yogurt0640

create a symlink that allows them to browse outside the bind mount Could you reproduce that? iiuc the symlink that the agent creates should follow to the path that's still inside the container.

You could try something like this https://github.com/andersonjoseph/jailed-agents

I'm actually moving to containerised isolation. I realised the agents waste too much time trying to correctly install dependencies, not unlike a normal nixos user.

I switched from iCloud Mail to Fastmail and I’m happy.

I grew up with every service enshitified in the end. Whoever has more money wins the race and gets richer, that's free market for ya.