ms2k/lazaret

SHA256

Watch

ms2k 465c40822a Package Apache license and standardize notices

Adopt the conventional NOTICE layout and include required license material in published crate archives. Verify workspace license metadata and the host coordinator's bundled ncurses notices.

2026-08-19 21:28:23 +09:00

1.1 KiB

Raw Blame History

Lazaret

Rootless gVisor sandbox for development tools and coding agents.

Status

Early development
Source only; no binary releases
Linux x86-64, kernel 6.9 or newer

Host requirements

Unprivileged user namespaces
Contiguous subordinate UID and GID ranges of at least 65,536 IDs
/usr/bin/newuidmap, /usr/bin/newgidmap, and /usr/bin/slirp4netns
/dev/fuse, fuse-overlayfs, and fusermount3
Rootless nerdctl with BuildKit
cmp, install, and sha256sum

Build and install

tools/install-to-host

The default destination is ~/.local/bin. Pass --install-dir DIRECTORY to override it.

Configure and run

mkdir -p ~/.config/lazaret
cp docs/example.toml ~/.config/lazaret/config.toml
lazaret default
lazaret default -- COMMAND ARGUMENT...

Edit the example network allowlists and persistent volume paths before use.

Repository