mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-13 04:51:00 +08:00
Drew Newberry
9244868056
* docs: refresh architecture and agent guides Signed-off-by: Drew Newberry <anewberry@nvidia.com> * docs: describe updated security architecture neutrally Signed-off-by: Drew Newberry <anewberry@nvidia.com> * docs: highlight new isolation primitives Signed-off-by: Drew Newberry <anewberry@nvidia.com> * docs(sandboxes): clarify how to disconnect Signed-off-by: Drew Newberry <anewberry@nvidia.com> * docs: align architecture and guides with current navigation Signed-off-by: Drew Newberry <anewberry@nvidia.com> * docs(extensibility): streamline extension authentication guidance Signed-off-by: Drew Newberry <anewberry@nvidia.com> --------- Signed-off-by: Drew Newberry <anewberry@nvidia.com>
35 lines
1.3 KiB
Plaintext
35 lines
1.3 KiB
Plaintext
---
|
|
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
title: "Tutorials"
|
|
description: "Step-by-step walkthroughs for OpenShell, from first sandbox to production-ready policies."
|
|
keywords: "Generative AI, Cybersecurity, Tutorial, Sandbox, Policy"
|
|
position: 1
|
|
---
|
|
|
|
Hands-on walkthroughs that teach OpenShell concepts by building real configurations. Each tutorial builds on the previous one, starting with core sandbox mechanics and progressing to production workflows.
|
|
|
|
<Cards>
|
|
|
|
<Card title="Run Pi" href="/tutorials/run-pi">
|
|
|
|
Build a Pi coding-agent image, configure Anthropic access, and run it inside an OpenShell sandbox.
|
|
</Card>
|
|
|
|
<Card title="First Network Policy" href="/tutorials/first-network-policy">
|
|
|
|
Create a sandbox, observe default-deny networking, apply a read-only L7 policy, and inspect audit logs. No AI agent required.
|
|
</Card>
|
|
|
|
<Card title="GitHub Push Access" href="/tutorials/github-push-access">
|
|
|
|
Launch Claude Code in a sandbox, diagnose a policy denial, and iterate on a custom GitHub policy from outside the sandbox.
|
|
</Card>
|
|
|
|
<Card title="Microsoft Graph Provider Refresh" href="/tutorials/microsoft-graph-provider-refresh">
|
|
|
|
Configure a Microsoft Graph provider profile with gateway-managed OAuth2 refresh-token rotation.
|
|
</Card>
|
|
|
|
</Cards>
|