cyberneticlibrary

Manage container directory permissions

manage-mountsskillsetup L229,740
nanocoai/nanoclaw
What it does

Configure container directory access via mount allowlist

Best for

When agent containers need scoped access to host directories with read-only enforcement per isolation level.

Inputs
  • · host directory paths
  • · read-only flag per path
Outputs
  • · mount-allowlist.json
  • · service restart command
Requires
  • · mount-allowlist.json config
  • · launchctl/systemctl
Preconditions

NanoClaw service installed, ~/.config/nanoclaw/ writable

Failure modes

Service not restarted after config write means containers see stale mounts; must explicitly restart

Trust signals
  • · nonMainReadOnly per-entry control
  • · blocked patterns list
  • · service restart verification step