The Perpetual Amateur · Dec 13, 2025

Run Gemini CLI Safely with Firejail

0Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

I have always had a strict policy against running JS applications. But gemini-cli looked promising, and I wanted to use it outside of a throwaway VM. A friend introduced me to firejail , which runs programs in a (configurable) restricted environment. This meant I could safely use tools like gemini-cli and reduce my exposure to the ever-present supply chain attacks in the JavaScript world. §…

I have always had a strict policy against running JS applications. But gemini-cli looked promising, and I wanted to use it outside of a throwaway VM.

A friend introduced me to firejail, which runs programs in a (configurable) restricted environment. This meant I could safely use tools like gemini-cli and reduce my exposure to the ever-present supply chain attacks in the JavaScript world.

§ Running Gemini CLI

We don’t even have to build the gemini-cli client. We can directly download gemini.js from the gemini-cli release page:

Read on /gemini-cli/ ↗

Comments

Nothing yet. Say the first thing.