mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-10-20 16:03:21 +00:00
* feat: probe nsjail with a real jail and add a gVisor compat mode Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: route dbt captured phases through the gVisor compat step and harden the probe dir Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * feat: patch nsjail with a gvisor_compat option instead of applying rlimits from the worker Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * fix: keep DuckDB jailed on a sandboxed worker whose nsjail probe failed Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> * docs: link the upstream gVisor issues from the nsjail patch Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>