External/pmg
1
0
Fork 0
mirror of https://github.com/safedep/pmg.git synced 2026-08-03 07:24:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

refactor: Remove concept of PM_CACHE

Browse Source
This commit is contained in:
Abhisek Datta
2026-01-08 13:42:05 +05:30
parent ed59693f88
commit 8492fcf93d
3 changed files with 27 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sandbox/apply.go
+1 -1
View File
@@ -15,7 +15,7 @@ import (
// Parameters: // Parameters:
// - ctx: Context for the sandbox execution // - ctx: Context for the sandbox execution
// - cmd: The exec.Cmd to be sandboxed (will be modified in place) // - cmd: The exec.Cmd to be sandboxed (will be modified in place)
// - pmName: Package manager name (e.g., "npm", "pip") // - pmName: Package manager name (e.g., "npm", "pip") used to determine the sandbox policy to apply
// - mode: Optional mode description for logging (e.g., "proxy mode", empty for default) // - mode: Optional mode description for logging (e.g., "proxy mode", empty for default)
// //
// Returns an error if sandbox setup fails, or nil if sandbox is not enabled/available. // Returns an error if sandbox setup fails, or nil if sandbox is not enabled/available.
sandbox/profiles/npm-restrictive.yml
+18 -3
View File
@@ -15,7 +15,12 @@ filesystem:
- ${HOME}/.yarnrc - ${HOME}/.yarnrc
- ${HOME}/.yarnrc.yml - ${HOME}/.yarnrc.yml
- ${HOME}/.bundle - ${HOME}/.bundle
- ${PM_CACHE}/** - ${HOME}/.npm/**
- ${HOME}/.pnpm-store/**
- ${HOME}/.cache/pnpm/**
- ${HOME}/.cache/yarn/**
- ${HOME}/.yarn/cache/**
- ${HOME}/.bun/install/cache/**
- /usr/local/** - /usr/local/**
- /Library/** - /Library/**
- /System/Library/** - /System/Library/**
@@ -23,7 +28,12 @@ filesystem:
allow_write: allow_write:
- ${CWD}/node_modules/** - ${CWD}/node_modules/**
- ${PM_CACHE}/** - ${HOME}/.npm/**
- ${HOME}/.pnpm-store/**
- ${HOME}/.cache/pnpm/**
- ${HOME}/.cache/yarn/**
- ${HOME}/.yarn/cache/**
- ${HOME}/.bun/install/cache/**
- ${CWD}/package-lock.json - ${CWD}/package-lock.json
- ${CWD}/yarn.lock - ${CWD}/yarn.lock
- ${CWD}/pnpm-lock.yaml - ${CWD}/pnpm-lock.yaml
@@ -61,7 +71,12 @@ process:
allow_exec: allow_exec:
- /usr/bin/node - /usr/bin/node
- /usr/local/bin/node - /usr/local/bin/node
- ${PM_CACHE}/** - ${HOME}/.npm/**
- ${HOME}/.pnpm-store/**
- ${HOME}/.cache/pnpm/**
- ${HOME}/.cache/yarn/**
- ${HOME}/.yarn/cache/**
- ${HOME}/.bun/install/cache/**
- /usr/bin/git - /usr/bin/git
- /usr/local/bin/git - /usr/local/bin/git
sandbox/profiles/pypi-restrictive.yml
+8 -2
View File
@@ -14,7 +14,10 @@ filesystem:
- ${HOME}/.config/pip/** - ${HOME}/.config/pip/**
- ${HOME}/.pip/** - ${HOME}/.pip/**
- ${HOME}/.poetry/** - ${HOME}/.poetry/**
- ${PM_CACHE}/** - ${HOME}/.cache/pip/**
- ${HOME}/.cache/pypoetry/**
- ${HOME}/.cache/poetry/**
- ${HOME}/.cache/uv/**
- /usr/local/** - /usr/local/**
- /Library/** - /Library/**
- /System/Library/** - /System/Library/**
@@ -22,7 +25,10 @@ filesystem:
allow_write: allow_write:
- ${CWD}/.venv/** - ${CWD}/.venv/**
- ${CWD}/venv/** - ${CWD}/venv/**
- ${PM_CACHE}/** - ${HOME}/.cache/pip/**
- ${HOME}/.cache/pypoetry/**
- ${HOME}/.cache/poetry/**
- ${HOME}/.cache/uv/**
- ${HOME}/.local/lib/python*/** - ${HOME}/.local/lib/python*/**
- ${TMPDIR}/** - ${TMPDIR}/**