That's why I went with a different strategy and scope: Copy the current Git repo into a sandboxes dir, mount that copy in the container. The tradeoff is disk space allocated per sandbox, but I'm OK with that.

Wouldn't you solve the space allocation issue by using a symbolic link?

Sorry if it's a dumb question - I'm just getting into sandboxing for the first time myself and ran into this same thought before.