CLI reference
kusaw sandbox
Check the OS sandbox backend on this machine
kusaw sandbox
Check the OS sandbox backend on this machine
Usage
kusaw sandbox [flags]Flags
| Name | Short | Type | Default | Description |
|---|---|---|---|---|
--config | string | Path to kusaw.yaml (overrides KUSAW_CONFIG and parent search) | ||
--factory | string | factory name from kusaw list | ||
--help | -h | bool | false | help for sandbox |
Subcommands
kusaw sandbox check
Probe the OS sandbox and print why it can or cannot run
kusaw sandbox check [flags]| Name | Short | Type | Default | Description |
|---|---|---|---|---|
--config | string | Path to kusaw.yaml (overrides KUSAW_CONFIG and parent search) | ||
--factory | string | factory name from kusaw list | ||
--help | -h | bool | false | help for check |
--json | bool | false | Print {backend, version, available, reason, fix} | |
--verbose | bool | false | Also print what the sandbox does not protect |
Example:
kusaw sandbox checkkusaw sandbox doctor
Report sandbox egress mode, allowlist, inject names, and probes P5–P7
kusaw sandbox doctor [flags]| Name | Short | Type | Default | Description |
|---|---|---|---|---|
--config | string | Path to kusaw.yaml (overrides KUSAW_CONFIG and parent search) | ||
--factory | string | factory name from kusaw list | ||
--help | -h | bool | false | help for doctor |
Example:
kusaw sandbox doctorExit codes
| Code | Name | Description |
|---|---|---|
| 0 | ok | Success. |
| 1 | error | Runtime error. |
| 2 | usage | Usage or validation error. |
| 3 | rejected | Control request rejected; the error string is printed verbatim. |
| 4 | not picked up | Control request not picked up within the wait time while serve runs. |
Example
kusaw sandbox check