manage-mounts

To restrict Docker container file access, you can configure host directory mount points using an allowlist. This validates path existence and enforces read-only constraints for non-main agents to ensure secure isolation.

Mounting a local directory as read-only for AI agents is managed by adding the path to an allowlist file with read-only permissions. This prevents accidental data modification while allowing the agent to analyze files.

You can audit filesystem access paths for NanoClaw agent containers by reviewing the mount-allowlist.json configuration file. This allows you to verify which host directories are explicitly accessible and check their read-only enforcement status.

Yes, you can add or remove host directory mounts dynamically by updating the mount allowlist configuration. The Skill facilitates modifying these filesystem access paths within the designated JSON configuration file.

NanoClaw enforces read-only mounts specifically for non-main agents to prevent unauthorized data modification. Main agents can be granted standard read-write access to the explicitly defined host directory mount points.

Using a mount allowlist mitigates the security risk of granting AI agents unrestricted host filesystem access. It provides granular access control by explicitly defining accessible directories and enforcing read-only constraints where necessary.