viyatb-oai 912524d6fe
Mount a minimal /dev in full-filesystem Bubblewrap sandboxes ( #37349 ) ...
## Why
Binding the full host filesystem into a network-isolated Bubblewrap sandbox also
inherits the host's device tree.
## What changed
- Overlay `/dev` with Bubblewrap's minimal device filesystem while preserving
the root bind's `nodev` behavior.
- Bind `/dev/shm` back into the sandbox when available so host and sandbox
processes can continue to share memory files.
## Testing
Add a managed-proxy integration test that verifies standard device nodes remain
usable, `/dev` is not the host directory, and `/dev/shm` writes are shared with
the host.
GitOrigin-RevId: 1d91fe44affd792d2777adae8f2cce6d85d14103
2026-08-07 01:30:07 +00:00
2026-07-29 13:53:15 +00:00
2026-07-23 19:19:35 +00:00
2026-08-06 02:30:18 +00:00
2026-07-29 13:53:15 +00:00
2026-08-07 01:26:42 +00:00
2026-08-04 15:23:43 +00:00
2026-08-06 03:11:42 +00:00
2026-07-30 19:47:30 +00:00
2026-08-04 15:23:43 +00:00
2026-07-29 18:29:26 +00:00
2026-07-30 21:49:53 +00:00
2026-08-04 22:23:40 +00:00
2026-08-07 01:26:42 +00:00
2026-08-05 18:09:26 +00:00
2026-08-05 18:09:26 +00:00
2026-08-05 16:09:01 +00:00
2026-08-05 16:09:01 +00:00
2026-08-06 03:15:08 +00:00
2026-08-05 16:09:01 +00:00
2026-08-05 20:03:13 +00:00
2026-07-30 21:49:53 +00:00
2026-08-07 00:17:46 +00:00
2026-08-04 22:58:02 +00:00
2026-08-05 18:09:26 +00:00
2026-08-07 00:23:38 +00:00
2026-08-03 11:39:51 +00:00
2026-08-07 01:26:42 +00:00
2026-08-04 16:28:46 +00:00
2026-08-06 03:53:05 +00:00
2026-08-05 23:23:21 +00:00
2026-08-05 18:09:26 +00:00
2026-08-07 00:32:59 +00:00
2026-07-30 19:23:33 +00:00
2026-08-07 00:42:06 +00:00
2026-08-04 21:45:28 +00:00
2026-08-07 01:26:42 +00:00
2026-07-28 17:51:37 +00:00
2026-07-31 21:37:56 +00:00
2026-07-23 23:35:29 +00:00
2026-08-05 20:23:35 +00:00
2026-08-03 17:29:42 +00:00
2026-08-04 22:18:09 +00:00
2026-07-31 04:20:56 +00:00
2026-08-07 01:30:07 +00:00
2026-08-05 18:09:26 +00:00
2026-08-06 03:11:42 +00:00
2026-08-03 00:30:57 +00:00
2026-08-05 14:20:59 +00:00
2026-08-04 22:07:56 +00:00
2026-08-05 20:03:13 +00:00
2026-08-06 03:57:10 +00:00
2026-07-30 04:26:36 +00:00
2026-08-07 00:28:32 +00:00
2026-08-05 04:54:33 +00:00
2026-07-22 19:14:11 +00:00
2026-08-06 03:11:42 +00:00
2026-08-07 00:17:46 +00:00
2026-08-06 03:11:42 +00:00
2026-08-06 03:11:42 +00:00
2026-07-30 22:45:04 +00:00
2026-08-04 15:14:57 +00:00
2026-07-23 21:50:17 +00:00
2026-08-05 23:23:21 +00:00
2026-08-07 01:26:42 +00:00
2026-08-04 03:49:53 +00:00
2026-08-04 22:23:40 +00:00
2026-08-07 01:26:42 +00:00
2026-08-05 20:03:13 +00:00
2026-08-07 00:50:33 +00:00
2026-08-06 03:11:42 +00:00
2026-07-22 16:18:08 +00:00
2026-07-24 00:16:42 +00:00
2026-07-27 18:37:11 +00:00
2026-08-07 01:26:42 +00:00
2026-08-06 03:11:42 +00:00
2026-07-28 20:49:22 +00:00
2026-07-29 13:53:15 +00:00
2026-07-30 04:26:36 +00:00
912524d6fe