Merge pull request #34 from gustavocabral/cr/enable-sandbox

feat: Add EnableSandbox parameter for optional Docker

Author: JiaDe-Wu

README.md

@@ -491,6 +491,18 @@ CreateVPCEndpoints: false  # For cost optimization
   # Cons: Traffic goes through public internet
 ```
 
+### Sandbox Mode
+
+```yaml
+EnableSandbox: true   # Default: Docker installed
+  # Provides isolated execution for code in group chats
+  # Recommended for shared/team use
+
+EnableSandbox: false  # Skip Docker installation
+  # Faster deployment (~2 min saved)
+  # Use for personal/single-user deployments
+```
+
 ## Security Features
 
 IAM roles eliminate API key risks. CloudTrail logs every API call. VPC Endpoints keep traffic private. Docker sandbox isolates execution.

clawdbot-bedrock.yaml

@@ -79,6 +79,10 @@ Parameters:
       - "true"
       - "false"
 
+  EnableSandbox:
+    Type: String
+    Default: "true"
+    Description: "Install Docker for sandboxed execution (recommended for group chats)"
   CreateS3Bucket:
     Type: String
     Default: "true"
@@ -103,6 +107,7 @@ Conditions:
   AllowSSH: !And
     - !Not [!Equals [!Ref AllowedSSHCIDR, ""]]
     - !Not [!Equals [!Ref KeyPairName, "none"]]
+  EnableDocker: !Equals [!Ref EnableSandbox, "true"]
 
 Mappings:
   # Architecture detection based on instance type
@@ -464,12 +469,16 @@ Resources:
           echo "[3/9] Configuring SSM Agent..."
           snap start amazon-ssm-agent || systemctl start amazon-ssm-agent
 
-          # Install Docker
-          echo "[4/9] Installing Docker..."
-          curl -fsSL https://get.docker.com | sh
-          systemctl enable docker
-          systemctl start docker
-          usermod -aG docker ubuntu
+          # Install Docker (if EnableSandbox=true)
+          if [ "${EnableSandbox}" = "true" ]; then
+            echo "[4/9] Installing Docker..."
+            curl -fsSL https://get.docker.com | sh
+            systemctl enable docker
+            systemctl start docker
+            usermod -aG docker ubuntu
+          else
+            echo "[4/9] Skipping Docker (EnableSandbox=false)..."
+          fi
 
           # Install Node.js
           echo "[5/9] Installing Node.js..."