Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request significantly enhances the sandboxing documentation for the Gemini CLI. By restructuring the content for better flow and adding detailed technical guidance on container-based workflows, the update aims to reduce user friction and clarify common configuration patterns for advanced sandboxing scenarios.

Highlights

• Documentation Reorganization: Moved the Quickstart and general configuration sections to the top of the document to improve readability and provide immediate value to users.
• Expanded Container Documentation: Added comprehensive details on Docker/Podman workflows, including workspace path mounting, custom image configuration via settings or environment variables, and automatic local image building.
• New Sandbox Features: Documented the use of the SANDBOX_MOUNTS environment variable for mounting external files and provided guidance for running the CLI inside Docker containers.

Size Change: -4 B (0%)

Total Size: 33.7 MB

_{compressed-size-action}

I was reading the docs today and I think the SANDBOX_MOUNTS docs are a bit misleading for macOS.

The docs imply SANDBOX_MOUNTS handles sandbox expansion generally, but in the code it only feeds Docker/Podman --volume args. It does nothing for sandbox-exec.

Anothe issue is that we cannot combine sandbox options in the config and gemini -s. I think this is the problematic code:

If -s is present, it wins over my configuration, so allowedPaths has not effect. If this intentional, I would clarify it in the docs?

{
  "tools": {
    "sandbox": {
      "command": "sandbox-exec",
      "allowedPaths": [...]
    }
  }
}

I can file a separate issue but though it might get lost in the noise.