viettranx
843b550651
feat: runtime packages UI, pkg-helper, configurable shell deny groups (#244)
Runtime package management with security hardening:
- pkg-helper: root-privileged daemon for apk install/uninstall via Unix socket
- HTTP API: /v1/packages (list/install/uninstall/runtimes), admin role required for writes
- Shell deny groups: 15 configurable groups (per-agent overrides via context)
- Packages UI: Web page for managing system/pip/npm packages with confirmation dialogs
- Docker: privilege separation (root entrypoint → su-exec drop), init for zombie reaping
- Security: umask socket creation, persist file validation, deny pattern hardening
(Node.js fetch/http, Python from/import, curl localhost, sensitive env vars)
- Auth: empty gateway token → admin role (dev/single-user mode)
2026-03-17 19:50:26 +07:00
..
2026-03-17 19:50:26 +07:00
2026-03-10 00:09:15 +07:00
2026-03-06 18:51:11 +07:00
2026-03-15 21:20:46 +07:00
2026-03-10 00:09:15 +07:00
2026-02-22 14:58:07 +07:00
2026-03-06 18:51:11 +07:00
2026-03-10 00:09:15 +07:00
2026-03-10 00:09:15 +07:00
2026-03-06 18:51:11 +07:00
2026-03-11 14:31:00 +07:00
2026-03-17 09:26:00 +07:00
2026-03-17 12:05:48 +07:00
2026-03-12 16:45:30 +07:00
2026-03-16 20:09:44 +07:00
2026-03-17 18:03:10 +07:00
2026-03-09 10:49:58 +07:00
2026-03-16 22:46:18 +07:00
2026-03-13 11:55:55 +07:00
2026-03-16 22:46:18 +07:00
2026-03-12 16:45:30 +07:00
2026-03-04 10:11:17 +07:00
2026-03-15 21:20:46 +07:00
2026-03-16 20:05:26 +07:00
2026-03-16 19:55:08 +07:00
2026-02-22 14:58:07 +07:00
2026-02-22 14:58:07 +07:00
2026-03-17 19:50:26 +07:00
2026-03-07 19:27:24 +07:00
2026-03-07 19:27:24 +07:00
2026-03-17 11:38:35 +07:00
2026-02-22 14:58:07 +07:00
2026-03-07 20:51:39 +07:00
2026-03-17 19:50:26 +07:00
2026-03-07 20:51:39 +07:00
2026-02-22 14:58:07 +07:00
2026-03-11 07:27:38 +07:00
2026-03-09 22:28:18 +07:00
2026-03-11 07:27:38 +07:00
2026-03-10 00:09:15 +07:00
2026-03-07 00:46:29 +07:00
2026-03-07 00:15:30 +07:00
2026-03-06 18:51:11 +07:00
2026-03-15 21:20:46 +07:00
2026-03-07 20:51:39 +07:00