Fan-iX/dsh-apptainer-runner
dsh-apptainer-runner runs containerized builds and tests from a DeepSeek Harness session without leaving workspace-write: an apptainer_run tool spawns Apptainer/Singularity from the unsandboxed host process, mounts the session workspace at /work and keeps host home, /tmp and /etc out.
dsh-apptainer-runner runs containerized builds and tests from a DeepSeek Harness session without leaving workspace-write. The container is built with --containall --no-home --writable-tmpfs, one read-write bind for /work, and whatever else the permissions table grants, so an agent can build and test inside a container while the host filesystem stays out of reach. It is configured by profile YAML or the plugin's page in the Web GUI, and by default it asks for nothing (a one-shot approval prompt is opt-in via requireApproval).
Install
dsh plugin --profile web add github:Fan-iX/dsh-apptainer-runnerCopied verbatim from the README's GitHub install block; the README also documents a local link:../dsh-apptainer-runner form.
Compatibility
Targets a DeepSeek Harness session running under the workspace-write sandbox. Apptainer cannot start inside the DSH file sandbox (its starter needs an unprivileged user namespace and a mount-propagation call), so the plugin adds an apptainer_run tool that spawns Apptainer from the unsandboxed host process instead and builds the boundary from its own argv. It runs any Apptainer/Singularity image as apptainer exec ... /bin/sh -c <command>, mounts the session workspace read-write at /work, keeps host home, /tmp and /etc out (writes outside the bounds land in a throwaway overlay), adds host paths from a permission table read-only unless the table says otherwise, and asks first only when requireApproval: true. English README.
Details
- Repo: Fan-iX/dsh-apptainer-runner
- Category: Infrastructure & Deployment
- Stars: 0
- Version: GitHub repo Fan-iX/dsh-apptainer-runner (0★; no licence file is published in the repository); installed from GitHub.
- Last push: 2026-10-14
- First seen: 2026-10-14
Alternatives
1m01m0/deepseek-harness-desktop · AIcivilization/dsh-vps-manager · AlliotTech/deepseek-harness-docker