- container/ (directory) feat(cache): serve the cache on the guest loopback over the host channel (#27)
- disk/ (directory) fix(sandbox/container): host lock, deny-privileged and per-job warning, pids and swap limits, loop-mounted scratch disk, keep policy while the container may run, abortable boot, ErrLeaked
- drivers/ (directory) refactor(container): rename the rootless option UnsafeAllowRootlessForTests and test that production never sets it (G4)
- integration/ (directory) feat(externals): provide pinned Node.js to sandboxes outside the image
- netsetup/ (directory) feat(cache): serve the cache on the guest loopback over the host channel (#27)
- sandboxtest/ (directory) feat(cache): serve the cache on the guest loopback over the host channel (#27)
- vm/ (directory) feat(cache): serve the cache on the guest loopback over the host channel (#27)
- cache.go 1.6 KiB feat(cache): serve the cache on the guest loopback over the host channel (#27)
- config.go 11.6 KiB feat(cache): serve the cache on the guest loopback over the host channel (#27)
- contract.go 2.6 KiB feat(cache): serve the cache on the guest loopback over the host channel (#27)
- core_test.go 4.6 KiB feat(sandbox): host-wide lock, ErrLeaked/ErrBusy, boot gate, ID and Isolation, free-space warning, new limits in config
- externals.go 1.6 KiB feat(externals): provide pinned Node.js to sandboxes outside the image
- gate.go 1.3 KiB feat(sandbox): host-wide lock, ErrLeaked/ErrBusy, boot gate, ID and Isolation, free-space warning, new limits in config
- guestforge.go 5.4 KiB feat(runner): opt-in guest access to the forge host:port of ERMITE_RUNNER_URL
- guestforge_test.go 5.1 KiB feat(runner): opt-in guest access to the forge host:port of ERMITE_RUNNER_URL
- id.go 770 B feat(sandbox): add the Sandbox and Driver interfaces, config and isolation selection
- lock.go 1.6 KiB feat(sandbox): host-wide lock, ErrLeaked/ErrBusy, boot gate, ID and Isolation, free-space warning, new limits in config
- sandbox.go 5.9 KiB feat(sandbox): host-wide lock, ErrLeaked/ErrBusy, boot gate, ID and Isolation, free-space warning, new limits in config
- sandbox_test.go 10.3 KiB feat(externals): provide pinned Node.js to sandboxes outside the image
- select.go 4.6 KiB feat(sandbox): add the Sandbox and Driver interfaces, config and isolation selection
- space.go 1.4 KiB chore(build): consistent image tag, exact kernel option matching, e2fsprogs check, CI proto drift check; docs for the new limits, host lock and ip_forward
- tmpmode_test.go 700 B fix(sandbox): make the job's /tmp sticky