4 Commits

Author	SHA1	Message	Date
Dave	1c2824fa31	fix: harden Docker environment so tests pass inside container ... - Add procps to runtime stage so `ps` is available for process management - Remove noexec from /tmp and /home/storkit tmpfs mounts so test scripts can be executed from tempdir - Update coder agent system_prompt to run clippy --all-targets --all-features matching what the server acceptance gate actually runs Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-22 14:21:27 +00:00
Timmy	eef0f3ee7d	Add clippy to Docker image ... Acceptance gates run cargo clippy but the component wasn't installed in the build stage. Agents were doing real work then failing every gate check because clippy wasn't available. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-21 21:43:09 +00:00
Timmy	fe0f560b58	Harden Docker container security ... Run as non-root user (fixes Claude Code refusing bypassPermissions as root, which caused all agent spawns to exit instantly with no session). Add read-only root filesystem, drop all capabilities, set no-new-privileges, bind port to localhost only, and require GIT_USER_NAME/GIT_USER_EMAIL env vars at startup. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-21 20:33:50 +00:00
Timmy	996ba82682	storkit: create 329_spike_evaluate_docker_orbstack_for_agent_isolation_and_resource_limiting	2026-03-21 20:19:56 +00:00