KNEL/KNELProductionContainers
2
0
Fork 0
Code Pull Requests Actions Packages Releases Activity

docs(agents): enforce host-as-read-only; only use preinstalled docker/git/tea/curl; all work in containers

Browse Source
This commit is contained in:
Charles N Wyble - admin
2025-09-12 14:34:47 -05:00
parent 39a28bbf2f
commit 52439d8f37
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
AGENTS.md
View File

@@ -7,7 +7,8 @@ Package ~100 free/libre/open-source applications as Cloudron apps with a fast, c
## Golden Rules
- Single branch: use only `main`. Do not create feature branches unless explicitly requested.
- No host pollution: never install packages or tools on the host. The only required host tools are `docker`, `git` (and optionally `tea`).
- Host is read-only: do not install or modify anything on the host OS. You MAY only check for the presence of tools and run them if already installed.
- Allowed host tools (if present): `docker`, `git`, `tea` (optional), and `curl` for connectivity checks. Never attempt to install or upgrade them.
- Containers only: all build, test, lint, and packaging commands must run inside the packaging container.
- Do not push to remote without approval: never run `git push` for a package change until it has been validated and explicitly approved by the maintainer.
- Keep repo slim: do not commit upstream source trees or build artefacts. Only commit package files under `CloudronPackages/<AppName>/`, small helper scripts, and minimal docs.
@@ -62,8 +63,8 @@ Package ~100 free/libre/open-source applications as Cloudron apps with a fast, c
## Networking & External Access
- All networked actions (git clones, docker pulls, downloads) must happen from within the packaging container.
- Host-level curl allowance: You MAY use `curl` on the host strictly for quick connectivity checks (e.g., verifying a URL or endpoint is reachable). Do not install any additional host packages beyond `docker`, `git` (and optionally `tea`).
- Do not attempt other host-level network configuration or host-level package installation.
- Host-level curl allowance: You MAY use `curl` on the host strictly for quick connectivity checks IF it is already installed. Do not install any host packages.
- Do not attempt other host-level network configuration, filesystem changes outside the repo, or host-level package installation.
## Commit Messages
- Use conventional, concise messages: