xeiaso.net
A virtual jailed shell environment for Go apps backed by a virtual filesystem.
xeiaso.net/blog/2026/dancing-mad-sandboxing/
shell
agents
terrible-idea
sandbox
1variable "ALPINE_VERSION" { default = "3.23" }
2variable "GO_VERSION" { default = "1.26" }
3
4group "default" {
5 targets = [
6 "sophia",
7 ]
8}
9
10target "sophia" {
11 args = {
12 ALPINE_VERSION = null
13 GO_VERSION = null
14 }
15 attest = [
16 "type=provenance,mode=max",
17 "type=sbom",
18 ]
19 context = "."
20 dockerfile = "./docker/sophia.Dockerfile"
21 platforms = [ "linux/amd64", "linux/arm64" ]
22 pull = true
23 tags = [
24 "atcr.io/xeiaso.net/kefka/sophia:latest"
25 ]
26}