didericis-claude da1e5e1ba8 fix(smolmachines): pass --net explicitly when allow_cidrs is set ...

smolvm 0.8.0 docs say `--allow-cidr` implies `--net`, but
empirically the implication only fires when no `--from` is set.
`--from PATH --allow-cidr X/32` silently produces a machine with
network: false and no routes in the guest — claude lands inside
with HTTPS_PROXY pointing at the bundle's pinned IP but every
connect fails with "Network is unreachable" / FailedToOpenSocket
in claude's UI.

Reproduce + verify:
  $ smolvm machine create --from <pack> --allow-cidr X/32 nettest
  $ smolvm machine ls --json | jq '.[].network'  # false
  $ smolvm machine create --from <pack> --net --allow-cidr X/32 nettest2
  $ smolvm machine ls --json | jq '.[].network'  # true

Add `--net` whenever `allow_cidrs` is non-empty. No change to the
no-allow-cidr code path. Test added to lock down both branches.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-27 15:21:43 -04:00

..

__init__.py

…

test_bottle_state.py

feat(state): clean up per-bottle state on session end (except capability-block)

2026-05-25 06:51:13 -04:00

test_capability_apply.py

feat(state): preserve on crash + always snapshot transcript

2026-05-25 07:05:23 -04:00

test_cli_start_settle.py

refactor(start): extract prepare_with_preflight + attach_claude

2026-05-26 03:12:29 -04:00

test_compose.py

refactor(docker): drop legacy per-sidecar container_name functions

2026-05-27 13:04:48 -04:00

test_dashboard_active_agents.py

fix(dashboard): fall back to fresh claude when --continue has no session

2026-05-26 15:34:21 -04:00

test_dashboard_detail_lines.py

refactor: rename egress-proxy → egress everywhere

2026-05-25 21:59:47 -04:00

test_dashboard_highlight.py

feat(dashboard): highlight newly-arrived proposals in green for 5s

2026-05-25 07:54:34 -04:00

test_dashboard.py

feat(dashboard): agent-scoped e/p, drop discover-and-prompt path

2026-05-26 01:50:28 -04:00

test_docker_bottle.py

refactor(bottle): extract claude_docker_argv from exec_claude

2026-05-26 14:21:04 -04:00

test_docker_cleanup.py

refactor(cleanup): compose-ls driven, plus orphan state-dir reaping

2026-05-25 23:48:02 -04:00

test_docker_util_image.py

fix(smolmachines): use containerized crane to push, bypassing docker daemon's HTTPS preference

2026-05-27 14:52:40 -04:00

test_egress_addon_core.py

refactor(egress): write routes.yaml as actual YAML, not JSON-in-yml

2026-05-26 02:17:42 -04:00

test_egress_apply.py

refactor(egress): write routes.yaml as actual YAML, not JSON-in-yml

2026-05-26 02:17:42 -04:00

test_egress_entrypoint.py

feat(sidecars): egress binds 127.0.0.1 when EGRESS_LISTEN_HOST is set (PRD 0023 chunk 3)

2026-05-27 04:49:22 -04:00

test_egress.py

refactor(egress): write routes.yaml as actual YAML, not JSON-in-yml

2026-05-26 02:17:42 -04:00

test_git_gate.py

feat(git-gate): plumb ExtraHosts through to docker --add-host

2026-05-12 23:18:46 -04:00

test_manifest_egress.py

refactor: rename egress-proxy → egress everywhere

2026-05-25 21:59:47 -04:00

test_manifest_git.py

test: drop ssh-gate suites and shadow-route assertions (PRD 0009)

2026-05-12 23:54:22 -04:00

test_manifest_md_load.py

refactor: rename egress-proxy → egress everywhere

2026-05-25 21:59:47 -04:00

test_manifest_runtime.py

…

test_pipelock_allowlist.py

refactor: rename egress-proxy → egress everywhere

2026-05-25 21:59:47 -04:00

test_pipelock_apply.py

feat(pipelock): host-side apply_allowlist_change helper (PRD 0015)

2026-05-25 04:59:13 -04:00

test_pipelock_yaml.py

refactor(sidecars): instantiate sidecar ABCs directly from any backend

2026-05-27 05:42:20 -04:00

test_provision_git.py

feat(smolmachines): provision_ca + provision_git + provision_supervise (PRD 0023 chunk 4d)

2026-05-27 14:15:58 -04:00

test_provision_supervise.py

fix(supervise): provision MCP via claude mcp add, not raw settings.json

2026-05-25 07:19:51 -04:00

test_sidecar_init.py

fix(sidecars): per-daemon pipelock restart keeps supervise socket alive

2026-05-27 02:12:37 -04:00

test_smolmachines_local_registry.py

fix(smolmachines): use containerized crane to push, bypassing docker daemon's HTTPS preference

2026-05-27 14:52:40 -04:00

test_smolmachines_prepare_image.py

fix(smolmachines): use containerized crane to push, bypassing docker daemon's HTTPS preference

2026-05-27 14:52:40 -04:00

test_smolmachines_provision.py

feat(smolmachines): provision_ca + provision_git + provision_supervise (PRD 0023 chunk 4d)

2026-05-27 14:15:58 -04:00

test_smolmachines_sidecar_bundle.py

feat(smolmachines): bundle bringup on per-bottle docker bridge (PRD 0023 chunk 2c)

2026-05-27 04:19:31 -04:00

test_smolmachines_smolvm.py

fix(smolmachines): pass --net explicitly when allow_cidrs is set

2026-05-27 15:21:43 -04:00

test_smolmachines_util.py

feat(smolmachines): rewrite Smolfile to smolvm 0.8.0 schema + drop gvproxy (PRD 0023 chunk 2a)

2026-05-27 04:01:07 -04:00

test_supervise_server.py

refactor: rename egress-proxy → egress everywhere

2026-05-25 21:59:47 -04:00

test_supervise.py

refactor: rename egress-proxy → egress everywhere

2026-05-25 21:59:47 -04:00

test_yaml_subset.py

refactor(egress): write routes.yaml as actual YAML, not JSON-in-yml

2026-05-26 02:17:42 -04:00