rattan

jmars/rattan
★ 0 stars Python Code/Dev Tools Updated 4d ago
Greenfield shell-sandbox MCP server: Arch Linux rootfs on bubblewrap with a cosmocc stage3 (landlock + seccomp) and overlayfs with discard-by-default commits.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "rattan": {
      "command": "uvx",
      "args": [
        "rattan"
      ]
    }
  }
}

Or install with pip: pip install rattan

README Excerpt

An MCP server that runs commands inside an Arch Linux sandbox: seccomp (pledge-style) + user namespaces + bubblewrap + Landlock + overlayfs. Agent changes are discarded unless you call `env_commit`. Implemented: host capability probe, a C `stage3` inner binary (no_new_privs → Landlock → seccomp), a bootstrapped Arch rootfs with pacman, content-addressed

Tools (4)

env_gcpacman_runshell_job_listshell_list