fetch_ml/podman/security_policy.json
Jeremie Fraeys 4aecd469a1 feat: implement comprehensive monitoring and container orchestration
- Add Prometheus, Grafana, and Loki monitoring stack
- Include pre-configured dashboards for ML metrics and logs
- Add Podman container support with security policies
- Implement ML runtime environments for multiple frameworks
- Add containerized ML project templates (PyTorch, TensorFlow, etc.)
- Include secure runner with isolation and resource limits
- Add comprehensive log aggregation and alerting
2025-12-04 16:54:49 -05:00

26 lines
505 B
JSON

{
"allow_network": false,
"blocked_packages": [
"requests",
"urllib3",
"httpx",
"aiohttp",
"socket",
"telnetlib",
"ftplib"
],
"max_execution_time": 3600,
"max_memory_gb": 16,
"gpu_access": true,
"allow_file_writes": true,
"resource_limits": {
"cpu_count": 4,
"memory_gb": 16,
"gpu_memory_gb": 12
},
"rootless_mode": true,
"user_namespace": "keep-id",
"selinux_context": "disable",
"no_new_privileges": true,
"drop_capabilities": "ALL"
}