sandboxbox 1.2.0 β†’ 1.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. package/Dockerfile +80 -24
  2. package/Dockerfile.test +16 -0
  3. package/bin/bwrap +0 -0
  4. package/build-final.log +2217 -0
  5. package/build-output.log +289 -0
  6. package/cli.js +4 -2
  7. package/complete-build.log +231 -0
  8. package/container.js +402 -26
  9. package/final-build.log +268 -0
  10. package/final-complete-build.log +240 -0
  11. package/full-build.log +234 -0
  12. package/init-firewall.sh +36 -0
  13. package/npm-build-test.log +410 -0
  14. package/package.json +1 -1
  15. package/sandboxbox-sandbox/build.sh +83 -0
package/full-build.log ADDED
@@ -0,0 +1,234 @@
1
+ πŸ“¦ SandboxBox - Zero-Privilege Container Runner
2
+ ═════════════════════════════════════════════════════
3
+
4
+ πŸ—οΈ Building container...
5
+ βœ… Using bundled bubblewrap
6
+ βœ… Bubblewrap found: bubblewrap 0.9.0
7
+ ⚠️ User namespaces not available
8
+  Try: sudo sysctl kernel.unprivileged_userns_clone=1
9
+  Or: echo 1 | sudo tee /proc/sys/kernel/unprivileged_userns_clone
10
+ βœ… Using bundled bubblewrap
11
+ 🐳 Building container with bubblewrap isolation...
12
+
13
+ πŸ“¦ FROM node:20
14
+ ⚠️ Unknown base image type
15
+
16
+ πŸ—οΈ ARG TZ
17
+
18
+ πŸ”§ ENV TZ="$TZ"
19
+
20
+ πŸ—οΈ ARG CLAUDE_CODE_VERSION=latest
21
+
22
+ βš™οΈ RUN apt-get update && apt-get install -y --no-install-recommends less gi...
23
+ βš™οΈ RUN mkdir -p /usr/local/share/npm-global && chown -R node:node /usr/local...
24
+ πŸ—οΈ ARG USERNAME=node
25
+
26
+ βš™οΈ RUN SNIPPET="export PROMPT_COMMAND='history -a' && export HISTFILE=/comman...
27
+ πŸ”§ ENV DEVCONTAINER=true
28
+
29
+ βš™οΈ RUN mkdir -p /workspace /home/node/.claude && chown -R node:node /workspa...
30
+ πŸ“ WORKDIR workspace
31
+
32
+ πŸ—οΈ ARG GIT_DELTA_VERSION=0.18.2
33
+
34
+ βš™οΈ RUN ARCH=$(dpkg --print-architecture) && wget "https://github.com/dandavi...
35
+ πŸ‘€ USER node
36
+
37
+ πŸ”§ ENV NPM_CONFIG_PREFIX=/usr/local/share/npm-global
38
+
39
+ πŸ”§ ENV PATH=$PATH:/usr/local/share/npm-global/bin
40
+
41
+ πŸ”§ ENV SHELL=/bin/zsh
42
+
43
+ πŸ”§ ENV EDITOR=nano
44
+
45
+ πŸ”§ ENV VISUAL=nano
46
+
47
+ πŸ—οΈ ARG ZSH_IN_DOCKER_VERSION=1.2.0
48
+
49
+ βš™οΈ RUN sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/dow...
50
+ βš™οΈ RUN npm install -g @anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}
51
+ βš™οΈ RUN npx --yes playwright install-deps
52
+ βš™οΈ RUN npm i -g @playwright/mcp
53
+ πŸ“‹ COPY init-firewall.sh /usr/local/bin/
54
+ ⚠️ COPY/ADD commands must be run in project directory
55
+
56
+ πŸ‘€ USER root
57
+
58
+ βš™οΈ RUN chmod +x /usr/local/bin/init-firewall.sh && echo "node ALL=(root) NOP...
59
+ πŸ‘€ USER node
60
+
61
+ πŸ“ Creating build script...
62
+
63
+ βœ… Build script created: sandboxbox-sandbox/build.sh
64
+
65
+ πŸš€ Executing build commands...
66
+
67
+ ⚠️ Note: Commands will run on host system (Docker-free mode)
68
+
69
+ ────────────────────────────────────────────────────────────
70
+
71
+
72
+ πŸ“ [1/10] apt-get update && apt-get install -y --no-install-recommends less git procps ...
73
+ πŸ” Running with sudo (requires root privileges)
74
+ Get:1 http://ports.ubuntu.com/ubuntu-ports noble InRelease [256 kB]
75
+ Get:2 http://ports.ubuntu.com/ubuntu-ports noble-updates InRelease [126 kB]
76
+ Get:3 http://ports.ubuntu.com/ubuntu-ports noble-security InRelease [126 kB]
77
+ Get:4 http://ports.ubuntu.com/ubuntu-ports noble/main Sources [1,713 kB]
78
+ Get:5 http://ports.ubuntu.com/ubuntu-ports noble/restricted Sources [21.8 kB]
79
+ Get:6 http://ports.ubuntu.com/ubuntu-ports noble/universe Sources [24.3 MB]
80
+ Get:7 http://ports.ubuntu.com/ubuntu-ports noble/multiverse Sources [355 kB]
81
+ Get:8 http://ports.ubuntu.com/ubuntu-ports noble/main arm64 Packages [1,776 kB]
82
+ Get:9 http://ports.ubuntu.com/ubuntu-ports noble/multiverse arm64 Packages [274 kB]
83
+ Get:10 http://ports.ubuntu.com/ubuntu-ports noble/restricted arm64 Packages [113 kB]
84
+ Get:11 http://ports.ubuntu.com/ubuntu-ports noble/universe arm64 Packages [19.0 MB]
85
+ Get:12 http://ports.ubuntu.com/ubuntu-ports noble-updates/multiverse Sources [28.1 kB]
86
+ Get:13 http://ports.ubuntu.com/ubuntu-ports noble-updates/universe Sources [633 kB]
87
+ Get:14 http://ports.ubuntu.com/ubuntu-ports noble-updates/restricted Sources [70.8 kB]
88
+ Get:15 http://ports.ubuntu.com/ubuntu-ports noble-updates/main Sources [583 kB]
89
+ Get:16 http://ports.ubuntu.com/ubuntu-ports noble-updates/multiverse arm64 Packages [36.9 kB]
90
+ Get:17 http://ports.ubuntu.com/ubuntu-ports noble-updates/universe arm64 Packages [1,849 kB]
91
+ Get:18 http://ports.ubuntu.com/ubuntu-ports noble-updates/main arm64 Packages [1,969 kB]
92
+ Get:19 http://ports.ubuntu.com/ubuntu-ports noble-updates/restricted arm64 Packages [3,560 kB]
93
+ Get:20 http://ports.ubuntu.com/ubuntu-ports noble-security/main Sources [253 kB]
94
+ Get:21 http://ports.ubuntu.com/ubuntu-ports noble-security/multiverse Sources [21.3 kB]
95
+ Get:22 http://ports.ubuntu.com/ubuntu-ports noble-security/restricted Sources [64.7 kB]
96
+ Get:23 http://ports.ubuntu.com/ubuntu-ports noble-security/universe Sources [408 kB]
97
+ Get:24 http://ports.ubuntu.com/ubuntu-ports noble-security/multiverse arm64 Packages [35.8 kB]
98
+ Get:25 http://ports.ubuntu.com/ubuntu-ports noble-security/restricted arm64 Packages [3,435 kB]
99
+ Get:26 http://ports.ubuntu.com/ubuntu-ports noble-security/universe arm64 Packages [1,122 kB]
100
+ Get:27 http://ports.ubuntu.com/ubuntu-ports noble-security/main arm64 Packages [1,624 kB]
101
+ Fetched 63.8 MB in 11s (5,899 kB/s)
102
+ Reading package lists...
103
+ Reading package lists...
104
+ Building dependency tree...
105
+ Reading state information...
106
+ less is already the newest version (590-2ubuntu2.1).
107
+ git is already the newest version (1:2.43.0-1ubuntu7.3).
108
+ procps is already the newest version (2:4.0.4-4ubuntu3.2).
109
+ sudo is already the newest version (1.9.15p5-3ubuntu5.24.04.1).
110
+ fzf is already the newest version (0.44.1-1ubuntu0.3).
111
+ zsh is already the newest version (5.9-6ubuntu2).
112
+ man-db is already the newest version (2.12.0-4build2).
113
+ unzip is already the newest version (6.0-28ubuntu4.1).
114
+ gnupg2 is already the newest version (2.4.4-2ubuntu17.3).
115
+ gh is already the newest version (2.45.0-1ubuntu0.3).
116
+ iptables is already the newest version (1.8.10-3ubuntu2).
117
+ ipset is already the newest version (7.19-1ubuntu2).
118
+ iproute2 is already the newest version (6.1.0-1ubuntu6.2).
119
+ dnsutils is already the newest version (1:9.18.39-0ubuntu0.24.04.1).
120
+ aggregate is already the newest version (1.6-7build1).
121
+ jq is already the newest version (1.7.1-3ubuntu0.24.04.1).
122
+ nano is already the newest version (7.2-2ubuntu0.1).
123
+ vim is already the newest version (2:9.1.0016-1ubuntu7.9).
124
+ 0 upgraded, 0 newly installed, 0 to remove and 12 not upgraded.
125
+ βœ… Command 1 completed successfully
126
+
127
+ πŸ“ [2/10] mkdir -p /usr/local/share/npm-global && chown -R node:node /usr/local/share
128
+ πŸ” Running with sudo (requires root privileges)
129
+ βœ… Command 2 completed successfully
130
+
131
+ πŸ“ [3/10] SNIPPET="export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/....
132
+ πŸ” Running with sudo (requires root privileges)
133
+ βœ… Command 3 completed successfully
134
+
135
+ πŸ“ [4/10] mkdir -p /workspace /home/node/.claude && chown -R node:node /workspace /home/n...
136
+ πŸ” Running with sudo (requires root privileges)
137
+ βœ… Command 4 completed successfully
138
+
139
+ πŸ“ [5/10] ARCH=$(dpkg --print-architecture) && wget "https://github.com/dandavison/delta/...
140
+ --2025-10-09 18:31:56-- https://github.com/dandavison/delta/releases/download/0.18.2/git-delta_0.18.2_arm64.deb
141
+ Resolving github.com (github.com)... 20.87.245.0
142
+ Connecting to github.com (github.com)|20.87.245.0|:443... connected.
143
+ HTTP request sent, awaiting response... 302 Found
144
+ Location: https://release-assets.githubusercontent.com/github-production-release-asset/193526915/efd1d245-1d1e-4f19-ac99-0518bf31266d?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-10-09T19%3A19%3A51Z&rscd=attachment%3B+filename%3Dgit-delta_0.18.2_arm64.deb&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-10-09T18%3A19%3A38Z&ske=2025-10-09T19%3A19%3A51Z&sks=b&skv=2018-11-09&sig=wSSEOovq7e2nsvla8Wy3AD4txJ%2FUyt12xkkPIvASOLM%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2MDAzNDkyNCwibmJmIjoxNzYwMDM0NjI0LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.a4i5Y0160BTAu_nkE8pT86CFHfQiK4LwrvsirK3sVkE&response-content-disposition=attachment%3B%20filename%3Dgit-delta_0.18.2_arm64.deb&response-content-type=application%2Foctet-stream [following]
145
+ --2025-10-09 18:31:56-- https://release-assets.githubusercontent.com/github-production-release-asset/193526915/efd1d245-1d1e-4f19-ac99-0518bf31266d?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-10-09T19%3A19%3A51Z&rscd=attachment%3B+filename%3Dgit-delta_0.18.2_arm64.deb&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-10-09T18%3A19%3A38Z&ske=2025-10-09T19%3A19%3A51Z&sks=b&skv=2018-11-09&sig=wSSEOovq7e2nsvla8Wy3AD4txJ%2FUyt12xkkPIvASOLM%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2MDAzNDkyNCwibmJmIjoxNzYwMDM0NjI0LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.a4i5Y0160BTAu_nkE8pT86CFHfQiK4LwrvsirK3sVkE&response-content-disposition=attachment%3B%20filename%3Dgit-delta_0.18.2_arm64.deb&response-content-type=application%2Foctet-stream
146
+ Resolving release-assets.githubusercontent.com (release-assets.githubusercontent.com)... 185.199.109.133, 185.199.110.133, 185.199.108.133, ...
147
+ Connecting to release-assets.githubusercontent.com (release-assets.githubusercontent.com)|185.199.109.133|:443... connected.
148
+ HTTP request sent, awaiting response... 200 OK
149
+ Length: 2292336 (2.2M) [application/octet-stream]
150
+ Saving to: β€˜git-delta_0.18.2_arm64.deb’
151
+
152
+ 0K .......... .......... .......... .......... .......... 2% 13.0M 0s
153
+ 50K .......... .......... .......... .......... .......... 4% 30.5M 0s
154
+ 100K .......... .......... .......... .......... .......... 6% 46.5M 0s
155
+ 150K .......... .......... .......... .......... .......... 8% 63.5M 0s
156
+ 200K .......... .......... .......... .......... .......... 11% 195M 0s
157
+ 250K .......... .......... .......... .......... .......... 13% 26.0M 0s
158
+ 300K .......... .......... .......... .......... .......... 15% 134M 0s
159
+ 350K .......... .......... .......... .......... .......... 17% 39.6M 0s
160
+ 400K .......... .......... .......... .......... .......... 20% 59.6M 0s
161
+ 450K .......... .......... .......... .......... .......... 22% 116M 0s
162
+ 500K .......... .......... .......... .......... .......... 24% 77.7M 0s
163
+ 550K .......... .......... .......... .......... .......... 26% 369M 0s
164
+ 600K .......... .......... .......... .......... .......... 29% 396M 0s
165
+ 650K .......... .......... .......... .......... .......... 31% 188M 0s
166
+ 700K .......... .......... .......... .......... .......... 33% 79.0M 0s
167
+ 750K .......... .......... .......... .......... .......... 35% 334M 0s
168
+ 800K .......... .......... .......... .......... .......... 37% 106M 0s
169
+ 850K .......... .......... .......... .......... .......... 40% 463M 0s
170
+ 900K .......... .......... .......... .......... .......... 42% 540M 0s
171
+ 950K .......... .......... .......... .......... .......... 44% 62.6M 0s
172
+ 1000K .......... .......... .......... .......... .......... 46% 519M 0s
173
+ 1050K .......... .......... .......... .......... .......... 49% 534M 0s
174
+ 1100K .......... .......... .......... .......... .......... 51% 543M 0s
175
+ 1150K .......... .......... .......... .......... .......... 53% 513M 0s
176
+ 1200K .......... .......... .......... .......... .......... 55% 424M 0s
177
+ 1250K .......... .......... .......... .......... .......... 58% 539M 0s
178
+ 1300K .......... .......... .......... .......... .......... 60% 559M 0s
179
+ 1350K .......... .......... .......... .......... .......... 62% 153M 0s
180
+ 1400K .......... .......... .......... .......... .......... 64% 358M 0s
181
+ 1450K .......... .......... .......... .......... .......... 67% 539M 0s
182
+ 1500K .......... .......... .......... .......... .......... 69% 550M 0s
183
+ 1550K .......... .......... .......... .......... .......... 71% 404M 0s
184
+ 1600K .......... .......... .......... .......... .......... 73% 541M 0s
185
+ 1650K .......... .......... .......... .......... .......... 75% 105M 0s
186
+ 1700K .......... .......... .......... .......... .......... 78% 467M 0s
187
+ 1750K .......... .......... .......... .......... .......... 80% 511M 0s
188
+ 1800K .......... .......... .......... .......... .......... 82% 523M 0s
189
+ 1850K .......... .......... .......... .......... .......... 84% 565M 0s
190
+ 1900K .......... .......... .......... .......... .......... 87% 496M 0s
191
+ 1950K .......... .......... .......... .......... .......... 89% 415M 0s
192
+ 2000K .......... .......... .......... .......... .......... 91% 536M 0s
193
+ 2050K .......... .......... .......... .......... .......... 93% 403M 0s
194
+ 2100K .......... .......... .......... .......... .......... 96% 454M 0s
195
+ 2150K .......... .......... .......... .......... .......... 98% 403M 0s
196
+ 2200K .......... .......... .......... ........ 100% 641M=0.02s
197
+
198
+ 2025-10-09 18:31:56 (118 MB/s) - β€˜git-delta_0.18.2_arm64.deb’ saved [2292336/2292336]
199
+
200
+ (Reading database ... 23523 files and directories currently installed.)
201
+ Preparing to unpack git-delta_0.18.2_arm64.deb ...
202
+ Unpacking git-delta (0.18.2) over (0.18.2) ...
203
+ Setting up git-delta (0.18.2) ...
204
+ βœ… Command 5 completed successfully
205
+
206
+ πŸ“ [6/10] sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v${Z...
207
+ --2025-10-09 18:31:56-- https://github.com/deluan/zsh-in-docker/releases/download/v1.2.0/zsh-in-docker.sh
208
+ Resolving github.com (github.com)... 20.87.245.0
209
+ Connecting to github.com (github.com)|20.87.245.0|:443... connected.
210
+ HTTP request sent, awaiting response... 302 Found
211
+ Location: https://release-assets.githubusercontent.com/github-production-release-asset/207162804/8afe1b92-7364-41b9-9e24-1c704ccf220d?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-10-09T19%3A18%3A38Z&rscd=attachment%3B+filename%3Dzsh-in-docker.sh&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-10-09T18%3A17%3A39Z&ske=2025-10-09T19%3A18%3A38Z&sks=b&skv=2018-11-09&sig=uymHSHDf26tIi9rheQuEUARoScEXKEC9DIfao1H5X8o%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2MDAzNDkyNSwibmJmIjoxNzYwMDM0NjI1LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.lHr8IW9Y9ctEHUmvuB_Bo0RqZ44N1UwiGZlsQkHWMc8&response-content-disposition=attachment%3B%20filename%3Dzsh-in-docker.sh&response-content-type=application%2Foctet-stream [following]
212
+ --2025-10-09 18:31:56-- https://release-assets.githubusercontent.com/github-production-release-asset/207162804/8afe1b92-7364-41b9-9e24-1c704ccf220d?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-10-09T19%3A18%3A38Z&rscd=attachment%3B+filename%3Dzsh-in-docker.sh&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-10-09T18%3A17%3A39Z&ske=2025-10-09T19%3A18%3A38Z&sks=b&skv=2018-11-09&sig=uymHSHDf26tIi9rheQuEUARoScEXKEC9DIfao1H5X8o%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2MDAzNDkyNSwibmJmIjoxNzYwMDM0NjI1LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.lHr8IW9Y9ctEHUmvuB_Bo0RqZ44N1UwiGZlsQkHWMc8&response-content-disposition=attachment%3B%20filename%3Dzsh-in-docker.sh&response-content-type=application%2Foctet-stream
213
+ Resolving release-assets.githubusercontent.com (release-assets.githubusercontent.com)... 185.199.108.133, 185.199.110.133, 185.199.111.133, ...
214
+ Connecting to release-assets.githubusercontent.com (release-assets.githubusercontent.com)|185.199.108.133|:443... connected.
215
+ HTTP request sent, awaiting response... 200 OK
216
+ Length: 5426 (5.3K) [application/octet-stream]
217
+ Saving to: β€˜STDOUT’
218
+
219
+ 0K ..... 100% 91.6M=0s
220
+
221
+ 2025-10-09 18:31:56 (91.6 MB/s) - written to stdout [5426/5426]
222
+
223
+
224
+ Installing Oh-My-Zsh with:
225
+ THEME = default
226
+ PLUGINS = git fzf
227
+
228
+ fatal: destination path '/config/.oh-my-zsh/custom/themes/powerlevel10k' already exists and is not an empty directory.
229
+ ❌ Command 6 failed: Command failed: sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v${ZSH_IN_DOCKER_VERSION}/zsh-in-docker.sh)" -- -p git -p fzf -a "source /usr/share/doc/fzf/examples/key-bindings.zsh" -a "source /usr/share/doc/fzf/examples/completion.zsh" -a "export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history" -x
230
+
231
+ ⚠️ Build failed at command 6/10
232
+ πŸ“ Partial build script available at: sandboxbox-sandbox/build.sh
233
+ ❌ Error: Build failed: Command failed: sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v${ZSH_IN_DOCKER_VERSION}/zsh-in-docker.sh)" -- -p git -p fzf -a "source /usr/share/doc/fzf/examples/key-bindings.zsh" -a "source /usr/share/doc/fzf/examples/completion.zsh" -a "export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history" -x
234
+ ❌ Command failed: Command failed: node "./container.js" build ./Dockerfile
package/init-firewall.sh ADDED
@@ -0,0 +1,36 @@
1
+ #!/bin/bash
2
+ # Firewall initialization script for container networking
3
+ # This script sets up basic firewall rules for container isolation
4
+
5
+ set -e
6
+
7
+ echo "Initializing firewall rules..."
8
+
9
+ # Check if iptables is available
10
+ if ! command -v iptables &> /dev/null; then
11
+ echo "Error: iptables not found"
12
+ exit 1
13
+ fi
14
+
15
+ # Allow established connections
16
+ iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT || true
17
+
18
+ # Allow loopback
19
+ iptables -A INPUT -i lo -j ACCEPT || true
20
+ iptables -A OUTPUT -o lo -j ACCEPT || true
21
+
22
+ # Allow DNS
23
+ iptables -A OUTPUT -p udp --dport 53 -j ACCEPT || true
24
+ iptables -A OUTPUT -p tcp --dport 53 -j ACCEPT || true
25
+
26
+ # Allow HTTP/HTTPS outbound (for package downloads, etc)
27
+ iptables -A OUTPUT -p tcp --dport 80 -j ACCEPT || true
28
+ iptables -A OUTPUT -p tcp --dport 443 -j ACCEPT || true
29
+
30
+ # Allow SSH outbound
31
+ iptables -A OUTPUT -p tcp --dport 22 -j ACCEPT || true
32
+
33
+ # Allow git protocol
34
+ iptables -A OUTPUT -p tcp --dport 9418 -j ACCEPT || true
35
+
36
+ echo "Firewall rules initialized successfully"