Skip to content
Coder Docs
Run AI Coding Agents in CoderAgent Firewall

landjail Jail Type

Learn how Agent Firewall's landjail jail type isolates agents using Landlock v4.

On this page

Note

Agent Firewall is part of AI Governance, which is included with a Premium license.

landjail is Agent Firewall's alternative jail type that uses Landlock V4 for network isolation.

Overview

Agent Firewall uses Landlock V4 to enforce network restrictions:

  • All bind syscalls are forbidden
  • All connect syscalls are forbidden except to the port that is used by http proxy

This provides network isolation without requiring network namespace capabilities or special Docker permissions.

Edit on GitHub