mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-30 07:33:59 +08:00
52 lines
1.2 KiB
YAML
52 lines
1.2 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
version: 1
|
|
|
|
filesystem_policy:
|
|
include_workdir: true
|
|
read_only:
|
|
- /usr
|
|
- /lib
|
|
- /etc
|
|
- /app
|
|
- /var/log
|
|
- /proc/self
|
|
- /dev/urandom
|
|
read_write:
|
|
- /sandbox
|
|
- /tmp
|
|
- /dev/null
|
|
|
|
landlock:
|
|
compatibility: best_effort
|
|
|
|
process:
|
|
run_as_user: sandbox
|
|
run_as_group: sandbox
|
|
|
|
# Allow PyPI access so pip can install dependencies inside the sandbox.
|
|
network_policies:
|
|
pypi:
|
|
name: PyPI
|
|
endpoints:
|
|
- { host: pypi.org, port: 443 }
|
|
- { host: files.pythonhosted.org, port: 443 }
|
|
binaries:
|
|
- path: /usr/bin/python3.13
|
|
|
|
# Direct access to the NVIDIA inference API (L7 TLS intercept).
|
|
# Used to verify that the L7 REST relay path streams responses correctly
|
|
# (contrast with the inference.local interception path above).
|
|
nvidia_direct:
|
|
name: NVIDIA API (L7 intercept)
|
|
endpoints:
|
|
- host: integrate.api.nvidia.com
|
|
port: 443
|
|
protocol: rest
|
|
tls: terminate
|
|
enforcement: enforce
|
|
access: full
|
|
binaries:
|
|
- path: /usr/bin/python3.13
|