Add docker bind mounds for sandboxing

This commit is contained in:
Aaron Konyer
2026-01-12 10:13:32 -07:00
committed by Peter Steinberger
parent 5d83be76c9
commit 0b2b8c7c52
7 changed files with 11225 additions and 1 deletions

View File

@@ -56,6 +56,12 @@ Clawdbot mirrors eligible skills into the sandbox workspace (`.../skills`) so
they can be read. With `"rw"`, workspace skills are readable from
`/workspace/skills`.
## Custom bind mounts
`agents.defaults.sandbox.docker.binds` mounts additional host directories into the container.
Format: `host:container:mode` (e.g., `"/home/user/source:/source:rw"`).
Global and per-agent binds are **merged** (not replaced). Under `scope: "shared"`, per-agent binds are ignored.
## Images + setup
Default image: `clawdbot-sandbox:bookworm-slim`