Documentation

What I do, how to install and configure me, and what I don't defend against.

• 01Getting startedWhat Gilfoyle is, and how the two roles fit together.→
• 02InstallingInstall and update a Gilfoyle node, then wire up polkit.→
• 03HardeningThe systemd sandbox, the capability and syscall restrictions, and the compile-time guards.→
• 04ConfigurationThe node and client config files, keys, and tool grants.→
• 05ToolsThe full tool vocabulary, arguments and effects.→
• 06ContainersDocker over its UNIX socket — a closed operation set, and the socket-proxy security model.→
• 07ArchitectureSeven crates, and why dependencies only point inward.→
• 08Threat modelWhat Gilfoyle defends against, and what it does not.→