openworker

ext/openworker

Fork 0

mirror of https://github.com/andrewyng/openworker.git synced 2026-11-04 21:37:21 +00:00

Commit Graph

Author	SHA1	Message	Date
Devika Verma	7792a417f6	Credential grants: the ssh wrapper lives in the copied home, so OpenShell carries it in The runner daemon puts that folder first on PATH. Live OpenShell test for grants added; passes on the Linux VM.	2026-09-21 20:40:12 -07:00
Devika Verma	4181039ac4	OpenShell provider: one sandbox per agent, with a registry and network profiles Folders are bind-mounted at their real paths; the runner is a read-only mount and the main command. The policy is rendered from the session's roots, with the owner's uid and Landlock as a hard requirement. The runner's pipe is the gateway's gRPC exec stream; the registry caps and cleans up sandboxes.	2026-09-19 16:53:35 -07:00

Author

SHA1

Message

Date

Devika Verma

7792a417f6

Credential grants: the ssh wrapper lives in the copied home, so OpenShell carries it in

The runner daemon puts that folder first on PATH. Live OpenShell test for grants added; passes on the Linux VM.

2026-09-21 20:40:12 -07:00

Devika Verma

4181039ac4

OpenShell provider: one sandbox per agent, with a registry and network profiles

Folders are bind-mounted at their real paths; the runner is a read-only mount and the main command.
The policy is rendered from the session's roots, with the owner's uid and Landlock as a hard requirement.
The runner's pipe is the gateway's gRPC exec stream; the registry caps and cleans up sandboxes.

2026-09-19 16:53:35 -07:00