mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-11-06 05:17:15 +00:00
28 lines
1.6 KiB
YAML
28 lines
1.6 KiB
YAML
name: bubblewrap
|
|
repo: https://github.com/NousResearch/hermes-official-plugins
|
|
sha: a50b0fea59d10f9a51b488206f587d9cb6ca6163
|
|
subdir: bubblewrap
|
|
description: 'Bubblewrap terminal backend for Linux: every terminal and execute_code command runs in its own bwrap
|
|
sandbox on this machine at the host''s own paths, with a read-only root, a writable working directory (per
|
|
profile: restricted, workspace or network), the dot entries of the home directory (credential stores always) and
|
|
the Hermes home hidden, private temp and process directories, agent and docker sockets masked, and per-command
|
|
memory, CPU and process limits (`hermes config set terminal.backend bubblewrap`). Disclosure — no Python dependencies and no network calls of its
|
|
own: it runs your commands through the `bwrap` and `prlimit` binaries you install (bubblewrap, util-linux), and
|
|
under the default `network` profile those commands share the host network. It reads no credentials. File tools
|
|
(read_file, write_file, patch, search_files) run inside the sandbox too, and because the working directory is a
|
|
real host directory Hermes keeps its dangerous-command prompts, as for the local backend.'
|
|
maintainer: NousResearch
|
|
tier: official
|
|
category: tools
|
|
requires_hermes: ">=0.22.6"
|
|
version: "1.3.0"
|
|
image: https://raw.githubusercontent.com/NousResearch/hermes-official-plugins/a50b0fea59d10f9a51b488206f587d9cb6ca6163/assets/bubblewrap.jpg
|
|
docs_url: https://github.com/NousResearch/hermes-official-plugins/tree/main/bubblewrap
|
|
platforms:
|
|
- linux
|
|
capabilities:
|
|
provides_tools: []
|
|
provides_hooks: []
|
|
provides_middleware: []
|
|
requires_env: []
|