18f559c4e6
Fix yq SHA256 checksum to correct value
2026-03-08 00:24:12 +11:00
c909668246
Security and reliability improvements
...
- Add SHA256 checksum verification for yq and oc downloads to prevent supply chain attacks
- Pin busybox init container to version 1.36 for consistency
- Fix gitconfig symlink to work unconditionally (survives file creation after boot)
- Document kubeconfig secret prerequisite with correct breakglass config path
Security: Protects against compromised mirrors and MITM attacks during image build
Reliability: Ensures reproducible builds and proper git config persistence
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com >
2026-03-08 00:18:39 +11:00
6541791383
updated build
2026-03-08 00:00:54 +11:00
e039f77f0e
Enhance LLM sandbox with persistent caching, helper scripts, and improved UX
...
Added comprehensive improvements to ClawdBox for better LLM agent experience:
- Tools: Added tree, tmux, htop, strace, file, less for enhanced debugging
- Python packages: httpie, pyyaml, requests, black, ipython pre-installed
- Persistent caching: pip/npm caches now survive container restarts
- Git config persistence: .gitconfig auto-links from /data volume
- Shell improvements: colored prompt, aliases (ll, k, dc), 10k line history
- Helper scripts: ConfigMap with disk-usage, health-check, clean-workspace, install-tools
- Environment variables: TERM, TZ, DEBIAN_FRONTEND for better compatibility
- Makefile: Common operations (build, deploy, logs, shell, health-check)
- Documentation: Comprehensive README with troubleshooting and workflows
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com >
2026-03-07 23:51:26 +11:00
8fe712cda7
gemini changes
2026-03-07 23:29:56 +11:00
900f8f23aa
Harden deployment probes/fsGroup and align README runtime config
2026-03-07 22:22:40 +11:00
6e72483dca
Add sshpass and openssh-client to base image
2026-03-04 11:23:16 +00:00
21eba59451
Revert: remove Node 22, Chromium, Xvfb, OpenClaw - too heavy for 1GB container
2026-02-27 04:40:48 +00:00
96b10177d4
fixed the ssh config
2026-02-27 15:36:05 +11:00
b283f1e305
apparently I need to do this myself
2026-02-27 15:11:15 +11:00
303127de09
Fix sshd_config echo: use \n literals not newlines
2026-02-27 04:07:38 +00:00
7ea9869160
Add Node.js 22, Chromium, Xvfb, and OpenClaw CLI
2026-02-27 03:51:10 +00:00
e48be8f518
revert
2026-02-26 14:02:35 +11:00
018c831d60
added clawrganizer port
2026-02-26 13:57:11 +11:00
9c4339f22d
and fixed mount name again..
2026-02-02 19:56:50 +11:00
1e764719ca
fixed mount name
2026-02-02 19:56:16 +11:00
9e92254492
indenting fix
2026-02-02 19:55:10 +11:00
3a5333330c
mounting kubeconfig as a secret at /home/claw/.kube
2026-02-02 19:53:51 +11:00
da9be91d51
updated kubeconfig to ncdu, oc and ripgrep
2026-02-02 19:29:43 +11:00
9daa35178f
added cap_audit_write
2026-02-02 18:28:24 +11:00
8427663d71
remove cap drop
2026-02-02 16:17:16 +11:00
22472c633d
fixed indent
2026-02-02 16:03:43 +11:00
20bf6afee4
Fix SSH session crash: Disable PAM and enable stderr logging
2026-02-02 05:01:17 +00:00
6b4079c065
need priv esc for root
2026-02-02 15:51:51 +11:00
10ca1a3b5c
this is cursed
2026-02-02 15:44:50 +11:00
bf661b5cf7
Fix SSH permissions via init container copy
2026-02-02 04:43:47 +00:00
2d1c671e58
hallucination special
2026-02-02 15:23:20 +11:00
debd5d30b5
added init container
2026-02-02 15:22:09 +11:00
075ef91fa0
reverted init container
2026-02-02 15:17:41 +11:00
0dc50a4d0d
added init container
2026-02-02 15:11:21 +11:00
ddd9877848
removed seccompprofile
2026-02-02 15:01:19 +11:00
449e7f690a
reverted the claw's changes
2026-02-02 14:57:06 +11:00
fb864eb52f
Fix: Use existing ServiceAccount clawd-sa, remove duplicate SA definition
2026-02-02 03:54:22 +00:00
34b794cca2
Fix: Add dedicated ServiceAccount claw-sa, remove seccompProfile, simplify securityContext
2026-02-02 03:52:45 +00:00
d86d95dcfd
typo in sa
2026-02-02 14:49:06 +11:00
8eeee5de18
changed sa
2026-02-02 14:44:56 +11:00
2178ba7641
updated
2026-02-02 14:32:16 +11:00
c9f4e03e84
added namespace
2026-02-02 14:29:26 +11:00
f176be5ddb
staaawp putting everything in one manifest, clawman
2026-02-02 14:28:09 +11:00
776f97605e
Fix: Deployment explicit UID 1000 for anyuid SCC support
2026-02-02 03:25:13 +00:00
f53209203a
Fix: Add USER claw (UID 1000) to image
2026-02-02 03:24:53 +00:00
82ea0b2162
sc
2026-02-02 14:24:00 +11:00
a1aa960099
removed security context
2026-02-02 14:21:52 +11:00
ec7d57159d
Fix: StrictModes no + PID file in /tmp for non-root SSHD
2026-02-02 03:20:49 +00:00
a5fed4a656
scc
2026-02-02 14:17:31 +11:00
e731c0ac77
changed scc
2026-02-02 14:15:45 +11:00
d7eae1c535
Fix: Enforce chmod 600 on SSH host keys at startup
2026-02-02 03:13:30 +00:00
2edbeac212
Fix: Persist SSH host keys in /data/ssh
2026-02-02 03:08:14 +00:00
0b95ba72b3
Fix CMD: Generate host keys in correct custom directory
2026-02-02 02:56:25 +00:00
51cb4aa795
corrected registry url (again)
2026-02-02 13:51:03 +11:00
