fix: use granular workspace mounting instead of entire HOME directory#699

Merged

pelikhan merged 18 commits intomainfrom

claude/diagnose-firewall-vulnerability

Feb 13, 2026

Commits on Feb 11, 2026

Commits on Feb 12, 2026

fix(docker): mount CLI state directories in chroot mode for Copilot and Claude (#702)

Copilot
and
lpcox
authored
Merge remote-tracking branch 'origin/main' into claude/diagnose-firewall-vulnerability
Mossaka
committed
fix: remove noisy cached token logging and add Rust toolchain mounts

Mossaka
and
claude
committed
fix: mount ~/.cargo as rw to allow /dev/null credential overlay

Mossaka
and
claude
committed
fix: mount ~/.rustup as rw and add ~/.npm for chroot mode

Mossaka
and
claude
committed
fix: pre-create chroot home subdirs with correct ownership

Mossaka
and
claude
committed
test: add tests for chroot volume mounts and directory pre-creation

Mossaka
and
claude
committed
fix: ensure HOME directory has correct ownership in chroot mode

Mossaka
and
claude
committed
fix: mount empty writable HOME directory for chroot mode

Mossaka
and
claude
committed
fix: place chroot-home dir outside workDir to avoid tmpfs overlay

Mossaka
and
claude
committed
test: add cleanup test for chroot-home directory

Mossaka
and
claude
committed
fix: resolve merge conflicts with origin/main

Mossaka
and
claude
committed
fix: remove enableChroot from integration test (always-on now)

Mossaka
and
claude
committed
fix: merge origin/main, resolve docs conflicts

Mossaka
and
claude
committed

Commits on Feb 13, 2026

fix: prevent one-shot-token deadlock with rustc/LLVM

Mossaka
and
claude
committed