46 lines
868 B
YAML
46 lines
868 B
YAML
# Restricted sandbox config for execute_code
|
|
cwd: temp # Use temp workspace (cleaned up after execution)
|
|
filesystem:
|
|
ro:
|
|
- "/etc/alternatives"
|
|
- "/etc/ld.so.cache"
|
|
- "/etc/passwd"
|
|
- "{HOME}/.local/share/anvillm/mail"
|
|
- "/dev/urandom"
|
|
rox:
|
|
- "/usr"
|
|
- "/lib"
|
|
- "/lib64"
|
|
- "/bin"
|
|
- "{HOME}/go/bin"
|
|
- "{HOME}/bin"
|
|
- "{HOME}/.local/bin"
|
|
- "{HOME}/opt"
|
|
- "{PLAN9}/bin"
|
|
rw:
|
|
- "/dev/null"
|
|
- "/tmp"
|
|
- "{NAMESPACE}"
|
|
- "{XDG_RUNTIME_DIR}/superpowerd"
|
|
rwx:
|
|
- "{CWD}"
|
|
- "{HOME}/mnt/ollie"
|
|
- "{HOME}/mnt/anvillm"
|
|
- "{HOME}/mnt/beads"
|
|
- "{HOME}/mnt/denote"
|
|
env:
|
|
- NAMESPACE
|
|
- OLLIE_9MOUNT
|
|
- PATH
|
|
- HOME
|
|
- PLAN9
|
|
- DISPLAY
|
|
- WAYLAND_DISPLAY
|
|
- USER
|
|
- AGENT_ID
|
|
- SUPERPOWERD_SESSION_TOKEN
|
|
- SUPERPOWERD_SOCKET_DIR
|
|
- XDG_RUNTIME_DIR
|
|
network:
|
|
unrestricted: true
|