ms2k/lazaret
SHA256
0
Code Releases 3 Activity
No description
196 commits 1 branch 3 tags 8.4 MiB
  • Rust 93.5%
  • Python 6%
  • Shell 0.4%
Find a file
Exact
ms2k 968ff09eae Apply terminal backpressure without dropping output
2026-08-21 02:35:08 +09:00
.cargo Implement fail-closed ignored workspace routing 2026-07-16 13:04:12 +09:00
crates Apply terminal backpressure without dropping output 2026-08-21 02:35:08 +09:00
docs Delegate terminal presentation mechanics to the model 2026-08-20 02:37:57 +09:00
LICENSES License Lazaret under Apache 2.0 2026-08-18 01:35:35 +09:00
patches Recognize terminated runsc gofers during teardown 2026-08-02 19:57:36 +09:00
tests Model terminal presentation ownership and restoration 2026-08-20 02:10:44 +09:00
tools Update README.md 2026-08-21 02:30:03 +09:00
.clippy.toml Confine verification tooling to current repository checks 2026-07-14 02:19:07 +09:00
.gitignore
Cargo.lock Preserve native terminal behavior through trusted prompts 2026-08-20 05:29:43 +09:00
Cargo.toml Package Apache license and standardize notices 2026-08-19 21:28:23 +09:00
deny.toml Close hostile recovery and concurrency gaps 2026-07-18 05:47:15 +09:00
LICENSE License Lazaret under Apache 2.0 2026-08-18 01:35:35 +09:00
NOTICE Package Apache license and standardize notices 2026-08-19 21:28:23 +09:00
README.md Update README.md 2026-08-21 02:30:03 +09:00
rust-toolchain.toml Bind sandbox handoff authority and restore verifier gates 2026-07-17 23:23:19 +09:00

README.md

Lazaret

Rootless gVisor sandbox for development tools and coding agents.

Status

  • Early development
  • Linux x86-64, kernel 6.9 or newer

Host requirements

  • Unprivileged user namespaces
  • Contiguous subordinate UID and GID ranges of at least 65,536 IDs
  • /usr/bin/newuidmap, /usr/bin/newgidmap, and /usr/bin/slirp4netns
  • /dev/fuse, fuse-overlayfs, and fusermount3
  • Rootless nerdctl with BuildKit
  • cmp, install, and sha256sum

Build and install

tools/install-to-host

The default destination is ~/.local/bin. Pass --install-dir DIRECTORY to override it.

Configure and run

mkdir -p ~/.config/lazaret
cp docs/example.toml ~/.config/lazaret/config.toml
lazaret default
lazaret default -- COMMAND ARGUMENT...

Edit the example network allowlists and persistent volume paths before use.

Repository