vakna: lockdown blocked <host>
Note
This page is generated from a mock CLI, and its numbers are placeholders.
Verified against vakna 0.0.0-mock on · generated from the CLI's own definitions
Run vakna net allow <host> with the host the error names, then run your command again.
Why did lockdown block a host?
Every box starts in lockdown: it reaches only the hosts you allow, through Vakna's proxy. The command in the box fails the way it would offline, then Vakna names the host it blocked. The exit code stays the command's own; agents branch on the error's code, egress_blocked.
What it looks like
sh
vakna shell api -- pip install -r requirements.txtprints ERROR: Could not find a version that satisfies the requirement flask==3.0.3 (from versions: none)
ERROR: No matching distribution found for flask==3.0.3
ran pip install -r requirements.txt · exit 1 2.40s
vakna: lockdown blocked pypi.org
hint: vakna net allow pypi.org # lockdown blocks it
Exit code 1.
As JSON
With --format json the error is one JSON line. Branch on its code, not on the message or the exit code.
Output
ERROR: Could not find a version that satisfies the requirement flask==3.0.3 (from versions: none)
ERROR: No matching distribution found for flask==3.0.3
{"v":1,"event":"ran","box":"api","id":"sbx_eu1a_01JB7X9K3M4N5P6Q7R8S9T0V1W","command":"pip install -r requirements.txt","exit":1,"ms":2400,"mocked":true}
{"v":1,"event":"error","code":"egress_blocked","message":"lockdown blocked pypi.org","hint":"vakna net allow pypi.org # lockdown blocks it","docs":"https://vakna.com/docs/errors/egress_blocked","mocked":true}