Sandboxing ComfyUI with Nono: one profile. to block malicious extensions
GeroldMeisinger · reddit · 2026-09-07
Reddit user GeroldMeisinger shares a full recipe for running ComfyUI inside a Nono sandbox. Context: ComfyUI third-party extensions can run arbitrary Python code — reading /.ssh, deleting anything under $HOME — with past incidents like the LLMVision hack (June 2024). Docker is too heavy and a dedicated user account doesn't fit desktop workflows, so Nono offers a lighter path:
- A single profile. declares privileges (directory read/write, network, etc.) and runs the process isolated
- Ready-made comfyui. profile, three steps: install Nono → copy profile to /.config/nono/profiles → run nono run --profile comfyui --allow-gpu -- uv run main.py
- Same approach helps coding agents: when an LLM might emit harmful commands, Nono restricts its privileges conveniently
The author plans to publish the profile to the official registry.
More from coding & agent
- Hermes Desktop adds Routines: scheduled profiles turn agents into unattended workers — Teknium · 2026-09-07
- Pydantic launches HTTPX2, taking over stewardship of the stalled HTTPX HTTP client — samuelcolvin · 2026-09-07
- LangChain's Harrison Chase crowdsources wish list for an 'OpenRouter for tools' — hwchase17 · 2026-09-07
- Claude Code Rules silently broken since Aug 18 — disable CLAUDE_CODE_THRIFTY_SONIC to fix — 4310sy · 2026-09-07
- tenobrus: Human-centric code conventions may not survive superhuman coding models — ricklamers · 2026-09-07
- How to enable a 1M-token context window in Codex with GPT-5.6 Sol — SIGKITTEN · 2026-09-07