Tinson Lai 2f8e8ac311 fix(sandbox): inject GIT_SSL_CAINFO so git clone trusts the sandbox CA (#918) ...

Ubuntu Noble's git links against libcurl-gnutls, which does not read
SSL_CERT_FILE. Without GIT_SSL_CAINFO, `git clone` over HTTPS fails
inside every community sandbox image with "server certificate
verification failed".

Add GIT_SSL_CAINFO to tls_env_vars pointing at the same combined CA
bundle already used by CURL_CA_BUNDLE / REQUESTS_CA_BUNDLE.

Fixes #790
Fixes NVIDIA/NemoClaw#2270
Fixes NVIDIA/NemoClaw#1828

Signed-off-by: Tinson Lai <tinsonl@nvidia.com>

2026-04-22 13:35:21 -07:00

..

data

fix(sandbox): canonicalize HTTP request-targets before L7 policy evaluation (#878)

2026-04-21 07:08:07 -07:00

src

fix(sandbox): inject GIT_SSL_CAINFO so git clone trusts the sandbox CA (#918)

2026-04-22 13:35:21 -07:00

testdata

feat(sandbox): auto-detect TLS and terminate unconditionally for credential injection (#544)

2026-03-23 18:45:18 -07:00

tests

fix(sandbox): canonicalize HTTP request-targets before L7 policy evaluation (#878)

2026-04-21 07:08:07 -07:00

Cargo.toml

feat(server,sandbox): supervisor-initiated SSH connect and exec over gRPC-multiplexed relay (#867)

2026-04-21 08:38:18 -07:00