sbx/packages-through-sfw:latest

schemaVersion: "3"
displayName: Packages through SFW
description: Installs Socket Firewall Free and routes npm, pip, pip3, and python3 -m pip commands through sfw when resolved through PATH.
kind: mixin
provides:
    - [email protected]
capabilities:
    - type: com.docker.sandbox/network-policy@1
      config:
        install:
            allow:
                - deb.debian.org
                - dhi.io
                - archive.ubuntu.com
                - security.ubuntu.com
                - ports.ubuntu.com
                - download.docker.com
                - cli.github.com
        runtime:
            allow:
                - api.socket.dev
                - socket.dev
                - registry.npmjs.org
                - pypi.org
                - files.pythonhosted.org
    - type: com.docker.sandbox/lifecycle@1
      config:
        install:
            - command: apt-get update && apt-get install -y --no-install-recommends ca-certificates curl nodejs-24 npm python3-pip && rm -rf /var/lib/apt/lists/*
              description: Install package-manager prerequisites
              user: "0"
            - command: |
                set -euo pipefail
                grep -qF '/etc/profile.d/packages-through-sfw.sh' ~/.bashrc 2>/dev/null || \
                  printf '\n# Packages through SFW wrappers (added by sbx-kits-contrib/packages-through-sfw)\n[ -f /etc/profile.d/packages-through-sfw.sh ] && . /etc/profile.d/packages-through-sfw.sh\n' >> ~/.bashrc
              description: Source sfw wrappers from ~/.bashrc for interactive Bash shells
              user: "1000"