* Whether an env var should be excluded from the container. Drops the * host-only denylist plus macOS/shell-internal prefixes (`__`, `XPC_`, `SSH_`, * `Apple`) that only make sense on the host.
(key: string)
| 57 | * `Apple`) that only make sense on the host. |
| 58 | */ |
| 59 | function isHostOnlyEnvVar(key: string): boolean { |
| 60 | return ( |
| 61 | HOST_ONLY_ENV.has(key) || |
| 62 | key.startsWith('__') || |
| 63 | key.startsWith('XPC_') || |
| 64 | key.startsWith('SSH_') || |
| 65 | key.startsWith('Apple') |
| 66 | ); |
| 67 | } |
| 68 | |
| 69 | /** |
| 70 | * Write env vars to a temp Docker `--env-file` (KEY=VALUE per line). Values |