From a77955790f62e5f1c65d47e6cd3637de1babafe6 Mon Sep 17 00:00:00 2001 From: Chengjie Wang Date: Thu, 23 Apr 2026 22:15:32 +0800 Subject: [PATCH] feat(sandbox): add procps for ps/top/kill debug tools (#2343) Sandbox users reported that basic process-inspection commands were missing ("ps: command not found"), making it hard to observe what's running inside the container. procps also provides top, kill, free, uptime, and vmstat, which cover the common debug needs without pulling in network probes or build tools that the final image explicitly strips. Pinned to the Debian bookworm version (2:4.0.2-3) to match the rest of the base-image apt list. Signed-off-by: Chengjie Wang --- Dockerfile.base | 1 + 1 file changed, 1 insertion(+) diff --git a/Dockerfile.base b/Dockerfile.base index 448f8ebd049..57ca2693948 100644 --- a/Dockerfile.base +++ b/Dockerfile.base @@ -63,6 +63,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \ iproute2=6.1.0-3 \ iptables=1.8.9-2 \ libcap2-bin=1:2.66-4+deb12u2+b2 \ + procps=2:4.0.2-3 \ && rm -rf /var/lib/apt/lists/* # gosu for privilege separation (gateway vs sandbox user).