egressMembraneOverrideFlags

egressMembraneOverrideFlags(tmpDir, deps?): string[]

Defined in: src/egress.ts:585

Returns ADDITIVE bwrap bind flags to append AFTER the membrane flags.

• --ro-bind <tmpDir>/nsswitch.conf /etc/nsswitch.conf
• --ro-bind <tmpDir>/resolv.conf <realpath-of-/etc/resolv.conf> (binding onto the symlink target avoids bwrap’s inability to bind onto a symlink path whose target is absent inside the sandbox — spike-confirmed).

Parameters

tmpDir

string

Per-agent tmp dir holding the generated override files.

deps?

EgressOverrideDeps = {}

Injectable host probes (realpath + isSymlink).

Returns

string[]