Sign inSign up

docker/sbx-kit-panw-endpoint-enforcement:1.0.0

Multi-platform
Manifest digest

sha256:dea63efeac5c58a5357ed931e59f5d24ff26c1954687e50fc898d602373d4f24

Last pushed

9 days by cdupuis

Type

Sandbox Kit

Manifest digest

sha256:dea63efeac5c58a5357ed931e59f5d24ff26c1954687e50fc898d602373d4f24

OverviewSpec
MIXIN

Marks agent processes as running inside a sandbox so a host-side endpoint security policy engine can permit sandbox-wrapped agents while denying any agent process that spawns outside a sandbox.

Arguments
NameRequiredDefaultDescription
markerIdOptionalsandbox-wrapped

Identity string the host endpoint policy keys on to allow this process.

CapabilitiesExpand a row to see its full configuration.
TypeRequiredDescription
com.docker.sandbox/lifecycle@1Required—
com.docker.sandbox/agent-context@1Required—

Apply this mixin to a sandbox

sbx run <agent> --kit docker/sbx-kit-panw-endpoint-enforcement:1.0.0

Make sure you have docker sbx installed

Run the following command to install sbx on your machine.

macOS
brew install docker/tap/sbx
Windows
winget install Docker.sbx
Learn more about docker sbx⁠