Running Gemini CLI (relatively) safely in a sandbox and without npm

[crodjer]

I don't run node packages / npm on my computer, but I wanted to find a way to run gemini-cli. I found a way to do that using deno and firejail.
Basically, all you need to do is download gemini.js from github releases and then run it with deno gemini.js while sandboxing it under firejail:

DENO_COMPAT=1 firejail --whitelist=~/.gemini --whitelist=$PWD \
    $(which deno) \
    --allow-env --allow-sys --allow-read --allow-write --allow-run \
    ~/.gemini/gemini.js

Documented it on my blog.