Launch pi inside a netcage: anonymized egress through a socks5h proxy, one direct hole for a local model, seeded pi config on the host. - View it on GitHub