github-featured/opensandbox-group--opensandbox

Files

T

History

沐菓 55c9f52c0f Merge remote-tracking branch 'fork/feature/osep-0020-lifecycle-server' into feature/osep-0020-lifecycle-api-sdks

2026-08-24 12:49:16 +08:00

..

test(execd): drop inline OSEP-0018 references from comments

2026-08-18 20:14:10 +08:00

chore(execd): simply README doc and add opentelemetry.md

2026-04-19 18:04:26 +08:00

refactor(execd): trim OSEP-0018 tests, comments and dead code (#1574 )

2026-08-19 16:59:32 +08:00

Merge remote-tracking branch 'fork/feature/osep-0020-lifecycle-server' into feature/osep-0020-lifecycle-api-sdks

2026-08-24 12:49:16 +08:00

fix(lifecycle): align reserved environment name

2026-08-24 11:49:32 +08:00

.golangci.yml

feat(execd): add isolation package with bwrap support (#1008 )

2026-06-23 14:09:33 +08:00

bootstrap.sh

fix(lifecycle): align reserved environment name

2026-08-24 11:49:32 +08:00

build.sh

Add GHCR image publishing support

2026-06-30 18:13:57 +00:00

DEVELOPMENT.md

fix(execd): package session gate for source builds

2026-07-27 18:11:48 +08:00

Dockerfile

fix(ebpf): restore ARG TARGETARCH in the ebpf-builder stage

2026-08-19 13:29:51 +08:00

Dockerfile.dockerignore

chore: add Dockerfile.dockerignore to reduce build context (#718 )

2026-04-14 21:53:46 +08:00

go.mod

fix(execd): harden lifecycle startup handling

2026-08-24 11:10:41 +08:00

go.sum

feat(execd): add preStart and periodic lifecycle hooks

2026-08-24 11:10:41 +08:00

install.bat

fix(execd): fix windows boot error

2026-04-14 13:18:45 +08:00

main_test.go

fix(execd): harden lifecycle startup handling

2026-08-24 11:10:41 +08:00

main.go

fix(execd): harden lifecycle startup handling

2026-08-24 11:10:41 +08:00

Makefile

feat(ebpf): replace per-arch vmlinux.h with a minimal audit_types.h

2026-08-19 13:26:41 +08:00

PTY.md

fix(execd): clarify PTY viewer protocol

2026-08-10 18:30:49 +08:00

README.md

feat(execd): execd as sandbox init with hardening floor (OSEP-0018) (#1474 )

2026-08-17 18:59:16 +08:00

RELEASE_NOTES.md

chore(execd): update release note for v1.0.12

2026-04-16 14:35:23 +08:00

README.md

OpenSandbox execd

Documentation: docs/components/execd.md

Known issue / TODO: execd-ebpf selection is not wired end to end

The default image ships both the minimal execd binary and the execd-ebpf observation variant (root /execd and /execd-ebpf), but the server-side selection is not implemented yet: nothing in the server injects the EXECD env var (which bootstrap.sh honors to pick a binary, defaulting to /opt/opensandbox/execd), and the Docker / K8s distribution paths only install /execd into /opt/opensandbox. Until that lands, using execd-ebpf requires manually staging the binary (or overriding EXECD) — do not rely on it in production.