Timmy fe0f560b58 Harden Docker container security ...

Run as non-root user (fixes Claude Code refusing bypassPermissions as
root, which caused all agent spawns to exit instantly with no session).
Add read-only root filesystem, drop all capabilities, set
no-new-privileges, bind port to localhost only, and require
GIT_USER_NAME/GIT_USER_EMAIL env vars at startup.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-21 20:33:50 +00:00

..

.dockerignore

storkit: create 329_spike_evaluate_docker_orbstack_for_agent_isolation_and_resource_limiting

2026-03-21 20:19:56 +00:00

docker-compose.yml

Harden Docker container security

2026-03-21 20:33:50 +00:00

Dockerfile

Harden Docker container security

2026-03-21 20:33:50 +00:00

entrypoint.sh

Harden Docker container security

2026-03-21 20:33:50 +00:00