CLI · Shell

Pi Dockerized

In simple terms

Runs the Pi coding agent inside a container that only sees your project folder, so you can hand it an AI agent without exposing your home, your keys or your system.

Technical details

Shell wrapper over Docker (digest-pinned Debian + Node/NVM, pnpm, uv and Pi) that starts as the host UID/GID with --cap-drop=ALL and no-new-privileges. Enforcement lives in a security extension baked read-only into the image (opencode-policy patterns plus secret and destructive-command backstops) in strict/balanced/off modes: the guard self-tests before every session and fails closed. Config, skills, MCP and Pi Packages are mounted read-only from the host, with an audit log of blocked calls.

Shell Docker Debian Pi Node.js

Highlights

Agent with no access to $HOME, keys or the Docker socket
Baked read-only guard with strict/balanced/off modes
Extensions, skills and MCP managed read-only from the host

Lines of code

8,670

Shell

76%

JavaScript

19%

Dockerfile

TypeScript

Last recorded activity 30 commits · 52 sem

Last recorded activity in the project.