kyleandClaude Opus 5.5
c3aaecdae2
Review findings 1 and 2, both plan defects. curl gains --globoff and a leading --disable; both podman runs gain --pull=never. The given fetch.rs and the six golden files change with them. Checked on straylight with a rebuilt image: a glob URL is one request, a missing image fails at once. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
22 lines
446 B
Plaintext
22 lines
446 B
Plaintext
run
|
|
-d
|
|
--rm
|
|
--name=boxmaker-s1-1-7-egress
|
|
--label=boxmaker=egress
|
|
--network=pasta
|
|
--pull=never
|
|
--read-only
|
|
--cap-drop=all
|
|
--security-opt=no-new-privileges
|
|
--userns=keep-id
|
|
--pids-limit=64
|
|
--memory=128m
|
|
--volume=/h/run/egress/boxmaker-s1-1-7:/run/egress:rw
|
|
localhost/boxmaker-tools@sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
|
|
/bin/toolkit
|
|
egress-proxy
|
|
--socket
|
|
/run/egress/egress.sock
|
|
--allow
|
|
example.com,*.example.org
|