OptionalcpusOptionaldefaultLanguage used when the model does not name one.
OptionalenvEnvironment variables for the code. Do not put secrets here: the model can print them.
OptionalexecReplaces the process spawner.
OptionalimageImage to run. Must contain the interpreters for the languages you allow. Also overridable per tool with template.
OptionallanguagesExtra or replacement languages, each as the argv that runs code read from stdin.
OptionalmemoryMemory limit, e.g. '512m'.
OptionalmountsDirectories to share with the container. Read-only unless you say otherwise.
Optionalnetwork'none' gives the code no network.
OptionalpidsMaximum number of processes.
OptionalreadMount the root filesystem read-only (/tmp and the workdir stay writable).
OptionalruntimeContainer CLI to use. 'auto' picks Podman, then Docker.
OptionalrunKill a single runCode after this long.
OptionaluserUser to run as, e.g. '1000:1000'. Defaults to the image's user.
OptionalworkdirWorking directory inside the container.
CPU limit, e.g.
'1'.