From 465edb372daee63fcf79032c28db3df9a873719e Mon Sep 17 00:00:00 2001
From: Danny Canter <danny_canter@apple.com>
Date: Fri, 19 Sep 2025 08:56:12 -0700
Subject: [PATCH] SandboxService: Turn off RunAtLoad for the default plugin
 (#649)

For the default Linux runtime plugin we shouldn't have RunAtLoad on as
it causes the process to be spawned the second we register it with
launchd. This means that for a `container create` we'll have the runtime
plugin process running afterwards. We already register a mach service
for the plugin so on the first rpc it will spawn the process anyways
which is plenty.
---
 config/container-runtime-linux-config.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/container-runtime-linux-config.json b/config/container-runtime-linux-config.json
index 624c622b..2b25aa48 100644
--- a/config/container-runtime-linux-config.json
+++ b/config/container-runtime-linux-config.json
@@ -4,7 +4,7 @@
     "author": "Apple",
     "servicesConfig" : {
         "loadAtBoot" : false,
-        "runAtLoad" : true,
+        "runAtLoad" : false,
         "services" : [
             {
                 "type" : "runtime"