README
¶
sim
Install
go install codeberg.org/tactsec/sim@latest
Documentation
¶
Overview ¶
Command sim is the single multicall binary for the sim sandbox stack.
`go install codeberg.org/tactsec/sim@latest` produces `sim`, which dispatches on argv[0] (busybox-style aliases) or on an internal `__`-prefixed first argument.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Startup stage reporting: prints sim's startup progress lines to stderr.
|
Startup stage reporting: prints sim's startup progress lines to stderr. |
|
config
Package config loads and validates sim's TOML configuration.
|
Package config loads and validates sim's TOML configuration. |
|
entrypoint
Package entrypoint runs as PID 1 inside the sim sandbox: it seeds the podman configuration the sandbox needs, starts the background helpers, sources the host-configured setup hooks and finally execs the requested target command.
|
Package entrypoint runs as PID 1 inside the sim sandbox: it seeds the podman configuration the sandbox needs, starts the background helpers, sources the host-configured setup hooks and finally execs the requested target command. |
|
imagestate
Package imagestate is the handshake between the entrypoint's background image loader and the commands that must not run before the configured images are in the store (the session gate, and the Docker API listener).
|
Package imagestate is the handshake between the entrypoint's background image loader and the commands that must not run before the configured images are in the store (the session gate, and the Docker API listener). |
|
launch
Package launch builds and execs the sandboxed command ("sim <cmd>").
|
Package launch builds and execs the sandboxed command ("sim <cmd>"). |
|
resizewatch
Package resizewatch forwards terminal resizes into the sandbox.
|
Package resizewatch forwards terminal resizes into the sandbox. |
|
shim
Package shim is the podman shim: inside the sandbox it forces the container defaults the sandbox needs and waits for the background image import before handing off to the real podman; outside it is a transparent pass-through.
|
Package shim is the podman shim: inside the sandbox it forces the container defaults the sandbox needs and waits for the background image import before handing off to the real podman; outside it is a transparent pass-through. |
Click to show internal directories.
Click to hide internal directories.