# nono

34 Hacker News commenters recommended nono and 3 criticized it, November 2025 to November 2026. It was recommended in 10 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** Recommended as a free, kernel-enforced sandbox that keeps AI coding agents within set file and directory limits. Common caveat: getting access policies right takes work.

## Why people recommend it

- Kernel-level sandboxing restricts agents (3 comments): "uses kernel-level enforcement (Landlock/Seatbelt) to restrict what agents can do on your machine" ([source](https://news.ycombinator.com/item?id=47237328)) "agents start with zero trust in a kernel isolated sandbox" ([source](https://news.ycombinator.com/item?id=46862211)) "something on the kernel level is the best" ([source](https://news.ycombinator.com/item?id=47433835))
- Easy to use, starts instantly (3 comments): "Good DX, straightforward permissions system, starts up instantly." ([source](https://news.ycombinator.com/item?id=47552533)) "Its very easy to use and has a pre-made profile for pi." ([source](https://news.ycombinator.com/item?id=49177544)) "it's practically 0 seconds of latency" ([source](https://news.ycombinator.com/item?id=47553356))
- Works with any agent harness (3 comments): "Its very easy to use and has a pre-made profile for pi." ([source](https://news.ycombinator.com/item?id=49177544)) "Nono wraps my coding agent. It works really well." ([source](https://news.ycombinator.com/item?id=50018519)) "This is great because it is harness agnostic" ([source](https://news.ycombinator.com/item?id=49111625))
- Blocks gateway attacks and credential leaks (3 comments): "Fnox and Nono are the ones I know that do credentials proxying." ([source](https://news.ycombinator.com/item?id=49317823)) "its already negated a few gateway attacks" ([source](https://news.ycombinator.com/item?id=46849877)) "already negated a few gateway attacks" ([source](https://news.ycombinator.com/item?id=46849519))

## Alternatives hackers recommend

- [Bubblewrap (bwrap)](https://hackerapproved.com/p/bubblewrap.md): 109 recommend
- [Agent Safehouse](https://hackerapproved.com/p/agent-safehouse.md): 43 recommend
- [Firejail](https://hackerapproved.com/p/firejail.md): 30 recommend
- [sandbox-exec](https://hackerapproved.com/p/sandbox-exec.md): 25 recommend
- [Bubblewrap (bwrap)](https://hackerapproved.com/p/bwrap.md): 11 recommend

## Cite as

Hacker Approved, "nono", https://hackerapproved.com/p/nono/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).