Tools: Show Hn: Fence – Sandbox Cli Commands With Network/filesystem...

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code (package installs, build scripts, CI jobs, unfamiliar repos) with controlled side effects, and it can also complement AI coding agents as defense-in-depth.

You can also think of Fence as a permission manager for your CLI agents.

Use fence --settings ./custom.json to specify a different config.

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

There was an error while loading. Please reload this page.

Source: HackerNews