John Myers 20ba66c634 fix(sandbox): add network namespace isolation for proxy mode ...

In proxy mode, processes could bypass HTTP_PROXY env vars and connect
directly to any IP since seccomp cannot filter connect() by destination.

This adds network namespace isolation:
- Create isolated netns with veth pair (10.200.0.1 <-> 10.200.0.2)
- Proxy binds to host side of veth
- Sandboxed process enters netns via setns() in pre_exec
- Only network path out is through the proxy

Also adds CAP_SYS_ADMIN and CAP_NET_ADMIN to container configs and
installs iproute2 for namespace management.

2026-02-04 15:00:10 -08:00

..

sandbox-test

test(e2e): add e2e tests on skaffold

2026-02-02 17:19:00 -08:00

.dockerignore

chore(platform): hello world, intial commit

2026-01-29 17:33:35 -08:00

Dockerfile.factory

fix(sandbox): add network namespace isolation for proxy mode

2026-02-04 15:00:10 -08:00

Dockerfile.sandbox-test

fix(sandbox): add network namespace isolation for proxy mode

2026-02-04 15:00:10 -08:00

Dockerfile.server

fix(server): cleanup server multiplexing, tls

2026-02-04 11:41:04 -08:00

mise.toml

chore(sandbox): fix sandbox and factory builds

2026-02-02 10:58:51 -08:00