I moved my AI coding agent into its own container, and now I don't care what it breaks
…To be clear, an unprivileged LXC is a practical isolation layer for my own agent, not a security guarantee against something actively trying to break out, so I still treat the container…