Skip to content

quick-start.md

Latest commit

 

History

History
116 lines (82 loc) · 2.9 KB

quick-start.md

File metadata and controls

116 lines (82 loc) · 2.9 KB

Quick Start Guide

Get a sandboxed Windows shell in 10 seconds.

Your First Container

psroot shell

That's it. You're inside an isolated container:

╔══════════════════════════════════════════════════╗
║  Psroot Interactive Shell                        ║
║  Container: psroot-a1b2c3d4                      ║
║  Network: None      Sandbox: AppContainer        ║
║  Isolation: Standard (AppContainer + Env)        ║
║  Type 'exit' to leave the sandbox                ║
╚══════════════════════════════════════════════════╝

psroot>

What's different inside?

psroot> echo %USERNAME%
ContainerUser

psroot> echo %COMPUTERNAME%
PSROOT

psroot> echo %PATH%
C:\...\rootfs\Windows\System32

psroot> whoami
psroot-a1b2c3d4\containeruser

Your real username, paths, and environment are hidden. The container can only see its own rootfs.

Try accessing host files

psroot> dir C:\Users
Access is denied.

psroot> dir C:\Program Files
Access is denied.

AppContainer blocks access at the kernel level — your files are invisible, not just hidden.

Exit

psroot> exit
Shell exited (code 0). Cleaning up...
Container psroot-a1b2c3d4 removed.

The container and its rootfs are automatically cleaned up.

Add Tools

# Node.js (copies from your host installation)
psroot shell --tool node

# Rust CLI tools (pstop, psmux, etc. from ~/.cargo/bin)
psroot shell --tool rust-bin

# Multiple tools
psroot shell --tool node --tool rust-bin

Enable Networking

# No network (default — most secure)
psroot shell

# Outbound only (can reach internet, can't listen on ports)
psroot shell --network outbound

# Full network + loopback (for running servers)
psroot shell --network full

Set Resource Limits

# 512 MB RAM, 50% CPU, max 50 processes
psroot shell --memory 512M --cpu 5000 --max-procs 50

Run a One-Off Command

# Run a command and exit (no interactive shell)
psroot run -- cmd /c "echo Hello from the sandbox"

# Run Node.js script in a container
psroot run --tool node -- node -e "console.log(process.env.USERNAME)"

Next Steps