coulomb/sand-boxer
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add owner-mediated bwrap execution boundary

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a06def-6490-7033-8448-2eab2d12ed44
This commit is contained in:
tegwick 2026-09-04 22:12:19 +02:00
parent 877676d1f1
commit d79e3fe358
23 changed files with 1321 additions and 86 deletions
Download patch file Download diff file Expand all files Collapse all files

7
Makefile
View file

@ -1,6 +1,6 @@
.DEFAULT_GOAL := help
.PHONY: help setup install test lint format build check cli-version smoke-remote
.PHONY: help setup install test lint format build check cli-version smoke-remote smoke-bwrap-exec
help: ## List available make targets
@awk 'BEGIN {FS = ":.*## "}; /^[a-zA-Z0-9_.-]+:.*## / {printf " %-16s %s\n", $$1, $$2}' $(MAKEFILE_LIST)
@ -29,4 +29,7 @@ cli-version: ## Print CLI version (smoke test for entry point)
uv run sandboxer version
smoke-remote: ## T10 remote create/destroy smoke (needs SANDBOXER_HOST)
./scripts/smoke-compose-e2e.sh
./scripts/smoke-compose-e2e.sh
smoke-bwrap-exec: ## Owner-mediated local bwrap create/exec/destroy proof
uv run python scripts/smoke-bwrap-exec.py