dev

YYifan Zhaofeat(network): add configurable sandbox policies

1660300d创建于 8月10日历史提交

文件	最后提交记录	最后更新时间
tests	feat(network): add configurable sandbox policies Sandboxes previously inherited unrestricted network behavior from warm network slots, with no API for per-sandbox ingress or egress controls. Slot reuse could also retain policy and conntrack state across sandbox assignments. Add typed allow and deny configuration across the daemon, runtime service, persistent state, and Python SDK. Validate destinations before slot allocation and apply live changes with batched iptables updates. Compensate persistent state when updates fail, and clear policy and conntrack state before returning slots to the warm pool. Co-authored-by: Yifan Zhao <stopire@gmail.com> Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com>	2 个月前
__init__.py	feat: add process execution timeout Assisted-by: Codex:gpt-5.6-terra Signed-off-by: hu-zhangying <huzhangying@huawei.com>	2 个月前
client.py	sdk: apply process timeout to Connect client Assisted-by: Codex:gpt-5.6-terra Signed-off-by: hu-zhangying <huzhangying@huawei.com>	2 个月前
config_loader.py	[SDK] Centralize and cache sandbox connection configuration	2 个月前
errors.py	feat: add process execution timeout Assisted-by: Codex:gpt-5.6-terra Signed-off-by: hu-zhangying <huzhangying@huawei.com>	2 个月前
init_config.py	sdk: add CLI tool to initialize Conch SDK config	7 个月前
pyproject.toml	bump Python SDK version to 0.2.0 Assisted-by: Codex:gpt-5.6-terra Signed-off-by: hu-zhangying <huzhangying@huawei.com>	2 个月前
sandbox.py	feat(network): add configurable sandbox policies Sandboxes previously inherited unrestricted network behavior from warm network slots, with no API for per-sandbox ingress or egress controls. Slot reuse could also retain policy and conntrack state across sandbox assignments. Add typed allow and deny configuration across the daemon, runtime service, persistent state, and Python SDK. Validate destinations before slot allocation and apply live changes with batched iptables updates. Compensate persistent state when updates fail, and clear policy and conntrack state before returning slots to the warm pool. Co-authored-by: Yifan Zhao <stopire@gmail.com> Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com>	2 个月前