feat(mxc): add Windows host proxy for MXC sandbox network egress - #3163

Open

araza008 wants to merge 31 commits into

NVIDIA:mainfrom

araza008:akberr/host_connect_proxy

Commits on Aug 28, 2026

feat(mxc): ETW->OCSF audit consumer + Windows OCSF JSONL parity (cp6 P1)

jamieknvidia
authored and
araza008
committed
1ebc297
feat(mxc): map remaining Sandboxing ETW events to OCSF

jamieknvidia
authored and
araza008
committed
75f667a
fix(mxc): seed ETW attribution under registry lock + Device tests

jamieknvidia
authored and
araza008
committed
8b9c423
fix(mxc-etw): buffer+replay racing events and harden attribution keys

jamieknvidia
authored and
araza008
committed
9467b46
docs(mxc-etw): note cmd_line is captured raw with no privacy filtering

jamieknvidia
authored and
araza008
committed
5efe3cd
fix(mxc-etw): open ETW trace on caller thread so start_session reports real status

jamieknvidia
authored and
araza008
committed
65bb41f
fix(mxc-etw): guard pending-event replay against PID recycling

jamieknvidia
authored and
araza008
committed
b28465c
fix(mxc-etw): surface unexpected ProcessTrace termination (review #4)

jamieknvidia
authored and
araza008
committed
661270a
feat(mxc-ocsf): add ETW->OCSF audit-trail example kit; fix proxy-configured message

jamieknvidia
authored and
araza008
committed
26fd113
feat(mxc-ocsf): clearer audit report + client-safe run-ocsf-audit.ps1

jamieknvidia
authored and
araza008
committed
3e46489

Commits on Aug 31, 2026

Implement Windows host proxy integration and update dependencies for OpenShell
araza008
committed
82575c5
Update README and gateway config to clarify egress proxy address handling and allocation
araza008
committed
a6b2f34
Refactor ProxyIdentityMode to return Result for static_binary and add tests for binary path and SHA256 hash
araza008
committed
56cf1e8
Enhance platform_hosts_path for Windows to use SystemRoot and improve error handling for hosts file reading
araza008
committed
9b0e989
Refactor FileFingerprint to use Option for mtime and ctime, simplifying metadata handling
araza008
committed
582364a
Add conditional compilation for Windows host module
araza008
committed
8e6561b
add unit tests for OPA policy evaluation and identity handling
araza008
committed
6c58abb
remove openshell-supervisor-network from unsupported driver package test exclusion list
araza008
committed
1984815
feat(mxc): enable host proxy TLS state generation
araza008
committed
2938361
fix(docs): remove outdated notes on governed egress from docs
araza008
committed
9669278
fix(tests): update TLS environment variable paths to use temporary directory
araza008
committed
938bb66
fix(examples): make run-mxc-e2e harness correct and orphan-free

jamieknvidia
authored and
araza008
committed
e891d4d
fix(e2e): probe timeout is milliseconds (10ms->30000ms)

jamieknvidia
authored and
araza008
committed
df7852d
fix(mxc): use native paths in real runtime probes

shailendra-nv
authored and
araza008
committed
122b77c
fix(mxc): make processcontainer work with mxc-latest-released wxc-exec

pkhodade-NV
authored and
araza008
committed
5d5956e

Commits on Sep 1, 2026

fix(e2e): address CodeRabbit review on run-mxc-e2e.ps1 (MR !46)

jamieknvidia
authored and
araza008
committed
7be6327
feat(mxc-e2e): collect run-mxc-e2e output into a results bundle

pkhodade-NV
authored and
araza008
committed
d1ac66b
fix(mxc-e2e): address CodeRabbit review on run-mxc-e2e.ps1

pkhodade-NV
authored and
araza008
committed
296761e
fix(examples): pass gateway config via OPENSHELL_GATEWAY_CONFIG for spaced paths

jamieknvidia
authored and
araza008
committed
555e872

Commits on Sep 2, 2026

fix(compute): [regression 662dee68] MXC sandbox stuck in Provisioning forever

pkhodade-NV
authored and
araza008
committed
81adeec

Commits on Sep 3, 2026

fix(run-mxc-e2e): improve scoring logic and enhance command execution handling
araza008
committed
99c9f74