README
¶
osg-runtime
Sandbox glue & images
Lifecycle helpers, harden, secrets store, osg-init, and GHCR sandbox images.
Part of the zorneth / osg ecosystem
Overview
osg-runtime ties sandbox creation together: guest init (osg-init), Landlock/seccomp harden, secrets store, inference snippets, and the Debian-based sandbox image flavors published to GHCR.
Key Features
| Category | Capabilities |
|---|---|
| Images | sandboxes/{base,gui,gpu} on ghcr.io/zorneth/osg |
| Init | osg-init — Landlock, seccomp, workspace mount |
| Secrets | Host-side store resolved into guest placeholders |
| Harden | Linux sandbox hardening helpers |
| Inference | Local host-gateway model URL helpers |
Installation
go get github.com/zorneth/osg-runtime@latest
Images (after CI publish):
ghcr.io/zorneth/osg/sandboxes/base:latest
ghcr.io/zorneth/osg/sandboxes/gui:latest
ghcr.io/zorneth/osg/sandboxes/gpu:latest
Requirements: Go 1.27+
Quick Start
# build guest init into the image context (as CI does)
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 \
go build -o images/sandbox/osg-init ./cmd/osg-init
docker build -t osg-sandbox:local --target cli -f images/sandbox/Dockerfile images/sandbox
Package Structure
| Path | Purpose |
|---|---|
cmd/osg-init |
Guest entrypoint |
sandbox/ |
Lifecycle helpers |
harden/ |
Landlock / seccomp |
secrets/ |
Secret store |
images/sandbox/ |
Multi-target Dockerfile |
inference/ |
Local model policy snippets |
agentconfig/ |
Agent payload helpers |
Related
| Resource | Link |
|---|---|
| Roadmap | ROADMAP.md |
| Organization | https://github.com/zorneth |
| Organization overview | github.com/zorneth |
| pkg.go.dev | github.com/zorneth/osg-runtime |
License
MIT © zorneth
Directories
¶
| Path | Synopsis |
|---|---|
|
Package agentconfig stages and installs agent guidance into sandboxes.
|
Package agentconfig stages and installs agent guidance into sandboxes. |
|
Package audit emits structured security / lifecycle events in OCSF shorthand (NVIDIA OpenShell–compatible) for agent observation via `osg logs` / `osg term`.
|
Package audit emits structured security / lifecycle events in OCSF shorthand (NVIDIA OpenShell–compatible) for agent observation via `osg logs` / `osg term`. |
|
cmd
|
|
|
osg-agent
command
Command osg-agent dials the gateway relay WebSocket and runs exec requests.
|
Command osg-agent dials the gateway relay WebSocket and runs exec requests. |
|
osg-init
command
Command osg-init runs inside the sandbox: apply harden, then exec the agent.
|
Command osg-init runs inside the sandbox: apply harden, then exec the agent. |
|
osg-sshd
command
Command osg-sshd is a minimal SSH server for sandbox connect --ssh.
|
Command osg-sshd is a minimal SSH server for sandbox connect --ssh. |
|
Package harden applies Landlock, privilege drop, and related guest restrictions.
|
Package harden applies Landlock, privilege drop, and related guest restrictions. |
|
Package idp defines control-plane identity adapters (OIDC / mTLS).
|
Package idp defines control-plane identity adapters (OIDC / mTLS). |
|
Package inference is the product catalog / helpers for LLM egress (P5).
|
Package inference is the product catalog / helpers for LLM egress (P5). |
|
Package refresh defines managed credential refresh backends.
|
Package refresh defines managed credential refresh backends. |
|
Package sandbox orchestrates create → proxy/harden → run → destroy.
|
Package sandbox orchestrates create → proxy/harden → run → destroy. |
|
Package secrets — LocalEncrypted persists provider credential values next to gateway state (OpenShell-like: values never appear in state.json plaintext).
|
Package secrets — LocalEncrypted persists provider credential values next to gateway state (OpenShell-like: values never appear in state.json plaintext). |
Click to show internal directories.
Click to hide internal directories.