From c55458be2c36e9bde8ad9418fe510a20d72d86a9 Mon Sep 17 00:00:00 2001
From: Codex <codex@openai.com>
Date: Wed, 14 Oct 2026 11:51:58 +0200
Subject: [PATCH] Enable BuildKit process sandbox for secure 0.9.0 workers

---
 .../openserverless/system-api/deploy/buildkit/buildkitd.toml  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/setup/openserverless/system-api/deploy/buildkit/buildkitd.toml b/setup/openserverless/system-api/deploy/buildkit/buildkitd.toml
index 0a3c3ce..6a3ebe6 100644
--- a/setup/openserverless/system-api/deploy/buildkit/buildkitd.toml
+++ b/setup/openserverless/system-api/deploy/buildkit/buildkitd.toml
@@ -21,7 +21,7 @@
 [worker.oci]
   enabled = true
   rootless = true
-  no-process-sandbox = true
+  noProcessSandbox = false
   snapshotter = "overlayfs"   # usa overlayfs se il kernel lo consente
 
 [worker.containerd]
@@ -38,4 +38,4 @@
 # Logging
 # =========================
 [log]
-  level = "trace"
\ No newline at end of file
+  level = "trace"