the universal sandbox runtime for agents and humans.
pocketenv.io
sandbox
openclaw
agent
claude-code
vercel-sandbox
deno-sandbox
cloudflare-sandbox
atproto
sprites
daytona
Add mount options to tigrisfs
Add '-o allow_other,default_permissions' to all tigrisfs invocations in
sandbox providers to allow FUSE to expose files to other users and honor
default permission handling
+5
-5
+1
-1
apps/cf-sandbox/src/providers/cloudflare/index.ts
+1
-1
apps/cf-sandbox/src/providers/cloudflare/index.ts
···
98
98
: env.VOLUME_BUCKET;
99
99
100
100
await this.sandbox.startProcess(
101
-
`tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path}`,
101
+
`tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path}`,
102
102
{
103
103
env: {
104
104
AWS_ACCESS_KEY_ID: env.R2_ACCESS_KEY_ID,
+1
-1
apps/sandbox/src/providers/daytona/mod.ts
+1
-1
apps/sandbox/src/providers/daytona/mod.ts
···
118
118
: env.VOLUME_BUCKET;
119
119
120
120
await this.sandbox.process.executeCommand(
121
-
`nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path} || sudo nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path} || true`,
121
+
`nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path} || sudo nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path} || true`,
122
122
undefined,
123
123
{
124
124
AWS_ACCESS_KEY_ID: env.R2_ACCESS_KEY_ID!,
+1
-1
apps/sandbox/src/providers/deno/mod.ts
+1
-1
apps/sandbox/src/providers/deno/mod.ts
···
131
131
await this.sandbox.spawn("sh", {
132
132
args: [
133
133
"-c",
134
-
`noup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path} || sudo nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path} || true`,
134
+
`noup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path} || sudo nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path} || true`,
135
135
],
136
136
stdin: "null",
137
137
stdout: "piped",
+1
-1
apps/sandbox/src/providers/sprites/mod.ts
+1
-1
apps/sandbox/src/providers/sprites/mod.ts
···
158
158
"bash",
159
159
[
160
160
"-c",
161
-
`nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path} || sudo nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path} || true`,
161
+
`nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path} || sudo nohup tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path} || true`,
162
162
],
163
163
{
164
164
env: {
+1
-1
apps/sandbox/src/providers/vercel/mod.ts
+1
-1
apps/sandbox/src/providers/vercel/mod.ts
···
113
113
cmd: "sh",
114
114
args: [
115
115
"-c",
116
-
`tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path} || sudo tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" ${bucketPath} ${path}`,
116
+
`tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path} || sudo tigrisfs --endpoint "https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com" -o allow_other,default_permissions ${bucketPath} ${path}`,
117
117
],
118
118
env: {
119
119
AWS_ACCESS_KEY_ID: env.R2_ACCESS_KEY_ID!,