binpash/try
Try
Try 是一个用于管理临时 Shell 环境并在隔离沙箱中运行命令的工具。它利用 OverlayFS 和 Linux 命名空间来防止进程修改宿主系统，既可作为命令沙箱，也可作为文件系统变更审计工具。
该项目允许用户在临时层中捕获文件修改，并在决定应用或丢弃这些变更之前进行检查。它支持审计添加和修改操作，随后将验证后的变更合并回宿主文件系统的工作流。
该工具提供了交互式沙箱 Shell、自定义沙箱目录管理以及将多个覆盖目录合并为单一分层环境的功能。它还包含用于命令和标志自动补全的 Shell 脚本。
Features
- Overlay Filesystems - Utilizes OverlayFS to redirect filesystem writes to a temporary directory while keeping system files read-only.
- Overlay-Based Execution - Provides a sandbox that uses Linux namespaces and OverlayFS to execute commands without altering the host system.
- Workspace Change Summaries - Provides a summary of files modified or created within the sandbox relative to the base filesystem.
- Overlay-to-Host Synchronizations - Allows users to commit verified sandbox modifications back to the live host filesystem.
- Sandboxed Shell Executions - Opens an interactive shell session within a temporary overlay environment for manual testing.
- Environment-Aware Command Executions - Runs risky terminal commands within an isolated environment to prevent accidental host damage.
- Sandbox Change Commitments - Prompts the user to apply or dispose of filesystem changes modified during an isolated execution.
- Overlay Filesystems - Uses overlay filesystems to capture and review modifications without altering permanent storage.
- Change Commitment - Allows users to verify filesystem modifications in a sandbox before merging them back into the live system.
- Ephemeral Shell Environments - Creates temporary shell sessions that capture all file modifications without affecting the host.
- Interactive Sandbox Shells - Provides an interactive shell for manually testing scripts and software in isolation.
- Namespace-Based Isolation - Uses Linux kernel namespaces to isolate processes from the host system's global state.
- OverlayFS Command Sandboxes - Runs commands in an isolated environment using OverlayFS to preview and audit filesystem changes.
- Copy-on-Write Root Layering - Implements a writable layer over read-only system images to ensure modifications are private and ephemeral.
- Change Auditing - Generates a detailed summary of all files added or modified within a sandbox directory relative to the host.
- Sandbox Change Reviews - Enables a workflow for reviewing all modified files before merging them back to the host.
- Filesystem Change Auditors - Summarizes and inspects files added or modified during an isolated command execution.
- Layered Overlay Merges - Supports stacking multiple sandbox directories into a single layered environment.
- System Configuration Sandboxing - Allows for the verification of system setting changes before applying them to the live system.
- Isolated Layer Inspections - Provides a way to browse overlay directories to identify files modified or created during execution.
- Layer Merging - Enables combining several sandbox directories into a single layered environment to aggregate changes across different sessions.
- Overlay Directory Management - Allows the creation and specification of custom overlay directories to persist isolated environments.
