Repository navigation

feat(sandbox): Landlock PTY + direct TCP + DNS (+ #708 basic auth credential resolve) - #2

Open

kosaku-sim wants to merge 11 commits into

base/upstream-syncedfrom

fix/basic-auth-credential-resolve

Open

feat(sandbox): Landlock PTY + direct TCP + DNS (+ #708 basic auth credential resolve)#2
kosaku-sim wants to merge 11 commits into
base/upstream-syncedfrom
fix/basic-auth-credential-resolve

Commits on Apr 10, 2026
- fix: allow UDP DNS to cluster nameserver in sandbox netns
  
  kosaku-sim
  and
  claude
  committed
  e63ada7
- fix: add IP forwarding and NAT for DNS through sandbox veth
  
  kosaku-sim
  and
  claude
  committed
  59ecdd6
- feat: allow direct TCP 443 for OPENSHELL_DIRECT_TCP_HOSTS
  
  kosaku-sim
  and
  claude
  committed
  b91ae83
- fix: broad TCP 443 ACCEPT instead of per-IP rules for direct hosts
  
  kosaku-sim
  and
  claude
  committed
  4cb2f38
Commits on Apr 23, 2026
- feat(sandbox): add PTY devices to proxy-mode baseline read-write paths
  
  kosaku-sim
  and
  claude
  committed
  6be4e01
Commits on Sep 8, 2026
- feat: OPENSHELL_DIRECT_TCP_ENDPOINTS for per-endpoint TCP bypass
  
  kosaku-sim
  and
  claude
  committed
  3dd2a48
Commits on Oct 8, 2026
- test(sandbox): wrap env mutations in unsafe blocks for edition 2024
  
  striderkein
  and
  claude
  committed
  49ce5ba
- feat(sandbox): resolve provider-shaped credential aliases
  
  striderkein
  and
  claude
  committed
  7801059
Commits on Oct 9, 2026