Why Do Docker Sandboxes Allow Passwordless sudo by Default?
I'm trying to run several isolated coding agents with strong restrictions: they shouldn't be able to communicate with one another, and some shouldn't have web access at all.…
managed-settings.json
Why Do Docker Sandboxes Provide Passwordless sudo by Default?
I'm trying to run several isolated coding agents with as little access as possible. Some should not be able to reach the web or communicate with one another,…