@micahflee containers are good for this, I've been running the agents in containers in yolo mode for various stuff, really useful when you need them to figure out something involving tools instead of just code The next step is to limit the connectivity so it can't exfiltrate your code, it's a bit harder but with some firewall it and forcing all traffic through a proxy it's possible to do precise enough filtering But, looking at your dockerfile... what's up with running apt-get update 6 times and deleting the list each time. I mean bandwidth is cheap by why waste it?