refactor: remove --enable-chroot flag, make chroot mode always-on by Copilot · Pull Request #714 · github/gh-aw-firewall

Copilot · 2026-02-12T04:56:05Z

AWF should only run in chroot mode. Remove the --enable-chroot flag and eliminate the non-chroot code path entirely.

Core

Remove enableChroot from WrapperConfig interface and CLI option
docker-manager.ts: all config.enableChroot conditionals replaced with unconditional chroot behavior — getRealUserHome(), chroot capabilities (SYS_CHROOT, SYS_ADMIN), apparmor:unconfined, selective /host mounts, tmpfs mcp-logs hiding
Remove the non-chroot selective mounting code path (credential hiding at direct $HOME paths); only the /host$HOME credential hiding remains

Tests

Remove enableChroot from all test configs across unit and integration tests
Remove 4 tests that asserted enableChroot: false behavior (capabilities, apparmor, env var, Dockerfile selection)

Docs & Workflows

Update README.md, docs/chroot-mode.md, docs/usage.md, docs/architecture.md, docs/selective-mounting.md, skill.md, docs-site/ CLI reference, security architecture
Remove --enable-chroot from all 26 .lock.yml workflow files and test-chroot.sh

Before/After

# Before
sudo awf --enable-chroot --allow-domains api.github.com -- python3 script.py

# After
sudo awf --allow-domains api.github.com -- python3 script.py

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

github-actions · 2026-02-12T05:36:51Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

github-actions · 2026-02-12T05:36:52Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-12T05:36:53Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-12T05:37:33Z

⚠️ Coverage Regression Detected

This PR decreases test coverage. Please add tests to maintain coverage levels.

Overall Coverage

Metric	Base	PR	Delta
Lines	82.25%	82.32%	📈 +0.07%
Statements	82.30%	82.37%	📈 +0.07%
Functions	82.14%	82.05%	📉 -0.09%
Branches	74.70%	74.30%	📉 -0.40%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
`src/docker-manager.ts`	83.5% → 83.8% (+0.30%)	82.9% → 83.2% (+0.29%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions · 2026-02-12T05:40:13Z

Node.js Build Test Results ✅

All Node.js projects tested successfully!

Project	Install	Tests	Status
clsx	✅	PASS	PASS
execa	✅	PASS	PASS
p-limit	✅	PASS	PASS

Overall: PASS

AI generated by Build Test Node.js

github-actions · 2026-02-12T05:40:26Z

Build Test: Bun - PASS ✅

Project	Install	Tests	Status
elysia	✅	1/1	PASS ✅
hono	✅	1/1	PASS ✅

Overall: PASS ✅

All Bun projects built and tested successfully.

AI generated by Build Test Bun

github-actions · 2026-02-12T05:40:28Z

C++ Build Test Results

Project	CMake	Build	Status
fmt	✅	✅	PASS
json	✅	✅	PASS

Overall: PASS ✅

All C++ projects built successfully.

AI generated by Build Test C++

github-actions · 2026-02-12T05:40:29Z

.NET Build Test Results

Project	Restore	Build	Run	Status
hello-world	✅	✅	✅	PASS
json-parse	✅	✅	✅	PASS

Overall: PASS ✅

Details

hello-world

Restored successfully
Build succeeded (0 warnings, 0 errors)
Output: Hello, World!

json-parse

Restored successfully with NuGet package (Newtonsoft.Json)
Build succeeded (0 warnings, 0 errors)
Successfully parsed JSON and output: Name: AWF Test, Success: True

All .NET projects built and ran successfully through the firewall.

AI generated by Build Test .NET

github-actions · 2026-02-12T05:40:29Z

Build Test: Deno

Project	Tests	Status
oak	1/1	✅ PASS
std	1/1	✅ PASS

Overall: ✅ PASS

All Deno tests completed successfully.

AI generated by Build Test Deno

github-actions · 2026-02-12T05:40:38Z

Rust Build Test Results

Project	Build	Tests	Status
fd	✅	1/1	PASS
zoxide	✅	1/1	PASS

Overall: PASS ✅

All Rust projects built and tested successfully.

AI generated by Build Test Rust

github-actions · 2026-02-12T19:44:10Z

Go Build Test Results

Project	Download	Tests	Status
color	✅	1/1	PASS
env	✅	1/1	PASS
uuid	✅	1/1	PASS

Overall: PASS ✅

All Go projects successfully downloaded dependencies and passed tests.

AI generated by Build Test Go

github-actions · 2026-02-12T19:44:14Z

Smoke Test Results

Last 2 merged PRs:

fix: hide workDir from agent container to prevent secrets exposure #718: fix: hide workDir from agent container to prevent secrets exposure
fix(chroot): detect cargo binaries when CARGO_HOME unset #750: fix(chroot): detect cargo binaries when CARGO_HOME unset

✅ GitHub MCP: Retrieved PRs
✅ Playwright: Page title contains "GitHub"
✅ File Write: Created test file
✅ Bash: File verified

Status: PASS

AI generated by Smoke Claude

github-actions · 2026-02-12T19:44:17Z

Deno Build Test Results

Project	Tests	Status
oak	1/1	✅ PASS
std	1/1	✅ PASS

Overall: ✅ PASS

All Deno tests completed successfully.

AI generated by Build Test Deno

github-actions · 2026-02-12T19:44:24Z

Smoke Test Results (Run #21961531948)

Last 2 merged PRs:

fix: hide workDir from agent container to prevent secrets exposure #718: fix: hide workDir from agent container to prevent secrets exposure
fix(chroot): detect cargo binaries when CARGO_HOME unset #750: fix(chroot): detect cargo binaries when CARGO_HOME unset

✅ GitHub MCP - 2 PRs retrieved
✅ Playwright - GitHub.com title verified
✅ File creation - smoke-test-copilot-21961531948.txt
✅ Bash tools - file read successful

Status: PASS

cc: @Mossaka @Copilot

AI generated by Smoke Copilot

github-actions · 2026-02-12T19:44:58Z

Merged PRs: ✅ fix(chroot): detect cargo binaries when CARGO_HOME unset; fix: add CARGO_HOME/bin to GitHub Actions PATH for rust tests
safeinputs-gh pr list: ✅
Playwright title contains GitHub: ✅
Tavily search: ❌ (tavily MCP not available)
File write: ✅
Bash cat: ✅
Discussion query+comment: ✅
Build (npm ci && npm run build): ✅
Overall: FAIL

AI generated by Smoke Codex

github-actions · 2026-02-12T19:45:42Z

Chroot Mode Version Comparison Results

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.12	Python 3.12.3	❌ NO
Node.js	v24.13.0	v20.20.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Overall Result: ❌ Tests did not all pass

The chroot mode is accessing host binaries, but Python and Node.js versions differ between the host environment and what's visible inside the chroot container. Go matches correctly.

AI generated by Smoke Chroot

github-actions · 2026-02-12T19:45:52Z

Java Build Test Results ✅

All Java build tests completed successfully!

Project	Compile	Tests	Status
gson	✅	1/1	PASS
caffeine	✅	1/1	PASS

Overall: PASS

All projects compiled successfully and all tests passed.

AI generated by Build Test Java

Chroot mode is now always-on, which requires the container image to be built from the current source (matching entrypoint.sh). The 13 agentic workflows (security-guard, ci-doctor, etc.) were still using --image-tag 0.13.12 --skip-pull with pre-built GHCR images from before the chroot-always-on change. Add all agentic workflow lock files to the post-processing script and run it to replace --image-tag/--skip-pull with --build-local, remove sparse-checkout (full repo needed for npm build), and replace the install step with local build steps.

github-actions · 2026-02-12T20:17:28Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-12T20:17:30Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

github-actions · 2026-02-12T20:17:30Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-12T20:17:47Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-12T20:21:15Z

Build Test: Rust - FAILED ❌

Error: Rust toolchain not available in runner environment.

Project	Build	Tests	Status
fd	❌	N/A	FAILED - cargo not found
zoxide	❌	N/A	FAILED - cargo not found

Overall: FAIL

Issue

The GitHub Actions runner does not have Rust installed. The workflow requires cargo and rustc to build and test the Rust projects.

Required Action

Add a Rust installation step before running this workflow:

- name: Install Rust
  uses: dtolnay/rust-toolchain@stable

Or use a runner image with Rust pre-installed.

AI generated by Build Test Rust

github-actions · 2026-02-12T20:21:15Z

Smoke Test Results (Run #21962737181)

Last 2 Merged PRs:

fix: review recommendations for PR #720 #754: fix: review recommendations for PR feat: port one-shot-token from C to Rust and improve container security #720
fix: eliminate nested bash layer in chroot command execution for Java/.NET #715: fix: eliminate nested bash layer in chroot command execution for Java/.NET

Test Results:
✅ GitHub MCP - Retrieved PRs
✅ Playwright - Page title verified (contains "GitHub")
✅ File Write - Created test file
✅ Bash - Read file back successfully

Status: PASS

AI generated by Smoke Claude

github-actions · 2026-02-12T20:21:24Z

Deno Build Test Results

Project	Tests	Status
oak	1/1	✅ PASS
std	1/1	✅ PASS

Overall: ✅ PASS

All Deno tests passed successfully.

AI generated by Build Test Deno

github-actions · 2026-02-12T20:21:27Z

✅ Smoke Test PASS

Last 2 merged PRs:

fix: review recommendations for PR #720 #754: fix: review recommendations for PR feat: port one-shot-token from C to Rust and improve container security #720
fix: eliminate nested bash layer in chroot command execution for Java/.NET #715: fix: eliminate nested bash layer in chroot command execution for Java/.NET

Tests: ✅ GitHub MCP | ✅ Playwright | ✅ File Write | ✅ Bash

cc @Mossaka @Copilot

AI generated by Smoke Copilot

github-actions · 2026-02-12T20:21:30Z

C++ Build Test Results

Project	CMake	Build	Status
fmt	✅	✅	PASS
json	✅	✅	PASS

Overall: PASS ✅

All C++ projects built successfully.

AI generated by Build Test C++

github-actions · 2026-02-12T20:21:31Z

Bun Build Test Results

Project	Install	Tests	Status
elysia	✅	1/1	PASS
hono	✅	1/1	PASS

Overall: PASS ✅

All Bun projects installed successfully and tests passed.

AI generated by Build Test Bun

github-actions · 2026-02-12T20:21:33Z

Node.js Build Test Results

Project	Install	Tests	Status
clsx	✅	PASS	PASS
execa	✅	PASS	PASS
p-limit	✅	PASS	PASS

Overall: PASS ✅

All Node.js projects successfully installed dependencies and passed tests.

AI generated by Build Test Node.js

github-actions · 2026-02-12T20:21:35Z

✅ .NET Build Test Results

All .NET projects built and ran successfully!

Project	Restore	Build	Run	Status
hello-world	✅	✅	✅	PASS
json-parse	✅	✅	✅	PASS

Overall: PASS

Test Details

hello-world:

Restored successfully
Built with 0 warnings, 0 errors
Output: Hello, World!

json-parse:

Restored successfully with Newtonsoft.Json package
Built with 0 warnings, 0 errors
Output: JSON parsing and deserialization working correctly

AI generated by Build Test .NET

github-actions · 2026-02-12T20:21:46Z

Go Build Test Results

Project	Download	Tests	Status
color	✅	1/1	PASS
env	✅	1/1	PASS
uuid	✅	1/1	PASS

Overall: PASS ✅

All Go projects built and tested successfully.

AI generated by Build Test Go

github-actions · 2026-02-12T20:22:13Z

✅ Java Build Test Results

All Java projects compiled and tested successfully through the AWF firewall.

Project	Compile	Tests	Status
gson	✅	1/1	PASS
caffeine	✅	1/1	PASS

Overall: PASS ✅

All Maven dependencies were downloaded through the Squid proxy (172.30.0.10:3128) with proper ~/.m2/settings.xml configuration.

AI generated by Build Test Java

github-actions · 2026-02-12T20:22:31Z

Smoke test results:
Merged PRs reviewed: fix: review recommendations for PR #720; fix: eliminate nested bash layer in chroot command execution for Java/.NET
GitHub MCP (last 2 merged PRs) ✅
safeinputs-gh pr list ✅
Playwright github.com title ✅
Tavily web search ❌ (tool unavailable)
File write + cat ✅
Discussion comment ✅
Build (npm ci && npm run build) ✅
Overall: FAIL

AI generated by Smoke Codex

github-actions · 2026-02-12T20:23:14Z

Chroot Test Results

Chroot mode allows running commands with host binaries instead of container binaries. This test verifies that the host versions are accessible from within the containerized environment.

Runtime	Host Version	Chroot Version	Match?
Python	3.12.12	3.12.3	❌ NO
Node.js	v24.13.0	v20.20.0	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Result: Test failed - Python and Node.js versions do not match between host and chroot environment. Only Go version matched successfully.

The chroot environment should expose the exact host versions of these runtimes, but version mismatches were detected for Python and Node.js.

AI generated by Smoke Chroot

Initial plan

1ae703f

Copilot AI assigned Copilot and Mossaka Feb 12, 2026

Copilot started work on behalf of Mossaka February 12, 2026 04:56 View session

Copilot AI and others added 3 commits February 12, 2026 05:06

refactor: remove --enable-chroot flag, make chroot mode always-on

27034e6

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

refactor: remove --enable-chroot from tests, docs, and workflows

23ca277

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

refactor: clean up comments referencing optional chroot mode

5b2ca05

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Remove --enable-chroot flag from configuration~~ refactor: remove --enable-chroot flag, make chroot mode always-on Feb 12, 2026

Copilot AI requested a review from Mossaka February 12, 2026 05:18

Copilot finished work on behalf of Mossaka February 12, 2026 05:18

Mossaka marked this pull request as ready for review February 12, 2026 05:36

Copilot AI review requested due to automatic review settings February 12, 2026 05:36

Copilot started reviewing on behalf of Mossaka February 12, 2026 05:37 View session

github-actions bot mentioned this pull request Feb 12, 2026

[agentics] Security Guard failed #721

Closed

github-actions bot added the build-test-node label Feb 12, 2026

github-actions bot added the build-test-bun label Feb 12, 2026

github-actions bot added build-test-dotnet build-test-deno labels Feb 12, 2026

github-actions bot added the build-test-cpp label Feb 12, 2026

github-actions bot added the build-test-rust label Feb 12, 2026

Mossaka mentioned this pull request Feb 12, 2026

[Testing] Chroot escape test coverage gaps - missing pivot_root, mount, unshare, SYS_ADMIN tests #762

Open

github-actions bot mentioned this pull request Feb 12, 2026

[agentics] No-Op Runs #735

Closed

Mossaka merged commit a686962 into main Feb 12, 2026
90 checks passed

Mossaka deleted the copilot/remove-enable-chroot-flag branch February 12, 2026 22:02

This was referenced Feb 12, 2026

fix: use granular workspace mounting instead of entire HOME directory #699

Merged

feat: add secret-digger red team workflows #775

Merged

Conversation

Copilot AI commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Core

Tests

Docs & Workflows

Before/After

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026

⚠️ Coverage Regression Detected

Overall Coverage

Uh oh!

github-actions bot commented Feb 12, 2026

Node.js Build Test Results ✅

Uh oh!

github-actions bot commented Feb 12, 2026

Build Test: Bun - PASS ✅

Uh oh!

github-actions bot commented Feb 12, 2026

C++ Build Test Results

Uh oh!

github-actions bot commented Feb 12, 2026

.NET Build Test Results

Details

Uh oh!

github-actions bot commented Feb 12, 2026

Build Test: Deno

Uh oh!

github-actions bot commented Feb 12, 2026

Rust Build Test Results

Uh oh!

github-actions bot commented Feb 12, 2026

Go Build Test Results

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Deno Build Test Results

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Chroot Mode Version Comparison Results

Uh oh!

github-actions bot commented Feb 12, 2026

Java Build Test Results ✅

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 12, 2026

Build Test: Rust - FAILED ❌

Issue

Required Action

Uh oh!

github-actions bot commented Feb 12, 2026

Uh oh!

github-actions bot commented Feb 12, 2026

Deno Build Test Results

Uh oh!

Copilot AI commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading

github-actions bot commented Feb 12, 2026 •

edited

Loading