User Guide

This guide covers standalone usage of terok-shield — setting up the firewall, configuring allowlists, and managing containers from the CLI.

Topics

• Getting Started — install, set up the hook, run your first shielded container
• Allowlist Profiles — bundled profiles, custom allowlists, profile composition
• Firewall Mode — hook mode (OCI hook)
• CLI Reference — all commands, options, and examples
• Configuration — config file format, paths, environment variables
• Audit Logging — log format, viewing logs, kernel packet logs