Gemini CLI PR bridges IDE companion into container sandboxes without exposing tokens
elberthc-byte · ghdev · 2026-10-21
PR #29858 in google-gemini/gemini-cli fixes IDE integration (open-file context, native diffs) for Gemini CLI running in docker/podman/gVisor sandboxes. Instead of forwarding the companion's bearer token — which would be a sandbox escape since openDiff accepts arbitrary host paths — the host launcher brokers the MCP session into the container over docker exec -i and a Unix socket, with the CLI using its existing stdio transport. The channel doesn't depend on container networking at all, which is why it works even under gVisor's private loopback. A reusable engineering pattern for sandboxed agent/IDE integrations.
More from coding & agent
- Claude Code Pushes Urgent Security Update Across All Installations — umeshonai · 2026-10-23
- Claude cut a 2.6-hour video export to 20 minutes — but only after being told to rebuild the server — byhewar · 2026-10-23
- 3 flight-booking rules my AI agent checks that I'd never do by hand — Efistoffeles · 2026-10-23
- OpenJet claims Qwen3.8-27B coding runs 1.9x faster than llama.cpp on one RTX 3090 — JeremyCMorgan · 2026-10-23
- Building an autonomous SEO agent in Hermes with three skills: programmatic pages, Keywords Everywhere, DataForSEO — EXM7777 · 2026-10-23
- Building a sports betting AI agent with onchain execution and human approval by default: architecture and lessons — Dry-Comfortable-2678 · 2026-10-23