mxc
Policy-driven, layered isolation and containment
Configure the LXC backend in Microsoft MXC by setting containment to lxc and defining your container's distribution and release. Get the complete setup guide here.
How MXC Recovers Orphaned DACL State: Crash-Safe ACL RestorationLearn how MXC recovers orphaned DACL state by scanning crash-safe JSON files, verifying process liveness, and reverting ACLs for terminated processes ensuring secure sandbox operations.
MXC Schema Version Differences: Comparing 0.5.0-alpha, 0.6.0-alpha, and 0.7.0-devExplore MXC schema version differences from 0.5.0-alpha to 0.7.0-dev. Understand changes in process abstraction, network defaults, and experimental backend support.
How the Bubblewrap Backend Uses User Namespaces for Linux SandboxingDiscover how Bubblewrap creates unprivileged Linux sandboxes using user namespaces for isolated user, PID, IPC, and UTS environments without root access. Learn more about the microsoft/mxc repository.
How to Use MXC CLI Command Override: A Complete Guide to Overriding Policy CommandsLearn how to use MXC CLI command override with wxc-exec. Easily replace policy commands by providing arguments after the -- separator. Master MXC command overrides today.
MXC Network Allow/Block List Filtering for Outbound Connections: A Complete GuideMaster MXC network allow/block list filtering for outbound connections. This guide details how the MXC SDK utilizes the SandboxPolicy.network object to enforce rules across Windows Linux and macOS.
How to Configure UI Policies in MXC: A Complete GuideConfigure MXC UI policies for granular control over window creation, clipboard access, and input injection using the ui block in SandboxPolicy. Learn to manage these settings effectively.
How the `--probe` Flag Enables Platform Capability Detection in Microsoft MXCDiscover how the --probe flag in Microsoft MXC detects platform capabilities. Learn how it emits a JSON doc detailing sandbox features, kernel version, and job limits for efficient system analysis.
NanVix MicroVM vs Hyperlight Backends: Isolation Strategies in Microsoft MXCExplore NanVix MicroVM vs Hyperlight backends in Microsoft MXC. Understand isolation strategies and discover how NanVix uses Hypervisor Platform and Hyperlight runs in-process Unikernel for faster startup.
How MXC Handles Ctrl-C Signals for Graceful Container ShutdownDiscover how MXC gracefully handles Ctrl-C signals. Learn about its watchdog thread, signal handling, and iptables cleanup for safe container shutdowns.
MXC macOS GUI Access Options with Seatbelt Backend: Configuration GuideConfigure MXC macOS GUI access with the Seatbelt backend. Learn how to enable GUI access by setting experimental.seatbelt.guiAccess to true for enhanced sandbox profiles.
How the Seatbelt Backend Generates TinyScheme Profiles in MXCDiscover how the Seatbelt backend generates TinyScheme profiles dynamically using the build_profile function in MXC. Learn about layered rules and Apple's sandbox_init API.
Have a question about this repo?
These articles cover the highlights, but your codebase questions are specific. Give your agent direct access to the source. Share this with your agent to get started:
curl -s "https://instagit.com/install.md" 
Maintain an open-source project? Get it listed too →