Skip to content

docs(secure-exec): sync from rivet-dev/agentos #148

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
NathanFlurry wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs(secure-exec): sync from rivet-dev/agentos #148

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions vendor/secure-exec/docs/content/docs/host-functions.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,8 @@ Arguments from the guest are validated before your code runs.
## Call them from guest code

Inside the VM each collection is a global object and each function is async.
The globals exist in every guest Node process: inline code, spawned scripts,
`node` run from the shell, and child processes of guest Node.

<CodeSnippet file="secure-exec/examples/host-functions/src/index.ts" region="call" />

Expand Down
5 changes: 4 additions & 1 deletion vendor/secure-exec/docs/content/docs/permissions.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,10 @@ scope as it was.
## Allow specific hosts

A rule set denies by default and allows matching patterns. A host needs both a
`dns://` pattern to resolve it and a `tcp://` pattern to connect to it.
`dns://` pattern to resolve it and a `tcp://` pattern to connect to it. A rule
set replaces the whole network scope, so add the VM-local `listen` and loopback
rules from the [agentOS permissions reference](/agentos/docs/permissions#network)
if guest code also runs a server. `network: "deny"` keeps them.

<CodeSnippet file="secure-exec/examples/permissions/src/index.ts" region="scoped" />

Expand Down
Loading