Documentation
¶
Overview ¶
Package pods gives paid members a personal Linux container over SSH (`ssh pod@host`) — "run shit in a docker-like" without root on the host.
Engine preference: rootless Podman (daemonless; container root maps to an unprivileged host uid via user namespaces), falling back to Docker with a hardened profile (cap-drop ALL, no-new-privileges, non-root user, cpu/mem/ pids caps). Either way the SSH user never touches the host OS.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Manager ¶
type Manager struct {
// contains filtered or unexported fields
}
Manager provisions and attaches per-user pods.
func Detect ¶
Detect picks the best available engine. Returns an error if neither podman nor docker is present.
func (*Manager) Attach ¶
Attach provisions the pod and wires the SSH session to a shell inside it. Blocks until the shell exits or the session closes.
Source Files