DEDUPEDWho it is forA security-minded developer who wants an agent but not unrestricted file and network access.
The problemBy default Pi can read files, run processes and use the network as you.
The outcomePi running in Docker, OpenShell or with tools routed into a local Linux micro-VM via the Gondolin extension.
What you need first
- Node.js 22.19 or newer (the installers can install it)
- A subscription or API key for a built-in AI provider, connected with /login
- Optional: Nix, Docker or a micro-VM if you want sandboxing
Steps
- Read the containerization guide linked from Permissions and Containerization
- Choose plain Docker for simple isolation of the whole Pi process
- Or use the Gondolin extension to keep provider auth on the host while built-in tools run in a micro-VM
- Or run Pi inside an OpenShell policy-controlled sandbox
Prompt for your agent
Set up earendil-works/pi so it runs isolated on this machine: compare the README's Docker, Gondolin and OpenShell options for my <OS> and configure the one that keeps provider auth on the host.
Caveat. This card is written from the earendil-works/pi README, not from a test run by Deduped. Before you start, make sure you have Node.js 22.19 or newer. Check the repo for newer instructions before you rely on these steps.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for earendil-works/pi and "Run Pi with stronger boundaries in a container or micro-VM"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer