I'm using firejail to sandbox Opencode, for security and to keep the agents from personal data. I documented it in my blog [1].

[1] https://blog.fidelramos.net/software/how-i-sandbox-ai-agents...