[ { "Id": "13d607fb7f029ef9be6fc7d7996253640639f9396f3166cddb1c50cbf52a95bb", "Created": "2026-08-17T11:38:28.932321725+03:00", "Path": "/usr/local/bin/sandbox-egress-init", "Args": [ "/bin/sh", "-c", "[ -n \"$HOME\" ] || { echo 'agent_cred: HOME unset in container' >&2; exit 10; }; agent_cred_target=\"$HOME/.codex/auth.json\"; agent_cred_dir=$(dirname \"$agent_cred_target\") || { echo 'agent_cred: cannot resolve credential directory' >&2; exit 10; }; trap 'rm -f \"$agent_cred_target\"' EXIT HUP INT TERM; mkdir -p \"$agent_cred_dir\" || { echo 'agent_cred: cannot create credential directory' >&2; exit 10; }; [ -r '/sandbox-secrets/codex/auth.json' ] || { echo 'agent_cred: staging mount missing: /sandbox-secrets/codex/auth.json' >&2; exit 10; }; cp '/sandbox-secrets/codex/auth.json' \"$agent_cred_target\" || { echo 'agent_cred: credential copy failed' >&2; exit 10; }; chmod 600 \"$agent_cred_target\" || { echo 'agent_cred: cannot restrict credential mode' >&2; exit 10; }; \"$@\"", "sh", "codex", "exec", "--sandbox", "danger-full-access", "--skip-git-repo-check", "-C", "/sandbox/workspaces/staff-tiers-e3f97c32eed5", "-m", "gpt-5.6-terra", "-c", "model_reasoning_effort=medium", "Repo: press-zone-core. Your working directory is a fresh git worktree on branch wt/staff-tiers, off main (which now includes staff-ui-foundation, staff-accounts-detail, staff-jobs, staff-payments, and staff-analytics — apps/web/src/staff/router.tsx exists with a route table, apps/api/src/routes/staff.ts exports STAFF_CAPABILITY and requireStaff). Do NOT commit — leave changes as uncommitted working-tree diffs.\n\nImplement the plan at docs/plans/2026-08-17-staff-tiers.md exactly as written — read it in full first, along with apps/api/src/schema.ts (the subscriptionPackages table you're extending, and pressZoneInitSql), apps/api/src/lib/stripe.ts (the Stripe client to create Prices with), apps/api/src/routes/staff.ts (requireStaff/STAFF_CAPABILITY/audit conventions), and apps/web/src/staff/router.tsx (to replace the /staff/tiers placeholder).\n\nnode_modules are already installed for @press-zone/core-api and @press-zone/core-web in this worktree — do not reinstall from scratch.\n\nAcceptance is defined in the plan doc's own Acceptance section. Run those exact commands yourself in this worktree and report the REAL output — do not claim a pass you did not observe. If a command fails, iterate until it passes or report exactly why it doesn't, with the real error.\n\nReport back: files changed, a summary of the schema change + routes/UI you implemented, and the full real test output for both the API and web acceptance commands." ], "State": { "OciVersion": "1.2.1", "Status": "exited", "Running": false, "Paused": false, "Restarting": false, "OOMKilled": false, "Dead": false, "Pid": 0, "ExitCode": 0, "Error": "", "StartedAt": "2026-08-17T11:38:29.081291065+03:00", "FinishedAt": "2026-08-17T11:44:37.037759473+03:00", "CheckpointedAt": "0001-01-01T00:00:00Z", "RestoredAt": "0001-01-01T00:00:00Z" }, "Image": "9dda5ff7a42e756b4a9b1c8e3acba97f3846e3d72b5c62276aa0e95eba79b721", "ImageDigest": "sha256:0beeb39d90e9c5f25b646fc9a9e36ff9878d02dd15ac6c4efbec2d62358ffb52", "ImageName": "localhost/overdeck-agent-sandbox:ee552bd73dc0", "Rootfs": "", "Pod": "", "ResolvConfPath": "/run/user/1000/containers/overlay-containers/13d607fb7f029ef9be6fc7d7996253640639f9396f3166cddb1c50cbf52a95bb/userdata/resolv.conf", "HostnamePath": "/run/user/1000/containers/overlay-containers/13d607fb7f029ef9be6fc7d7996253640639f9396f3166cddb1c50cbf52a95bb/userdata/hostname", "HostsPath": "/run/user/1000/containers/overlay-containers/13d607fb7f029ef9be6fc7d7996253640639f9396f3166cddb1c50cbf52a95bb/userdata/hosts", "StaticDir": "/home/user/.local/share/containers/storage/overlay-containers/13d607fb7f029ef9be6fc7d7996253640639f9396f3166cddb1c50cbf52a95bb/userdata", "OCIConfigPath": "/home/user/.local/share/containers/storage/overlay-containers/13d607fb7f029ef9be6fc7d7996253640639f9396f3166cddb1c50cbf52a95bb/userdata/config.json", "OCIRuntime": "crun", "ConmonPidFile": "/run/user/1000/containers/overlay-containers/13d607fb7f029ef9be6fc7d7996253640639f9396f3166cddb1c50cbf52a95bb/userdata/conmon.pid", "PidFile": "/run/user/1000/containers/overlay-containers/13d607fb7f029ef9be6fc7d7996253640639f9396f3166cddb1c50cbf52a95bb/userdata/pidfile", "Name": "overdeck-sandbox-staff-tiers-e3f97c32eed5", "RestartCount": 0, "Driver": "overlay", "MountLabel": "", "ProcessLabel": "", "AppArmorProfile": "", "EffectiveCaps": [ "CAP_NET_ADMIN", "CAP_SETGID", "CAP_SETPCAP", "CAP_SETUID" ], "BoundingCaps": [ "CAP_NET_ADMIN", "CAP_SETGID", "CAP_SETPCAP", "CAP_SETUID" ], "ExecIDs": [], "GraphDriver": { "Name": "overlay", "Data": { "LowerDir": "/home/user/.local/share/containers/storage/overlay/7d3543799be0f8ae3b54444008013f2c4f99049efe651f2c9963da34d2890db5/diff:/home/user/.local/share/containers/storage/overlay/a7f8207c1c17f85b6d1a6d9a0766274a51160107bc0700f61fab63b9b824717a/diff:/home/user/.local/share/containers/storage/overlay/8d785be9f1de89a585f84390b0f25610e9893285f260f79e3bd54206c5571c9c/diff:/home/user/.local/share/containers/storage/overlay/72ee8a7ba886839cb8f23758877178afa9b95af2afbcc87a4e12c3ec8afb78cb/diff:/home/user/.local/share/containers/storage/overlay/a30f7015bd822396e7a81decfe4256459781df04f689d804a02c7966cf8dd56e/diff:/home/user/.local/share/containers/storage/overlay/edf0d849d281366e55d2b5be7f42680d6ef2cb4036fbece1c3349551877aeeac/diff:/home/user/.local/share/containers/storage/overlay/9243eb0eb33011b0f5a60b42ccd83fbb9390fa2584de1ab131f905a56d31d75e/diff:/home/user/.local/share/containers/storage/overlay/579e9aac2f3d204da4c0c58974388b4bd7705a5b3a44f951ae43a4f7f3573656/diff:/home/user/.local/share/containers/storage/overlay/e119e4079e0288729816da5be687e9928cadd633f7961c0145a61d88728ba723/diff:/home/user/.local/share/containers/storage/overlay/504fdbaebe3b93106fdcb9e5a77865b300cd37b11876aa25f1fab77e656fba84/diff:/home/user/.local/share/containers/storage/overlay/4ff44659d92f8df5d5ff5a0007dca67030dd39863cec2fdc3f752285daf80340/diff:/home/user/.local/share/containers/storage/overlay/1e6ade7e7d295a59dac5602fa1147fd96882d4d14ac90ea1a049c3d691a6d7cd/diff:/home/user/.local/share/containers/storage/overlay/bdc384d929e6e59b40e7baa3c5188a6188e87fd4da0faef2d103b9da7fa48340/diff:/home/user/.local/share/containers/storage/overlay/ae2de9b84cb555e7b7636bb13e89ba2c3057dddc5bd965da788dd1d2a47b0912/diff:/home/user/.local/share/containers/storage/overlay/33abc4ad76e2099a56041549ac0643312ed831660ea7f28e07f05bc228e12f78/diff", "UpperDir": "/home/user/.local/share/containers/storage/overlay/db02eceed65a3311bd95cfbf9dbb28ca542fba052d7c3b08a3a47e55341a4e54/diff", "WorkDir": "/home/user/.local/share/containers/storage/overlay/db02eceed65a3311bd95cfbf9dbb28ca542fba052d7c3b08a3a47e55341a4e54/work" } }, "Mounts": [ { "Type": "bind", "Source": "/home/user/.local/share/overdeck-sandbox/secrets/e2e_known_hosts", "Destination": "/sandbox-secrets/e2e_known_hosts", "Driver": "", "Mode": "", "Options": [ "rbind" ], "RW": false, "Propagation": "rprivate" }, { "Type": "bind", "Source": "/home/user/.local/share/overdeck-sandbox/runs/staff-tiers-e3f97c32eed5/egress-rules.nft", "Destination": "/run/overdeck-egress/rules.nft", "Driver": "", "Mode": "", "Options": [ "rbind" ], "RW": false, "Propagation": "rprivate" }, { "Type": "bind", "Source": "/var/lib/buildbox/cdx-offload/repos/press-zone-core-6216e86359a3.git", "Destination": "/home/user/cdx-offload/repos/press-zone-core-6216e86359a3.git", "Driver": "", "Mode": "", "Options": [ "rbind" ], "RW": true, "Propagation": "rprivate" }, { "Type": "bind", "Source": "/home/user/.local/state/overdeck-sandbox/creds/1786955898736480020-1366050-30436/codex/auth.json", "Destination": "/sandbox-secrets/codex/auth.json", "Driver": "", "Mode": "", "Options": [ "rbind" ], "RW": false, "Propagation": "rprivate" }, { "Type": "bind", "Source": "/home/user/sandbox", "Destination": "/sandbox", "Driver": "", "Mode": "", "Options": [ "rbind" ], "RW": true, "Propagation": "rprivate" }, { "Type": "bind", "Source": "/home/user/.local/share/overdeck-sandbox/secrets/e2e_key", "Destination": "/sandbox-secrets/e2e_key", "Driver": "", "Mode": "", "Options": [ "rbind" ], "RW": false, "Propagation": "rprivate" } ], "Dependencies": [], "NetworkSettings": { "EndpointID": "", "Gateway": "", "IPAddress": "", "IPPrefixLen": 0, "IPv6Gateway": "", "GlobalIPv6Address": "", "GlobalIPv6PrefixLen": 0, "MacAddress": "", "Bridge": "", "SandboxID": "", "HairpinMode": false, "LinkLocalIPv6Address": "", "LinkLocalIPv6PrefixLen": 0, "Ports": {}, "SandboxKey": "", "Networks": { "pasta": { "EndpointID": "", "Gateway": "", "IPAddress": "", "IPPrefixLen": 0, "IPv6Gateway": "", "GlobalIPv6Address": "", "GlobalIPv6PrefixLen": 0, "MacAddress": "", "NetworkID": "pasta", "DriverOpts": null, "IPAMConfig": null, "Links": null } } }, "Namespace": "", "IsInfra": false, "IsService": false, "KubeExitCodePropagation": "invalid", "lockNumber": 2, "Config": { "Hostname": "sandbox-staff-tiers-e3f97c32eed5", "Domainname": "", "User": "agent", "AttachStdin": false, "AttachStdout": false, "AttachStderr": false, "Tty": false, "OpenStdin": true, "StdinOnce": false, "Env": [ "PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1", "SANDBOX_E2E_PORT=2222", "PATH=/usr/local/node/bin:/sandbox/home/.local/share/pnpm:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "HOME=/sandbox/home", "DISABLE_AUTOUPDATER=1", "PLAYWRIGHT_BROWSERS_PATH=/ms-playwright", "container=podman", "SANDBOX_TOOLGAP_FILE=/sandbox/toolgap/gaps.jsonl", "BASH_ENV=/etc/overdeck-sandbox/toolgap.bash", "LANG=C.UTF-8", "SANDBOX_ID=staff-tiers-e3f97c32eed5", "SANDBOX_IMAGE=localhost/overdeck-agent-sandbox:ee552bd73dc0", "SANDBOX_E2E_TARGET=user@host.containers.internal", "COREPACK_ENABLE_DOWNLOAD_PROMPT=0", "DEBIAN_FRONTEND=noninteractive", "PNPM_HOME=/sandbox/home/.local/share/pnpm", "PNPM_STORE_DIR=/sandbox/store/pnpm", "HOSTNAME=sandbox-staff-tiers-e3f97c32eed5" ], "Cmd": [ "/bin/sh", "-c", "[ -n \"$HOME\" ] || { echo 'agent_cred: HOME unset in container' \u003e\u00262; exit 10; }; agent_cred_target=\"$HOME/.codex/auth.json\"; agent_cred_dir=$(dirname \"$agent_cred_target\") || { echo 'agent_cred: cannot resolve credential directory' \u003e\u00262; exit 10; }; trap 'rm -f \"$agent_cred_target\"' EXIT HUP INT TERM; mkdir -p \"$agent_cred_dir\" || { echo 'agent_cred: cannot create credential directory' \u003e\u00262; exit 10; }; [ -r '/sandbox-secrets/codex/auth.json' ] || { echo 'agent_cred: staging mount missing: /sandbox-secrets/codex/auth.json' \u003e\u00262; exit 10; }; cp '/sandbox-secrets/codex/auth.json' \"$agent_cred_target\" || { echo 'agent_cred: credential copy failed' \u003e\u00262; exit 10; }; chmod 600 \"$agent_cred_target\" || { echo 'agent_cred: cannot restrict credential mode' \u003e\u00262; exit 10; }; \"$@\"", "sh", "codex", "exec", "--sandbox", "danger-full-access", "--skip-git-repo-check", "-C", "/sandbox/workspaces/staff-tiers-e3f97c32eed5", "-m", "gpt-5.6-terra", "-c", "model_reasoning_effort=medium", "Repo: press-zone-core. Your working directory is a fresh git worktree on branch wt/staff-tiers, off main (which now includes staff-ui-foundation, staff-accounts-detail, staff-jobs, staff-payments, and staff-analytics — apps/web/src/staff/router.tsx exists with a route table, apps/api/src/routes/staff.ts exports STAFF_CAPABILITY and requireStaff). Do NOT commit — leave changes as uncommitted working-tree diffs.\n\nImplement the plan at docs/plans/2026-08-17-staff-tiers.md exactly as written — read it in full first, along with apps/api/src/schema.ts (the subscriptionPackages table you're extending, and pressZoneInitSql), apps/api/src/lib/stripe.ts (the Stripe client to create Prices with), apps/api/src/routes/staff.ts (requireStaff/STAFF_CAPABILITY/audit conventions), and apps/web/src/staff/router.tsx (to replace the /staff/tiers placeholder).\n\nnode_modules are already installed for @press-zone/core-api and @press-zone/core-web in this worktree — do not reinstall from scratch.\n\nAcceptance is defined in the plan doc's own Acceptance section. Run those exact commands yourself in this worktree and report the REAL output — do not claim a pass you did not observe. If a command fails, iterate until it passes or report exactly why it doesn't, with the real error.\n\nReport back: files changed, a summary of the schema change + routes/UI you implemented, and the full real test output for both the API and web acceptance commands." ], "Image": "localhost/overdeck-agent-sandbox:ee552bd73dc0", "Volumes": null, "WorkingDir": "/sandbox/workspaces/staff-tiers-e3f97c32eed5", "Entrypoint": [ "/usr/local/bin/sandbox-egress-init" ], "OnBuild": null, "Labels": { "io.buildah.version": "1.43.2", "io.overdeck.sandbox-context": "ee552bd73dc0" }, "Annotations": { "io.container.manager": "libpod", "io.podman.annotations.cid-file": "/home/user/.local/share/overdeck-sandbox/runs/staff-tiers-e3f97c32eed5/cid", "io.podman.annotations.pids-limit": "512", "io.podman.annotations.userns": "keep-id", "org.opencontainers.image.stopSignal": "15", "org.systemd.property.KillSignal": "15", "org.systemd.property.TimeoutStopUSec": "uint64 10000000" }, "StopSignal": "SIGTERM", "HealthcheckOnFailureAction": "none", "HealthLogDestination": "local", "HealthcheckMaxLogCount": 5, "HealthcheckMaxLogSize": 500, "CreateCommand": [ "podman", "run", "--replace", "--interactive", "--cidfile", "/home/user/.local/share/overdeck-sandbox/runs/staff-tiers-e3f97c32eed5/cid", "--name", "overdeck-sandbox-staff-tiers-e3f97c32eed5", "--hostname", "sandbox-staff-tiers-e3f97c32eed5", "--userns=keep-id", "--cap-drop=ALL", "--cap-add=NET_ADMIN", "--cap-add=SETUID", "--cap-add=SETGID", "--cap-add=SETPCAP", "--security-opt=no-new-privileges", "--pids-limit", "512", "--memory", "12g", "--memory-swap", "12g", "--cpus", "4", "--cpu-shares", "256", "--volume", "/home/user/sandbox:/sandbox:rw", "--volume", "/home/user/.local/share/overdeck-sandbox/secrets/e2e_key:/sandbox-secrets/e2e_key:ro", "--volume", "/home/user/.local/share/overdeck-sandbox/secrets/e2e_known_hosts:/sandbox-secrets/e2e_known_hosts:ro", "--volume", "/home/user/.local/share/overdeck-sandbox/runs/staff-tiers-e3f97c32eed5/egress-rules.nft:/run/overdeck-egress/rules.nft:ro", "--volume", "/var/lib/buildbox/cdx-offload/repos/press-zone-core-6216e86359a3.git:/home/user/cdx-offload/repos/press-zone-core-6216e86359a3.git:rw", "--volume", "/home/user/.local/state/overdeck-sandbox/creds/1786955898736480020-1366050-30436/codex/auth.json:/sandbox-secrets/codex/auth.json:ro", "--workdir", "/sandbox/workspaces/staff-tiers-e3f97c32eed5", "--env", "HOME=/sandbox/home", "--env", "SANDBOX_ID=staff-tiers-e3f97c32eed5", "--env", "SANDBOX_IMAGE=localhost/overdeck-agent-sandbox:ee552bd73dc0", "--env", "SANDBOX_E2E_TARGET=user@host.containers.internal", "--env", "SANDBOX_E2E_PORT=2222", "--entrypoint", "/usr/local/bin/sandbox-egress-init", "localhost/overdeck-agent-sandbox:ee552bd73dc0", "/bin/sh", "-c", "[ -n \"$HOME\" ] || { echo 'agent_cred: HOME unset in container' \u003e\u00262; exit 10; }; agent_cred_target=\"$HOME/.codex/auth.json\"; agent_cred_dir=$(dirname \"$agent_cred_target\") || { echo 'agent_cred: cannot resolve credential directory' \u003e\u00262; exit 10; }; trap 'rm -f \"$agent_cred_target\"' EXIT HUP INT TERM; mkdir -p \"$agent_cred_dir\" || { echo 'agent_cred: cannot create credential directory' \u003e\u00262; exit 10; }; [ -r '/sandbox-secrets/codex/auth.json' ] || { echo 'agent_cred: staging mount missing: /sandbox-secrets/codex/auth.json' \u003e\u00262; exit 10; }; cp '/sandbox-secrets/codex/auth.json' \"$agent_cred_target\" || { echo 'agent_cred: credential copy failed' \u003e\u00262; exit 10; }; chmod 600 \"$agent_cred_target\" || { echo 'agent_cred: cannot restrict credential mode' \u003e\u00262; exit 10; }; \"$@\"", "sh", "codex", "exec", "--sandbox", "danger-full-access", "--skip-git-repo-check", "-C", "/sandbox/workspaces/staff-tiers-e3f97c32eed5", "-m", "gpt-5.6-terra", "-c", "model_reasoning_effort=medium", "Repo: press-zone-core. Your working directory is a fresh git worktree on branch wt/staff-tiers, off main (which now includes staff-ui-foundation, staff-accounts-detail, staff-jobs, staff-payments, and staff-analytics — apps/web/src/staff/router.tsx exists with a route table, apps/api/src/routes/staff.ts exports STAFF_CAPABILITY and requireStaff). Do NOT commit — leave changes as uncommitted working-tree diffs.\n\nImplement the plan at docs/plans/2026-08-17-staff-tiers.md exactly as written — read it in full first, along with apps/api/src/schema.ts (the subscriptionPackages table you're extending, and pressZoneInitSql), apps/api/src/lib/stripe.ts (the Stripe client to create Prices with), apps/api/src/routes/staff.ts (requireStaff/STAFF_CAPABILITY/audit conventions), and apps/web/src/staff/router.tsx (to replace the /staff/tiers placeholder).\n\nnode_modules are already installed for @press-zone/core-api and @press-zone/core-web in this worktree — do not reinstall from scratch.\n\nAcceptance is defined in the plan doc's own Acceptance section. Run those exact commands yourself in this worktree and report the REAL output — do not claim a pass you did not observe. If a command fails, iterate until it passes or report exactly why it doesn't, with the real error.\n\nReport back: files changed, a summary of the schema change + routes/UI you implemented, and the full real test output for both the API and web acceptance commands." ], "Umask": "0022", "Timeout": 0, "StopTimeout": 10, "Passwd": true, "sdNotifyMode": "container" }, "HostConfig": { "Binds": [ "/home/user/.local/share/overdeck-sandbox/secrets/e2e_known_hosts:/sandbox-secrets/e2e_known_hosts:ro,rprivate,rbind", "/home/user/.local/share/overdeck-sandbox/runs/staff-tiers-e3f97c32eed5/egress-rules.nft:/run/overdeck-egress/rules.nft:ro,rprivate,rbind", "/var/lib/buildbox/cdx-offload/repos/press-zone-core-6216e86359a3.git:/home/user/cdx-offload/repos/press-zone-core-6216e86359a3.git:rw,rprivate,rbind", "/home/user/.local/state/overdeck-sandbox/creds/1786955898736480020-1366050-30436/codex/auth.json:/sandbox-secrets/codex/auth.json:ro,rprivate,rbind", "/home/user/sandbox:/sandbox:rw,rprivate,rbind", "/home/user/.local/share/overdeck-sandbox/secrets/e2e_key:/sandbox-secrets/e2e_key:ro,rprivate,rbind" ], "CgroupManager": "systemd", "CgroupMode": "private", "ContainerIDFile": "/home/user/.local/share/overdeck-sandbox/runs/staff-tiers-e3f97c32eed5/cid", "LogConfig": { "Type": "journald", "Config": null, "Path": "", "Tag": "", "Size": "-1B" }, "NetworkMode": "pasta", "PortBindings": {}, "RestartPolicy": { "Name": "no", "MaximumRetryCount": 0 }, "AutoRemove": false, "AutoRemoveImage": false, "Annotations": { "io.container.manager": "libpod", "io.podman.annotations.cid-file": "/home/user/.local/share/overdeck-sandbox/runs/staff-tiers-e3f97c32eed5/cid", "io.podman.annotations.pids-limit": "512", "io.podman.annotations.userns": "keep-id", "org.opencontainers.image.stopSignal": "15", "org.systemd.property.KillSignal": "15", "org.systemd.property.TimeoutStopUSec": "uint64 10000000" }, "VolumeDriver": "", "VolumesFrom": null, "CapAdd": [ "CAP_NET_ADMIN" ], "CapDrop": [ "CAP_CHOWN", "CAP_DAC_OVERRIDE", "CAP_FOWNER", "CAP_FSETID", "CAP_KILL", "CAP_NET_BIND_SERVICE", "CAP_SETFCAP", "CAP_SYS_CHROOT" ], "Dns": [], "DnsOptions": [], "DnsSearch": [], "ExtraHosts": [], "HostsFile": "", "GroupAdd": [], "IpcMode": "shareable", "Cgroup": "", "Cgroups": "default", "Links": null, "OomScoreAdj": 0, "PidMode": "private", "Privileged": false, "PublishAllPorts": false, "ReadonlyRootfs": false, "SecurityOpt": [ "no-new-privileges" ], "Tmpfs": {}, "UTSMode": "private", "UsernsMode": "private", "IDMappings": { "UidMap": [ "0:1:1000", "1000:0:1", "1001:1001:64536" ], "GidMap": [ "0:1:1000", "1000:0:1", "1001:1001:64536" ] }, "ShmSize": 65536000, "Runtime": "oci", "ConsoleSize": [ 0, 0 ], "Isolation": "", "CpuShares": 256, "Memory": 12884901888, "NanoCpus": 4000000000, "CgroupParent": "user.slice", "BlkioWeight": 0, "BlkioWeightDevice": null, "BlkioDeviceReadBps": null, "BlkioDeviceWriteBps": null, "BlkioDeviceReadIOps": null, "BlkioDeviceWriteIOps": null, "CpuPeriod": 100000, "CpuQuota": 400000, "CpuRealtimePeriod": 0, "CpuRealtimeRuntime": 0, "CpusetCpus": "", "CpusetMems": "", "Devices": [], "DiskQuota": 0, "KernelMemory": 0, "MemoryReservation": 0, "MemorySwap": 12884901888, "MemorySwappiness": -1, "OomKillDisable": false, "PidsLimit": 512, "Ulimits": [ { "Name": "RLIMIT_NOFILE", "Soft": 524288, "Hard": 524288 }, { "Name": "RLIMIT_NPROC", "Soft": 127162, "Hard": 127162 } ], "CpuCount": 0, "CpuPercent": 0, "IOMaximumIOps": 0, "IOMaximumBandwidth": 0, "CgroupConf": null }, "UseImageHosts": false, "UseImageHostname": false } ]