How michiko-hagakure/bash-scripts works
This repository provides two platform-specific sandbox launchers: a Linux unshare/chroot environment and a Windows Docker container. Users run the corresponding script to enter an isolated shell or container; the documented protections cover filesystem, network, and process isolation, with cleanup on Linux and elevated-privilege enforcement on Windows. The README documents these relationships, but no source excerpts were available to verify implementation details.
Main entry points: launch_sandbox.sh Linux launcher · launch_sandbox.ps1 Windows launcher
Components 12
Linux Sandbox
- Linux launcher
launch_sandbox.sh - Namespace isolation
launch_sandbox.sh - Chroot filesystem
launch_sandbox.sh - Sandbox shell
launch_sandbox.sh - Process cleanup
launch_sandbox.sh
Windows Sandbox
- Windows launcher
launch_sandbox.ps1 - Admin enforcement
launch_sandbox.ps1 - Docker container
launch_sandbox.ps1
Other components
- User
- unshare
- chroot
- Docker
Connections 11
- User → Linux launcher: runs
- Linux launcher → unshare: uses
- Linux launcher → chroot: uses
- Linux launcher → Namespace isolation: configures
- Linux launcher → Chroot filesystem: restricts
- Linux launcher → Sandbox shell: starts
- Linux launcher → Process cleanup: cleans up
- User → Windows launcher: runs
- Windows launcher → Admin enforcement: checks privileges
- Windows launcher → Docker: uses
- Windows launcher → Docker container: starts