creator/monlet
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Prepare public release docs

Browse Source
This commit is contained in:
Stanislav Rossovskii
2026-06-23 15:08:28 +04:00
parent 1026e9ebbe
commit 03bf0edddb
11 changed files with 311 additions and 55 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
agent/README.md
View File

@@ -54,10 +54,10 @@ resource_limits = { cpu_time = "5s", memory = "256MiB", open_files = 128 }
executes it as `/bin/sh -c <command>` on the host where the agent runs.
- Local-config only. Commands are loaded from the agent's TOML file on disk.
The server does not push config and does not execute remote commands; see
`docs/architecture/security.md#no-remote-execution`. Anyone able to edit the
agent config or replace the agent binary already has local root-equivalent
power, so shell execution adds no new attack surface beyond that file.
The server does not push config and does not execute remote commands. Anyone
able to edit the agent config or replace the agent binary already has local
root-equivalent power, so shell execution adds no new attack surface beyond
that file.
- Argv arrays (`command = ["..."]`) are intentionally rejected by config
validation. Use a shell string for both short and long commands.
- Quoting and escaping are the operator's responsibility. Triple-quoted