Add agent-sandbox launcher, images and CI #1

Merged
benvin merged 9 commits from benvin/scaffold into main 2026-10-24 16:19:58 +11:00

9 Commits

Author SHA1 Message Date
unkin-agent 07d93b0fe1 Refuse launch dirs containing the allowlist's resolved location
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/pr/lint Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
2026-10-23 22:51:11 +11:00
unkin-agent 71c1999e27 Abort on invalid allowlist lines; refuse launch dirs exposing $HOME or the allowlist
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/pr/lint Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
2026-10-23 22:46:24 +11:00
unkin-agent edbe3faeb0 Skip exact hosts covered by a .domain in nginx maps; confine router with SELinux
ci/woodpecker/pr/lint Pipeline was successful
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
2026-10-23 22:37:51 +11:00
unkin-agent 4ee52cb615 Add README
ci/woodpecker/pr/lint Pipeline was successful
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
2026-10-23 22:29:21 +11:00
unkin-agent 7a6cb93fdb Add pre-commit and Woodpecker pipelines 2026-10-23 22:29:18 +11:00
unkin-agent 0144546973 Add Makefile and RPM packaging 2026-10-23 22:29:18 +11:00
unkin-agent c3b7a32bd1 Add launcher and default allowlist 2026-10-23 22:29:18 +11:00
unkin-agent 3d0563a12c Add sandbox image with nested podman 2026-10-23 22:29:18 +11:00
unkin-agent 4122e3592b Add router image for allowlisted egress 2026-10-23 22:29:18 +11:00