We need sandboxing for any agent, so we run it within Docker - so we use CLI.

I use vscode with containers extensively. Not sure why containers imply CLI.

do you run vscode in the container ? if so, can you share your config ?

i've been trying to do this with systemd-nspawn

Easiest way to do it would be enable ssh in container and then use VSCode ssh extension. Your host VSCode “becomes” your container VSCode.

I run it natively on my rocky8 container with UI sometimes but usually just do ssh