skills.rest
nrwl
nrwlOFFICIAL
Explore all skills by this author →
Website𝕏@nxdevtoolsGitHub

setup-review-sandbox

Installs and verifies Docker, gVisor, and the nx-review-sandbox toolchain image for isolated PR reproduction.

29.3k|3.0k|Updated Aug 11, 2017
Search Tags:#docker#NX#gvisor#Setup#Code review#Sandbox#Isolation
One-click install
npx skills add https://github.com/nrwl/nx --skill setup-review-sandbox
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: setup-review-sandbox
Source: https://github.com/nrwl/nx/tree/main/.claude/skills/setup-review-sandbox
Command: npx skills add https://github.com/nrwl/nx --skill setup-review-sandbox

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Running untrusted pull request code safely requires a working isolation sandbox, and missing prerequisites (Docker, gVisor, container networking, the toolchain image) cause reproduce-issue preflights to fail. This Skill performs a one-time, idempotent setup and verification of every sandbox prerequisite on Linux or macOS.

Core Features & Use Cases

  • Prerequisite installation and verification: Checks Docker, the isolation runtime (gVisor runsc on Linux, Colima VM on macOS), and container networking, repairing only what is missing.
  • Toolchain image build: Builds the nx-review-sandbox image from the repo's mise.toml via tools/review-sandbox/build-image.sh, warming the pnpm store so reviews link packages instead of downloading them.
  • Networking diagnostics: Detects the veth kernel module class of breakage and guides fixes including modprobe and reboot after kernel updates.
  • Use Case: A reproduce-issue preflight reports the sandbox image MISSING; run this Skill to rebuild the image and smoke-test isolation before reviewing the PR.

Quick Start

Ask the assistant to set up the review sandbox and verify all prerequisites for reproducing PR issues in isolation.

Frequently Asked Questions about setup-review-sandbox

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a Docker sandbox for running untrusted PR code?▼

Run this Skill to install and verify Docker, the isolation runtime, networking, and the nx-review-sandbox image. It is idempotent, checks each prerequisite before acting, and hands any sudo commands to you to run in your terminal.

How do I install gVisor runsc as a Docker runtime on Linux?▼

Add the gVisor apt repository key and source, install runsc with apt-get, then run sudo runsc install to register it as a Docker runtime and restart Docker. The Skill provides the exact commands and verifies registration afterward.

Does the review sandbox work on macOS?▼

Yes. On macOS there is no runsc; the Docker VM itself is the sandbox. Install Colima and Docker via brew, start Colima, and the Skill confirms the VM is running before proceeding.

Why does Docker networking fail with veth operation not supported?▼

The veth kernel module is not loaded, often because a kernel update landed while the system was booted. Run sudo modprobe veth; if it fails with a BTF mismatch, reboot, then persist the module in /etc/modules-load.d/veth.conf.

When do I need to build the nx-review-sandbox toolchain image?▼

Build it only when reproducing against an unreleased PR's nx build (reproduce-verifier Level 2). Reproducing against a published nx version does not need it. Always rebuild unconditionally since Docker layer caching makes no-change builds nearly instant.

Related Skills

Explore More Software Engineering Skills→
marcocellomarcocello
10

pull-codex-config

Clone or fast-forward a local dot-codex checkout while preserving uncommitted changes.

Community
Intermediate
stickerdanielstickerdaniel
3.1k

2-repro-issue

Reproduce LinkedIn-MCP issues locally using the authenticated session.

Community
Advanced
neon-law-foundationneon-law-foundation

docker-cleanup

Remove unused Docker images, BuildKit cache, and detached volumes with storage reporting.

Official
Advanced
locdinh209locdinh209

e2b-sandbox

Execute code in secure E2B cloud sandboxes with ephemeral resources.

Community
Intermediate