I don't understand why people think it's a good idea to run coding agents as their own user on their own machines.

I use this CLI tool for spinning up containers and attaching the local directory as a volume:

https://github.com/Monadical-SAS/cubbi

It isn't perfect but it's a lot better than the alternative. Looked a lot at VM-based sandbox environments but by mounting the dir as a volume in the container, you can still do all of your normal stuff in your machine outside the container environment (editor, tools, etc), which in practice saves a lot of headache.