nanos: add sandbox klib config example

rinor · Jul 1, 2023 · c794667 · c794667
1 parent 93d3f55
commit c794667
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -6,8 +6,23 @@ Can be used with [Nanos](https://github.com/nanovms/nanos) `sandbox` _klib_ - ht
 
 Can be safely used on other non-OpenBSD operating systems, where the syscalls are `noop`.
 
+## Nanos ops config
+
+```json
+{
+  "Klibs": [
+    "sandbox"
+  ],
+  "ManifestPassthrough": {
+    "sandbox": {
+      "pledge": {},
+      "unveil": {}
+    }
+  }
+}
+```
 
-## pledge
+### pledge
 
 ```go
 package main
@@ -53,7 +68,7 @@ func main() {
 }
 ```
 
-## unveil
+### unveil
 
 ```go
 package main

diff --git a/sandbox_linux.go b/sandbox_linux.go
@@ -16,7 +16,9 @@ const (
 	nanos_sysname = "Nanos"
 )
 
-var noop bool = true
+var (
+	noop = true
+)
 
 func init() {
 	var uts syscall.Utsname