diff --git a/tools/bazel.rc b/tools/bazel.rc
index 513bc94..8fb26ae 100644
--- a/tools/bazel.rc
+++ b/tools/bazel.rc
@@ -62,3 +62,4 @@
 startup --host_jvm_args=-Dbazel.DigestFunction=SHA1
 
 common --watchfs
+build --spawn_strategy=linux-sandbox