kyleandClaude Opus 5.5
c3aaecdae2
Review findings 1 and 2, both plan defects. curl gains --globoff and a leading --disable; both podman runs gain --pull=never. The given fetch.rs and the six golden files change with them. Checked on straylight with a rebuilt image: a glob URL is one request, a missing image fails at once. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
19 lines
403 B
Plaintext
19 lines
403 B
Plaintext
run
|
|
--rm
|
|
-i
|
|
--name=boxmaker-s1-1-7
|
|
--label=boxmaker=tool
|
|
--network=none
|
|
--pull=never
|
|
--read-only
|
|
--cap-drop=all
|
|
--security-opt=no-new-privileges
|
|
--userns=keep-id
|
|
--pids-limit=128
|
|
--memory=512m
|
|
--tmpfs=/tmp:rw,size=64m,mode=1777
|
|
--volume=/h/run/egress/boxmaker-s1-1-7:/run/egress:rw
|
|
localhost/boxmaker-tools@sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
|
|
/bin/toolkit
|
|
http_fetch
|