besoeasy/airlock
GitHub: besoeasy/airlock
通过预置的一次性 Docker 容器模板，安全隔离并运行不受信任的代码，保护宿主环境中的敏感文件。
Stars: 75 | Forks: 53
# Airlock
**运行不受信任的代码，而无需信任它。**
选择一个 runtime。粘贴命令。退出后它就会消失。
## Node.js
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e npm_config_cache=/workspace/.npm-cache \
node:lts bash
```
## Bun
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e BUN_INSTALL_CACHE_DIR=/workspace/.bun-cache \
oven/bun:latest bash
```
## Deno
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e DENO_DIR=/workspace/.deno-cache \
--entrypoint /bin/bash \
denoland/deno:latest
```
## Python
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e PIP_CACHE_DIR=/workspace/.pip-cache \
-e HOME=/workspace \
python:3 bash
```
## Go
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e GOPATH=/workspace/.go -e HOME=/workspace \
golang:latest bash
```
## Rust
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e CARGO_HOME=/workspace/.cargo -e HOME=/workspace \
rust:latest bash
```
## Zig
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e ZIG_GLOBAL_CACHE_DIR=/workspace/.zig-cache \
--entrypoint /bin/sh \
euantorano/zig:latest
```
## Debian
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e HOME=/workspace \
debian:stable bash
```
## Alpine
```
docker run -it --rm --pids-limit 256 \
-v "${PWD}:/workspace" -w /workspace \
-e HOME=/workspace \
alpine:latest sh
```
如果需要，请将 `docker` 替换为 `podman`。
## 许可证
MIT标签：Cutter, Docker, MITM代理, NIDS, SOC Prime, 可视化界面, 安全防御评估, 容器化, 开发工具, 日志审计, 沙箱环境, 请求拦截, 逆向工具, 隔离运行