require landrun for execute_code, update docs
Update core submodule: WrapCommand returns a hard error when landrun is not detected. Document the requirement in ARCHITECTURE.md.
This commit is contained in:
parent
45d1b6b77e
commit
ce17021b58
2
core
2
core
|
|
@ -1 +1 @@
|
|||
Subproject commit 6422c365b7002e1577ed490adb8c7c8c36fcbfc3
|
||||
Subproject commit 36d3021aae2e140cba23a0f623ec034bef0257ff
|
||||
|
|
@ -225,6 +225,10 @@ Sandboxing is applied specifically to `execute_code`. Each code step is wrapped
|
|||
`~/.config/ollie/sandbox/<name>.yaml`; if no `sandbox` argument is passed in the
|
||||
`execute_code` call, the `default` config is used.
|
||||
|
||||
**landrun is required.** If landrun is not installed or not in `PATH`,
|
||||
`execute_code` will refuse to run and return a hard error. There is no
|
||||
unsandboxed fallback.
|
||||
|
||||
Steps marked `elevated: true` run outside the sandbox via the elevation backend
|
||||
(`x/elevate`) and are the only exception. All other steps are sandboxed unconditionally.
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue