Commit Graph

56 Commits

Author SHA1 Message Date
liqiang-fit2cloud 5329b44e08 fix: deny access to local services by IPv6 and IPv6-mapped IPv4 addresses for sandbox. 2025-12-16 16:48:48 +08:00
liqiang-fit2cloud 38191f70b4 fix: deny access to local services by IPv6 and IPv6-mapped IPv4 addresses for sandbox. 2025-12-16 12:35:54 +08:00
liqiang-fit2cloud 4d0ac41a97 refactor: change dir permission. 2025-12-05 13:21:26 +08:00
liqiang-fit2cloud d4bd49ba9d refactor: change dir permission. 2025-12-05 12:36:33 +08:00
liqiang-fit2cloud 71f1e26c8f refactor: run python code without su -. 2025-12-03 09:52:02 +08:00
liqiang-fit2cloud ee539322ad feat: banned host support CIDR. 2025-12-02 16:58:07 +08:00
liqiang-fit2cloud cf59cca8bd fix: change dir permission. 2025-11-28 14:14:31 +08:00
liqiang-fit2cloud 916a8fe67c deps: upgrade redis-server. 2025-11-27 15:53:49 +08:00
liqiang-fit2cloud 2d0e0b45c4 deps: upgrade redis-server. 2025-11-27 15:46:20 +08:00
liqiang-fit2cloud 715adc13c5 deps: upgrade redis-server. 2025-11-27 15:41:51 +08:00
liqiang-fit2cloud af9bf0d99c refactor: change lib dir. 2025-11-27 10:52:42 +08:00
liqiang-fit2cloud c74cfebebf Revert "deps: upgrade redis-server."
This reverts commit d3e7d81c33.
2025-11-27 10:51:35 +08:00
liqiang-fit2cloud d3e7d81c33 deps: upgrade redis-server. 2025-11-27 10:48:28 +08:00
liqiang-fit2cloud eb30b88d10 refactor: remove MAXKB_SANDBOX_PYTHON_BANNED_KEYWORDS.
Some checks are pending
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
2025-11-24 18:42:06 +08:00
liqiang-fit2cloud a9b6f2b211 refactor: change dir permissions. 2025-11-21 10:35:47 +08:00
liqiang-fit2cloud fb37c57b53 refactor: change dir permissions.
Some checks are pending
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
2025-11-21 09:37:19 +08:00
liqiang-fit2cloud c114eff9b6 refactor: change dir permissions. 2025-11-20 14:46:48 +08:00
liqiang-fit2cloud 7d3f92bd51 fix: fix incorrect permission may introduce security vulnerabilities. 2025-11-19 14:32:05 +08:00
liqiang-fit2cloud f6c70da5ff refactor: add cl100k_base.tiktoken tokenizer. 2025-11-07 15:34:36 +08:00
liqiang-fit2cloud 9a0fa37254 fix: fix typo. 2025-11-07 11:12:57 +08:00
liqiang-fit2cloud 180ee40cdc refactor: set MAXKB_SANDBOX_HOME env. 2025-11-07 11:10:14 +08:00
liqiang-fit2cloud 83814b30f2 refactor: ban host.docker.internal access by default. 2025-11-07 11:02:17 +08:00
liqiang-fit2cloud f0ecad6de1 refactor: rename MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES to MAXKB_SANDBOX_PYTHON_BANNED_HOSTS 2025-11-06 15:41:35 +08:00
liqiang-fit2cloud 6e39df454c refactor: rename MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES to MAXKB_SANDBOX_PYTHON_ALLOW_HOST_REGEXES 2025-11-06 11:23:09 +08:00
liqiang-fit2cloud 9029240931 refactor: rename MAXKB_SANDBOX_PYTHON_BANNED_HOSTS to MAXKB_SANDBOX_PYTHON_ALLOW_HOSTS_REGEXES 2025-11-06 11:03:48 +08:00
liqiang-fit2cloud 9971df1a02 feat: add MAXKB_SANDBOX_PYTHON_BANNED_HOSTS env to ban host for sandbox in tools code. 2025-11-05 16:43:17 +08:00
liqiang-fit2cloud 8c788bf785 perf: revert preload. 2025-11-04 09:31:27 +08:00
liqiang-fit2cloud 33b4efa2a5 fix: fix LD_PRELOAD env.
Some checks failed
sync2gitee / repo-sync (push) Has been cancelled
Typos Check / Spell Check with Typos (push) Has been cancelled
2025-10-31 18:36:44 +08:00
liqiang-fit2cloud 4c5317ca51 fix: fix LD_PRELOAD env. 2025-10-31 18:35:28 +08:00
liqiang-fit2cloud 3f986c5f65 fix: fix LD_PRELOAD env. 2025-10-31 18:19:31 +08:00
liqiang-fit2cloud 85d6a2696d perf: try to reduce memory usage by adding env LD_PRELOAD. 2025-10-23 10:47:07 +08:00
liqiang-fit2cloud dd0948ed20 build: optimize Dockerfile.
Some checks are pending
sync2gitee / repo-sync (push) Waiting to run
Typos Check / Spell Check with Typos (push) Waiting to run
2025-08-22 11:28:15 +08:00
liqiang-fit2cloud a77da52ad4 build: init py3 in base image. 2025-08-21 15:37:52 +08:00
liqiang-fit2cloud 4229b47df1 build: init py3 in base image. 2025-08-21 15:32:02 +08:00
liqiang-fit2cloud ae5fb8fae3 build: init py3 in base image. 2025-08-21 15:20:53 +08:00
liqiang-fit2cloud 11b689226c fix: fix tool issue occurred after upgrade debian to trixie. 2025-08-19 13:06:56 +08:00
liqiang-fit2cloud 29314a79d0 fix: update base images in Dockerfile to use trixie variant 2025-08-19 09:43:31 +08:00
CaptainB ed424428ac fix: update base images in Dockerfile to use bookworm variant 2025-08-18 15:32:04 +08:00
CaptainB c82a33ce48 fix: update postgres dependency to version 17.6-bullseye 2025-08-18 14:57:34 +08:00
liqiang-fit2cloud c8762ade9a build: update ENV. 2025-08-13 14:57:50 +08:00
liqiang-fit2cloud ba067c53e2 build: reduce image size. 2025-08-08 17:32:46 +08:00
liqiang-fit2cloud ecd4d63aee refactor: remove r permission for sandbox user. 2025-07-21 11:03:20 +08:00
liqiang-fit2cloud 1e14a00754 refactor: add banned keyword. 2025-07-21 10:21:07 +08:00
liqiang-fit2cloud e982bb0ca1 feat: add MAXKB_SANDBOX_PYTHON_BANNED_KEYWORDS env to ban keywords in tool content. 2025-07-16 16:24:41 +08:00
liqiang-fit2cloud 87045603ff build: update Dockerfiles. 2025-07-09 09:59:59 +08:00
liqiang-fit2cloud 7bd1e48465 build: upgrade postgres to 17.5. 2025-07-08 15:22:09 +08:00
liqiang-fit2cloud a942090f30 build: clear image. 2025-07-08 15:13:09 +08:00
liqiang-fit2cloud 30dc77650a build: expose redis port. 2025-07-08 09:10:46 +08:00
liqiang-fit2cloud 9b00ebd95a build: update env. 2025-07-01 16:34:37 +08:00
liqiang-fit2cloud 636c219979 feat: add MAXKB_ADMIN_PATH env. 2025-07-01 10:44:42 +08:00