John Myers b1b5d90275 fix(sandbox): dynamically create and chown read_write directories ...

The sandbox now automatically creates directories listed in the policy's
`read_write` section and sets ownership to the configured sandbox user/group.
This runs in the supervisor process before forking the child.

Previously, read_write directories had to be pre-created in the Dockerfile
with correct ownership. Now arbitrary paths can be added to the policy
and they will be prepared at runtime.

Also adds a hardcoded chown for /sandbox in Dockerfile.factory as a
belt-and-suspenders approach for the default case.

2026-02-04 13:10:01 -08:00

..

sandbox-test

test(e2e): add e2e tests on skaffold

2026-02-02 17:19:00 -08:00

.dockerignore

chore(platform): hello world, intial commit

2026-01-29 17:33:35 -08:00

Dockerfile.factory

fix(sandbox): dynamically create and chown read_write directories

2026-02-04 13:10:01 -08:00

Dockerfile.sandbox-test

feat(sandboxes): initial kube sandbox impl

2026-02-03 22:13:20 -08:00

Dockerfile.server

fix(server): cleanup server multiplexing, tls

2026-02-04 11:41:04 -08:00

mise.toml

chore(sandbox): fix sandbox and factory builds

2026-02-02 10:58:51 -08:00