Let a NIC-less sandbox reach out with no configuration - #57

Merged

CMGS merged 10 commits into

mainfrom

pr2-none-lane-egress

Jul 29, 2026

Commits on Jul 29, 2026

Let a node name the internal prefixes its egress proxy may reach

doge-rgb
authored and
CMGS
committed
Pin the fully-open form of the egress allow-list

doge-rgb
authored and
CMGS
committed
Bake the loopback proxy into the guest so an unconfigured curl reaches out

doge-rgb
authored and
CMGS
committed
silkd: forward the proxy variables into every exec

doge-rgb
authored and
CMGS
committed
review: gate proxy env on NIC absence; egress allow-list cleanups
CMGS
committed
review: lane-align inheriting children; snapshot proxy env once
CMGS
committed
docs: zero-config none-lane egress and the internal allow-list
CMGS
committed
review: cut the round's comments to the why
CMGS
committed
fix: proxy env on the Android flavor; lane override instead of set_var
CMGS
committed
review: snapshot SILKD_NET once; cut the round's comments
CMGS
committed