dave 56d3373e69 Revert gVisor (runsc) from Docker setup ...

gVisor is incompatible with OrbStack bind mounts on macOS — writes to
/mnt/mac are blocked by the gVisor filesystem sandbox. Removing
runtime: runsc from docker-compose.yml, the gVisor setup docs from
README.md, and the runsc assertion test from rebuild.rs.

The existing Docker hardening (read-only root, cap_drop ALL,
no-new-privileges, resource limits) remains in place.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-23 12:53:10 +00:00

..

src

Revert gVisor (runsc) from Docker setup

2026-03-23 12:53:10 +00:00

build.rs

Restore codebase deleted by bad auto-commit e4227cf

2026-03-22 19:07:07 +00:00

Cargo.lock

Restore codebase deleted by bad auto-commit e4227cf

2026-03-22 19:07:07 +00:00

Cargo.toml

Restore codebase deleted by bad auto-commit e4227cf

2026-03-22 19:07:07 +00:00