Nice. I was trying to learn containers but I gave up and just made a Linux user for agents. (Actually I'll be honest, the AI told me I was being silly because Unix users solved my problem in 1970.)

So they have full rw to their own homedir, but can't read or write mine.

(I did give myself rw to theirs though, obviously ;)

They can still install most things because most dev things don't need root to install these days. They just curl rustup or go or whatever.

I guess a useful addition would be to vibe code a way for them to yell at me if they actually need me to install something, but I don't think I've run into that situation yet.