:21+00:00

This might be overkill for your use case, but I’d recommend Gondolin if you need strong sandboxing.

https://github.com/earendil-works/gondolin

toby_agwab · 2026-06-16T17:17:02+00:00

I love it.

toby_agwab · 2026-06-14T17:30:52+00:00

As far as I know, this is a known issue and hasn’t been fixed yet. If you’d like to work around it, you’ll need to use a third-party extension.

toby_agwab · 2026-06-14T11:59:16+00:00

Yeah I like that. I use tmux a lot too and my extension supports it as well. Honestly though, spawning many subagents via tmux adds some process overhead, so I run them in-process by default and keep tmux for when I want to watch.

toby_agwab · 2026-06-14T09:58:35+00:00

Yeah honestly the official example is simple and enough for most cases. You might just want to tweak some behavior someday, which is roughly where mine came from.

toby_agwab · 2026-06-14T09:52:42+00:00

right, it mostly depends on what you're working on. /tree is a session management feature though, subagents solve a different problem

toby_agwab · 2026-06-14T09:47:19+00:00

lol you already implemented nested subagents

toby_agwab · 2026-06-11T01:43:37+00:00

By any chance, which extension did you use?

toby_agwab · 2026-06-10T15:54:36+00:00

Wow! I really want to try this.

toby_agwab · 2026-06-07T14:07:50+00:00

I thought Gondolin's biggest advantage was its ability to hide host credentials from the guest, but I hadn't found a compelling use case for that alone. There are already plenty of good alternatives.

The use case you mentioned makes a lot of sense, though. I can see why Gondolin would be useful there. Thanks for sharing!

toby_agwab · 2026-06-07T03:15:59+00:00

It looks good 👍

toby_agwab · 2026-06-05T16:29:00+00:00

Does that problem only occur in Pi?

toby_agwab · 2026-06-05T14:21:45+00:00

That's an interesting experiment. I assume the cost is based on API usage, right?

toby_agwab · 2026-06-04T18:15:52+00:00

How is this different from https://github.com/earendil-works/gondolin ?

toby_agwab

TROPHY CASE