docker-sbx-kit/spec.yaml at main · kernel/docker-sbx-kit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
schemaVersion: "2"
kind: mixin
name: kernel
displayName: Kernel Browser
description: Cloud-hosted Chromium for AI agents with stealth, managed auth, and live session replay
sourceURL: https://github.com/kernel/docker-sbx-kit
licenses:
  - Apache-2.0

permissions:
  network:
    allow:
      # Kernel REST API and regional proxy-based CDP endpoints.
      - '**.onkernel.com'
      # Direct CDP endpoints returned by Kernel in some metros.
      - '*.kernel.sh'
      # Package registries used when agents add a Kernel SDK.
      - registry.npmjs.org
      - '*.npmjs.org'
      - pypi.org
      - files.pythonhosted.org
      # The Kernel CLI postinstall downloads its binary from GitHub Releases.
      - github.com
      - objects.githubusercontent.com
      - release-assets.githubusercontent.com

environment:
  variables:
    KERNEL_NO_UPDATE_CHECK: "1"

credentials:
  - service: kernel
    description: Kernel API key
    required: true
    apiKey:
      name: KERNEL_API_KEY
      proxyManaged: true
      inject:
        - domain: api.onkernel.com
          header: Authorization
          format: Bearer %s

agentInstructions:
  content: |
    The Kernel CLI is installed for cloud browser automation. Before using it,
    read /home/agent/.kernel/quickstart.md for current CLI and SDK examples.
    Delete browser sessions when work is complete.

setup:
  install:
    - command: npm install -g @onkernel/cli
      user: "0"
      description: Install the Kernel CLI