Matthew Grossman f19244242c feat(podman): honor OCI image working directories ...

Podman sandboxes now use a custom OCI image WORKDIR as the workspace and
as the working directory for agent commands, matching Docker. Empty, /,
and /sandbox values keep the managed /sandbox workspace volume.

A custom workspace stays in the image's container filesystem: no
workspace volume, no archive upload, and no root setup step. Resolve the
image ID, user, environment, and working directory from one pinned
inspection, validate the workdir with the shared OCI rules, and reject
Podman control-path overlaps and image volumes or driver mounts that
cover it. The runtime starts from / and passes the resolved path to agent
commands with --workdir.

Add podman_oci_identity to the Podman CI test list.

Signed-off-by: Matthew Grossman <mgrossman@nvidia.com>

2026-10-01 12:13:21 -07:00

..

_components

docs: add 0.1.0 upgrade guide outline (#3540)

2026-09-23 20:26:25 +00:00

about

fix(policy): refresh pending proposals when the sandbox policy changes (#3923)

2026-10-01 16:24:51 +00:00

brand/assets

docs(readme): add theme-aware banner (#2619)

2026-08-05 19:01:50 +00:00

extensibility

docs: refresh architecture and extensibility pages (#3741)

2026-09-27 02:18:29 +00:00

how-it-works

feat(podman): honor OCI image working directories

2026-10-01 12:13:21 -07:00

images

docs: refresh architecture and extensibility pages (#3741)

2026-09-27 02:18:29 +00:00

kubernetes

refactor(auth): separate sandbox identity from TLS (#3110)

2026-10-01 04:33:25 +00:00

observability

feat(sandbox): write agent output to the container log (#4005)

2026-10-01 17:23:09 +00:00

resources

docs(fern): move published docs into docs tree (#796)

2026-04-09 15:02:27 -07:00

sdk

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

security

refactor(auth): separate sandbox identity from TLS (#3110)

2026-10-01 04:33:25 +00:00

tutorials

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00

upgrade

docs: refresh architecture and agent guides (#3705)

2026-09-25 02:38:00 -07:00

.markdownlint-cli2.jsonc

fix(docs): scope fenced code language linting (#965)

2026-04-24 14:23:31 -07:00

CONTRIBUTING.mdx

chore(agents): simplify contributor instructions and workflows (#3987)

2026-10-01 16:20:35 +00:00

index.mdx

docs: describe 0.1 series in release callouts (#3732)

2026-09-26 03:06:48 +00:00

index.yml

docs: keep page URLs aligned with file paths (#3713)

2026-09-28 02:08:54 +00:00