>>110191862
I use a modified version of another Anon's bubblewrap wrapper script, this allows network access and nvidia gpu usage, but isolates it from the file system aside from folders you bind, which can be done read only as below.
#!/usr/bin/env bash
sandbox=~/.local/share/sandboxes/sandbox
mkdir -p $sandbox
PWD="$(realpath $PWD)"
PWDARG="--bind $PWD $PWD"
if [ "$PWD" == "$HOME" ]
then
echo PWD is HOME, not binding it
PWDARG=""
fi
bwrap \
--ro-bind /bin /bin \
--ro-bind /lib /lib \
--ro-bind /lib64 /lib64 \
--ro-bind /etc /etc \
--ro-bind /sbin /sbin \
--ro-bind /usr /usr \
--tmpfs /dev/shm \
--ro-bind /sys /sys \
--ro-bind /etc/resolv.conf /etc/resolv.conf \
--ro-bind /media/models /media/models \
--ro-bind /opt/cuda /opt/cuda \
--dev /dev \
--dev-bind-try /dev/nvidia0 /dev/nvidia0 \
--dev-bind-try /dev/nvidiactl /dev/nvidiactl \
--dev-bind-try /dev/nvidia-uvm /dev/nvidia-uvm \
--dev-bind-try /dev/nvidia-uvm-tools /dev/nvidia-uvm-tools \
--dev-bind-try /dev/nvidia-modeset /dev/nvidia-modeset \
--tmpfs /tmp \
--proc /proc \
--bind $sandbox $HOME \
$PWDARG \
--die-with-parent \
--unshare-all \
--share-net \
$@
