sandbox_init: fix workdir