- Add MLflow, WandB, Streamlit, Dash, Panel, Bokeh to environment.yml - Update security policy to allow network access for ML tools - Modify secure_runner.py to check tool permissions - Add test script and usage guide - Enable localhost network access for dashboard tools
39 lines
698 B
JSON
39 lines
698 B
JSON
{
|
|
"allow_network": true,
|
|
"allowed_network_tools": [
|
|
"mlflow",
|
|
"wandb",
|
|
"streamlit",
|
|
"dash",
|
|
"panel",
|
|
"bokeh"
|
|
],
|
|
"network_whitelist": [
|
|
"localhost",
|
|
"127.0.0.1",
|
|
"0.0.0.0"
|
|
],
|
|
"blocked_packages": [
|
|
"requests",
|
|
"urllib3",
|
|
"httpx",
|
|
"aiohttp",
|
|
"socket",
|
|
"telnetlib",
|
|
"ftplib"
|
|
],
|
|
"max_execution_time": 3600,
|
|
"max_memory_gb": 16,
|
|
"gpu_access": true,
|
|
"allow_file_writes": true,
|
|
"resource_limits": {
|
|
"cpu_count": 4,
|
|
"memory_gb": 16,
|
|
"gpu_memory_gb": 12
|
|
},
|
|
"rootless_mode": true,
|
|
"user_namespace": "keep-id",
|
|
"selinux_context": "disable",
|
|
"no_new_privileges": true,
|
|
"drop_capabilities": "ALL"
|
|
}
|