Skip to content
Merged
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
06a6eaa
fix(k8s): replace privileged DinD with rootless DinD
ericksoa Apr 18, 2026
0fc74e8
fix(k8s): interpose docker socket proxy between workspace and daemon
ericksoa Apr 18, 2026
f4f912a
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 18, 2026
b2b5f04
test: migrate security-hardening test to .ts and revert .js edit
ericksoa Apr 18, 2026
6015b32
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 18, 2026
681c577
fix(test): add non-null assertions for regex match results
ericksoa Apr 18, 2026
61467e7
fix(k8s): address CodeRabbit review feedback on docker socket proxy
ericksoa Apr 18, 2026
69487e6
merge: resolve conflict with main in onboard.ts
ericksoa Apr 18, 2026
393939f
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 18, 2026
3f6bd24
fix(test): tighten workspace-section regex to container-level indenta…
ericksoa Apr 18, 2026
d3ff441
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 19, 2026
d9c3c93
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 20, 2026
680a22a
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 20, 2026
c6737a6
fix(k8s): bind docker-socket-proxy to localhost only
ericksoa Apr 20, 2026
0b4d070
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 20, 2026
cf09c01
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 20, 2026
494471a
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 20, 2026
686fa71
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 21, 2026
b3bbf66
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 21, 2026
aeb5961
merge: resolve conflicts with main after k8s/ removal (#2107)
ericksoa Apr 21, 2026
af9891e
fix: remove k8s files already deleted by #2107
ericksoa Apr 21, 2026
cd98cac
fix: remove k8s security test (manifest deleted in #2107)
ericksoa Apr 21, 2026
cf39790
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 21, 2026
42b8ea7
Merge branch 'main' into fix/docker-socket-proxy
ericksoa Apr 21, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 16 additions & 7 deletions src/lib/preflight.ts
Original file line number Diff line number Diff line change
Expand Up @@ -188,14 +188,23 @@ function parseDockerInfoSummary(info = ""): string | undefined {
function readDockerDefaultCgroupnsMode(
readFileImpl: (filePath: string, encoding: BufferEncoding) => string,
): "host" | "private" | "unknown" {
try {
const raw = readFileImpl("/etc/docker/daemon.json", "utf-8");
const parsed = JSON.parse(raw) as { ["default-cgroupns-mode"]?: unknown };
const mode = parsed["default-cgroupns-mode"];
return mode === "host" || mode === "private" ? mode : "unknown";
} catch {
return "unknown";
const paths = [
"/etc/docker/daemon.json",
"/home/rootless/.config/docker/daemon.json",
];
for (const filePath of paths) {
try {
const raw = readFileImpl(filePath, "utf-8");
const parsed = JSON.parse(raw) as {
["default-cgroupns-mode"]?: unknown;
};
const mode = parsed["default-cgroupns-mode"];
if (mode === "host" || mode === "private") return mode;
} catch {
// Try next path
}
}
return "unknown";
}

function isHeadlessLikely(env: NodeJS.ProcessEnv): boolean {
Expand Down
Loading