rake: sh, sandbox