{"slug": "litterbox", "name": "Litterbox", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 4, "warners": 0, "score": 3.086, "rising": 3.0, "first": "2026-08-10", "latest": "2026-09-22", "why": "I'm using https://github.com/Gerharddc/litterbox to sandbox all my development these days", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 1, "warn": 0}, "spark": [0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 2, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I'm using https://github.com/Gerharddc/litterbox to sandbox all my development these days", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/gerharddc/litterbox", "official_url": "https://github.com/Gerharddc/litterbox", "pricing": "", "aliases": ["Litterbox", "litterbox"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 795208948, "item_id": 49700559, "url": "https://news.ycombinator.com/item?id=49700559", "by": "runjake", "date": "2026-09-14", "version": null, "stance": "recommend", "quote": "For Safari: https://andadinosaur.com/launch-litterbox", "excerpt": "These browser extensions still work: For Chrome: https://github.com/tsvb/post-peek For Firefox: https://addons.mozilla.org/en-US/firefox/addon/dumpster-fire/ For Safari: https://andadinosaur.com/launch-litterbox", "context": "", "use_case": "", "switched_from": "", "story": "XCancel service is suspended until further notice"}, {"id": 795132832, "item_id": 49695802, "url": "https://news.ycombinator.com/item?id=49695802", "by": "newscracker", "date": "2026-09-14", "version": null, "stance": "recommend", "quote": "I learned of this recently released free Safari extension called Litterbox", "excerpt": "This may be a situation where revealing a solution may end up harming it. For those who use iOS and other Apple OSes, I learned of this recently released free Safari extension called Litterbox that allows looking at one post on x.com. [1]: https://andadinosaur.com/launch-litterbox", "context": "", "use_case": "", "switched_from": "", "story": "XCancel service is suspended until further notice"}, {"id": 787865952, "item_id": 49241622, "url": "https://news.ycombinator.com/item?id=49241622", "by": "mellowagain", "date": "2026-08-10", "version": null, "stance": "recommend", "quote": "ive been using https://github.com/Gerharddc/litterbox", "excerpt": "ive been using https://github.com/Gerharddc/litterbox", "context": "", "use_case": "", "switched_from": "", "story": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents"}, {"id": 752081504, "item_id": 47005094, "url": "https://news.ycombinator.com/item?id=47005094", "by": "Gerharddc", "date": "2026-02-13", "version": null, "stance": "recommend", "quote": "I'm using https://github.com/Gerharddc/litterbox to sandbox all my development these days", "excerpt": "TL;DR: I'm using https://github.com/Gerharddc/litterbox to sandbox all my development these days and have now managed to get the ROCm variant of PyTorch running with GPU access inside a Litterbox. If you'd like to see the details of how to achieve that, this post is for you!", "context": "", "use_case": "sandboxing dev work", "switched_from": "", "story": "PyTorch on ROCm Inside a Litterbox"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["sandboxed dev environments", "sandboxing dev work"], "compared": [{"slug": "podman", "name": "Podman", "co": 3, "switched_from": 0, "switched_to": 0}], "makers": [{"id": 761790896, "item_id": 47611931, "url": "https://news.ycombinator.com/item?id=47611931", "by": "Gerharddc", "date": "2026-04-02", "version": null, "stance": "recommend", "quote": "takes things a bit further by allowing you to easily sandbox your entire development environment", "excerpt": "Oh wow, this looks nicely done! It's also nice that it's cross platform. I've done something similar with https://github.com/Gerharddc/litterbox which takes things a bit further by allowing you to easily sandbox your entire development environment (i.e. IDE and everything) using containers. Unfortunately I have not gotten around to the network sandboxing part though, that seems very tricky to get useful without being", "context": "", "use_case": "sandboxing dev environment in containers", "switched_from": "", "story": "Show HN: Zerobox \u2013 Sandbox any command with file and network restrictions"}, {"id": 746073600, "item_id": 46629600, "url": "https://news.ycombinator.com/item?id=46629600", "by": "Gerharddc", "date": "2026-01-15", "version": null, "stance": "recommend", "quote": "I have built https://github.com/Gerharddc/litterbox", "excerpt": "Great writeup! An alternative I have explored (more for defense against supply-chain attacks than for agents admittedly) is to use rootless Podman to get a dev-container-like experience alongside sandboxing. To this end I have built https://github.com/Gerharddc/litterbox (https://litterbox.work/) which greatly simplifies container setup and integrates a special ssh-agent for sandboxing that always prompts the user be", "context": "", "use_case": "Rootless container dev environments", "switched_from": "", "story": "Bubblewrap: A nimble way to prevent agents from accessing your .env files"}, {"id": 745816576, "item_id": 46613536, "url": "https://news.ycombinator.com/item?id=46613536", "by": "Gerharddc", "date": "2026-01-14", "version": null, "stance": "recommend", "quote": "built on rootless Podman with a strong focus on isolation and security", "excerpt": "Very interesting read, I had no idea agents already had so much sandboxing built in! It does seem like this is probably not enough though. A few months ago I built https://github.com/Gerharddc/litterbox (https://litterbox.work/) primarily to shield my home directory from supply-chain attacks, but I imagine it could be very useful for defending against rogue agents too. Essentially it is a dev-container-like system fo", "context": "", "use_case": "isolated dev container on Linux", "switched_from": "", "story": "A deep dive on agent sandboxes"}, {"id": 745580432, "item_id": 46598777, "url": "https://news.ycombinator.com/item?id=46598777", "by": "Gerharddc", "date": "2026-01-13", "version": null, "stance": "recommend", "quote": "I've recently built something similar", "excerpt": "Very cool! I've recently built something similar at https://github.com/Gerharddc/litterbox (https://litterbox.work/). Litterbox only works on Linux as it heavily relies on Podman, but it does have a few other benefits for my use-case: - Most importantly, it exposes a Wayland socket so that I can run my entire dev environment (i.e. editor etc.) inside the container. This gives additional protection against exploits in", "context": "", "use_case": "sandbox for AI coding agents", "switched_from": "", "story": "Show HN: Yolobox \u2013 Run AI coding agents with full sudo without nuking home dir"}], "threads": [{"url": "https://news.ycombinator.com/item?id=49694296", "title": "XCancel service is suspended until further notice", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49801329", "title": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49239751", "title": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47574871", "title": "Show HN: Zerobox \u2013 Sandbox any command with file and network restrictions", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47005093", "title": "PyTorch on ROCm Inside a Litterbox", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46626836", "title": "Bubblewrap: A nimble way to prevent agents from accessing your .env files", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 1}, "2026-09": {"recommend": 2, "compare": 1}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 796850337, "item_id": 49803146, "url": "https://news.ycombinator.com/item?id=49803146", "by": "p2004a", "date": "2026-09-22", "version": null, "stance": "compare", "quote": "it is very nice too, but the friction is a bit higher than drop", "excerpt": "Thank you for building it! I started using Drop a few weeks ago, and I've been very happy with it so far (thanks again for quickly fixing a few issues I've reported :)!). For me, it nails the convenience vs isolation aspect quite well, and I would like to get to a point where I can use it for all my development by default. The main challenges that I still have, which none of the solutions I've found so far resolve, a", "context": "", "use_case": "Sandboxed dev environments", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 795208948, "item_id": 49700559, "url": "https://news.ycombinator.com/item?id=49700559", "by": "runjake", "date": "2026-09-14", "version": null, "stance": "recommend", "quote": "For Safari: https://andadinosaur.com/launch-litterbox", "excerpt": "These browser extensions still work: For Chrome: https://github.com/tsvb/post-peek For Firefox: https://addons.mozilla.org/en-US/firefox/addon/dumpster-fire/ For Safari: https://andadinosaur.com/launch-litterbox", "context": "", "use_case": "", "switched_from": "", "story": "XCancel service is suspended until further notice"}, {"id": 795132832, "item_id": 49695802, "url": "https://news.ycombinator.com/item?id=49695802", "by": "newscracker", "date": "2026-09-14", "version": null, "stance": "recommend", "quote": "I learned of this recently released free Safari extension called Litterbox", "excerpt": "This may be a situation where revealing a solution may end up harming it. For those who use iOS and other Apple OSes, I learned of this recently released free Safari extension called Litterbox that allows looking at one post on x.com. [1]: https://andadinosaur.com/launch-litterbox", "context": "", "use_case": "", "switched_from": "", "story": "XCancel service is suspended until further notice"}, {"id": 787865952, "item_id": 49241622, "url": "https://news.ycombinator.com/item?id=49241622", "by": "mellowagain", "date": "2026-08-10", "version": null, "stance": "recommend", "quote": "ive been using https://github.com/Gerharddc/litterbox", "excerpt": "ive been using https://github.com/Gerharddc/litterbox", "context": "", "use_case": "", "switched_from": "", "story": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents"}, {"id": 752081504, "item_id": 47005094, "url": "https://news.ycombinator.com/item?id=47005094", "by": "Gerharddc", "date": "2026-02-13", "version": null, "stance": "recommend", "quote": "I'm using https://github.com/Gerharddc/litterbox to sandbox all my development these days", "excerpt": "TL;DR: I'm using https://github.com/Gerharddc/litterbox to sandbox all my development these days and have now managed to get the ROCm variant of PyTorch running with GPU access inside a Litterbox. If you'd like to see the details of how to achieve that, this post is for you!", "context": "", "use_case": "sandboxing dev work", "switched_from": "", "story": "PyTorch on ROCm Inside a Litterbox"}]}