Hacker News Reader

I've been using https://nono.sh which uses landlock instead of bubblewrap. I had a look at all the similar alternatives when I started using it and everything else I could find was far too vibe coded for me to trust, especially for this.

Make sure to use the —standalone flag with sandbox invocations of opencode, else you will run the client in a sandbox but not the server.

Microsoft has mxc which I think is neat — not sure if it’s the right level of abstraction for your needs

https://github.com/microsoft/mxc