Snail-Turbo/dsh-android-sandbox

README 摘要

dsh user-space sandbox plugins for kernel-less hosts English 中文 DeepSeek Harness ( dsh ) normally keeps writes inside the workspace with kernel-backed sandboxes — Landlock / bwrap, the filesystem fence, Seatbelt, Windows ACL runners. If your device has a working kernel sandbox, you don't need this repo ; the shipped sandbox already covers you. This repo is for hosts where those runners can't run or only partially enforce — most commonly Android GKI phones with a locked bootloader (or one you don't want to unlock), and restricted containers / chroot environments without user namespaces or Landlock. On those hosts the bash kernel runner fails closed: every confined bash call is denied. (The write/edit filesystem fence is an in-process path boundary and keeps working; the real gap is shell execution.) These plugins put a user-space equivalent back at the tool-call layer for both. Two options for a real sandbox on Android If you're on an Android device with no usable kernel sandbox, you have two options. Option A — unlock the bootloader and build a GKI kernel with the right config (recommended) If you can unlock the bootloader, the real fix is to enable the features the dsh runners nee…

分类