OpenShell

mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-15 05:09:44 +08:00

Files

T

History

Matthew Grossman 537805568d feat(sandbox): honor OCI image working directories (#2530 )

* feat(sandbox): honor Docker OCI working directories

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* fix(sandbox): honor effective workspace access

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* test(sandbox): cover enforced workspace denial

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* docs(docker): explain effective workdir checks

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* fix(sandbox): validate effective workspace writes

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* fix(sandbox): reserve supervisor control roots

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* refactor(sandbox): centralize control paths

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

* fix(sandbox): reserve OCI runtime mount roots

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

---------

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

2026-08-04 17:38:51 +00:00

docker-compose.mdx

docs(docker-compose): replace removed OpenClaw community sandbox with NemoClaw redirect (#2405 )

2026-07-22 09:53:37 +00:00

first-network-policy.mdx

feat(sandbox): honor OCI image working directories (#2530 )

2026-08-04 17:38:51 +00:00

github-sandbox.mdx

feat(sandbox): honor OCI image working directories (#2530 )

2026-08-04 17:38:51 +00:00

index.mdx

docs(container-gateway): fix Docker driver setup for containerized gateway (#1419 )