ollie/cmd/toolsrv/sandbox-remote.yaml

51 lines
890 B
YAML

# Default sandbox config for ollie-remote.
# Simpler than local — only needs project execution access.
filesystem:
ro:
- "/etc"
- "/proc"
- "/sys"
- "/dev"
- "{HOME}/.ssh/known_hosts"
- "{HOME}/.gitconfig"
- "{HOME}/.netrc"
rw:
- "/dev/null"
- "/dev/zero"
- "/dev/urandom"
- "/dev/random"
rox:
- "/usr"
- "/lib"
- "/lib64"
- "/bin"
- "/sbin"
- "{HOME}/bin"
- "{HOME}/go/bin"
- "{HOME}/.cargo/bin"
- "{HOME}/.local/bin"
- "{HOME}/.nvm"
- "{HOME}/.pyenv"
- "{XDG_CONFIG_HOME}/ollie/tools"
rwx:
- "{CWD}"
- "{TMPDIR}"
- "/tmp"
- "{HOME}/.cache"
- "{HOME}/go"
- "{HOME}/.cargo"
- "{HOME}/.npm"
env:
- PATH
- HOME
- TMPDIR
- GOPATH
- GOBIN
- XDG_CONFIG_HOME
- XDG_DATA_HOME
- SSH_AUTH_SOCK
network:
unrestricted: true
general:
best_effort: true