diff --git a/docs/ai-coder/agent-boundary.md b/docs/ai-coder/agent-boundary.md index 13b3d75e35..3429cc8a9c 100644 --- a/docs/ai-coder/agent-boundary.md +++ b/docs/ai-coder/agent-boundary.md @@ -107,9 +107,9 @@ curl -fsSL https://raw.githubusercontent.com/coder/boundary/main/install.sh | ba Boundary supports two different jail types for process isolation, each with different characteristics and requirements: -1. **nsjail** - Uses Linux namespaces for isolation. This is the default jail type and provides network namespace isolation. See [nsjail documentation](nsjail.md) for detailed information about runtime requirements and Docker configuration. +1. **nsjail** - Uses Linux namespaces for isolation. This is the default jail type and provides network namespace isolation. See [nsjail documentation](./nsjail.md) for detailed information about runtime requirements and Docker configuration. -2. **landjail** - Uses Landlock V4 for network isolation. This provides network isolation through the Landlock Linux Security Module (LSM) without requiring network namespace capabilities. See [landjail documentation](landjail.md) for implementation details. +2. **landjail** - Uses Landlock V4 for network isolation. This provides network isolation through the Landlock Linux Security Module (LSM) without requiring network namespace capabilities. See [landjail documentation](./landjail.md) for implementation details. The choice of jail type depends on your security requirements, available Linux capabilities, and runtime environment. Both nsjail and landjail provide network isolation, but they use different underlying mechanisms. nsjail uses Linux namespaces, while landjail uses Landlock V4. Landjail may be preferred in environments where namespace capabilities are limited or unavailable. diff --git a/docs/manifest.json b/docs/manifest.json index 709d67e2ca..e28fcab781 100644 --- a/docs/manifest.json +++ b/docs/manifest.json @@ -961,7 +961,19 @@ "title": "Agent Boundaries", "description": "Understanding Agent Boundaries in Coder Tasks", "path": "./ai-coder/agent-boundary.md", - "state": ["early access"] + "state": ["beta"], + "children": [ + { + "title": "nsjail", + "description": "Documentation for Namespace Jail", + "path": "./ai-coder/nsjail.md" + }, + { + "title": "landjail", + "description": "Documentation for LandJail", + "path": "./ai-coder/landjail.md" + } + ] }, { "title": "AI Bridge",