From Dockerfile to Kit: the Docker Sandboxes Kit Specification

发生了什么

Agents need containment, and a sandbox is only half of it. Something still has to say which agent runs there, what it gets, and what it may touch. That is a Kit: an ordinary OCI image, so the answer travels with the agent and means the same thing on any conforming runtime. Today we published the Docker Sandbox Kit Specification v3, open source under Apache 2.0 at docker/sandbox-kit-spec . Here is why I wrote it. Eve…

摘要按规则整理自下方来源原文

来源