Chris impaler

Securing Network Access from Containers with a Transparent Proxy

This pattern uses iptables to redirect outbound HTTP/HTTPS traffic through a transparent MITM proxy such as kcosr/acl-proxy (WIP prototype), allowing you to filter requests by URL, inspect content, log traffic, enforce allow/deny lists, or even inject credentials you don't want to deploy in the container.

Note: This approach can be used without containers if you trust that all commands invoked by the agent CLI will respect HTTP_PROXY environment variables.

How It Works

Container starts with temporary sudo access to iptables
Entrypoint script configures iptables to redirect traffic to the proxy

Pure ESM package

The package that linked you here is now pure ESM. It cannot be require()'d from CommonJS.

This means you have the following choices:

Use ESM yourself. (preferred)
Use import foo from 'foo' instead of const foo = require('foo') to import the package. You also need to put "type": "module" in your package.json and more. Follow the below guide.
If the package is used in an async context, you could use await import(…) from CommonJS instead of require(…).
Stay on the existing version of the package until you can move to ESM.

	import { Page } from "puppeteer";
	import sharp from "sharp";

	// Max texture size of the software GL backand of chronium. (16384px or 4096px)
	// https://issues.chromium.org/issues/41347676
	export const MAX_SIZE_PX = 16384;

	const takeFullPageScreenshot = async (page: Page) => {
	const pageHeight = await getPageHeight(page);
	const deviceScaleFactor = page.viewport()?.deviceScaleFactor ?? 1;

	import { Meta } from "@storybook/react/types-6-0";
	import { PostList } from "../PostList";
	import { getTRPCMock } from "../getTrpcMock";

	export default {
	title: "Components/PostList",
	component: PostList,
	} as Meta;

	export const PostListPage = () => {

	function Share-PartialScreen {
	[CmdletBinding(DefaultParameterSetName='Preset')]
	Param(
	[Parameter(Mandatory = $false)]
	[string] $preset,
	[Parameter(Mandatory = $false)]
	[int] $Width = 1920,
	[Parameter(Mandatory = $false)]
	[int] $Height = 1080
	)

	####### Shortcut Hotkeys #############
	# open terminal
	alt - return : open -n /Applications/Alacritty.app

	# restart Yabi, SpaceBar, and SKHD
	alt + shift - r : \
	launchctl kickstart -k "gui/${UID}/homebrew.mxcl.yabai"; \
	skhd --reload

-#!/bin/bash
-set -eo pipefail
-echo "Deleting existing hosting releases"
-SITE=$1
-echo "Site: $SITE"
-HEADER_AUTH="Authorization: Bearer "$(gcloud auth application-default print-access-token)"";

	'use strict';

	const {
	AsyncResource,
	executionAsyncId,
	createHook,
	} = require('async_hooks');
	const EventEmitter = require('events');
	const util = require('util');

	import path from 'path';
	import fs from 'fs';
	import initStoryshots from '@storybook/addon-storyshots';
	import { imageSnapshot } from './storyshots-puppeteer';

	import devices from 'puppeteer/DeviceDescriptors';

	// Store the screenshots outside the source folder to prevent jest from 'watching' them.
	// Since they're outside the src directory we nav to them relatively
	const ROOTDIR = path.join(__dirname, '../../../');

	const Promise = require('bluebird');
	const path = require('path');
	const fs = require('fs-extra');
	const stat = Promise.promisify(fs.stat);
	const glob = Promise.promisify(require('glob'));
	const tarstream = require('tar-stream');
	const zlib = require('zlib');
	const express = require('express');

	function targzGlobStream(globString, options) {