Allow staged applications to execute from tmpfs

Co-authored-by: codegirl007 <codegirl-007@users.noreply.github.com>
This commit is contained in:
Cursor Agent
2026-08-17 16:48:13 +00:00
co-authored by codegirl007
parent e9197798f9
commit 3037dbc2dd
@@ -57,7 +57,7 @@ func (e *Environment) Start(ctx context.Context) error {
"--init",
"--network=none",
"--read-only",
"--tmpfs=/tmp:rw,nosuid,nodev,size=128m",
"--tmpfs=/tmp:rw,exec,nosuid,nodev,size=128m",
"--cap-drop=ALL",
"--security-opt=no-new-privileges",
"--pids-limit=128",